Senior Control Engineer

Rockefeller Capital Management•New York, NY

About The Position

The Control Engineer is responsible for architecting, implementing, and operating solutions monitoring and testing performance and reliability of security controls. This role emphasizes operational excellence, automation, and proactive risk mitigation to ensure high availability, performance, and recoverability of critical security controls. The Control Engineer will drive continuous improvement in performance and reliability of security controls, reduce operational risk, and enable rapid recovery and business continuity.

Requirements

8-15 years of fundamental engineering experience in systems, software, and cloud infrastructure
Deep knowledge of networking, operating systems (Windows, Linux, Unix), and distributed/cloud architectures
Experience with security control testing
Expertise in monitoring, observability, incident response, and disaster recovery for cloud and data platforms
Familiarity with SRE principles, service-level objectives (SLOs), and error budgets
Experience with application security, vulnerability management, and secure software development lifecycle
Knowledge of security frameworks (NIST, MITRE) and cloud security standards (CSA, CIS)
Experience with AI/ML security, cloud-native data protection, and automation of security operations
Familiarity with security monitoring, incident response, and threat intelligence in cloud environments
Proficiency in scripting and automation (Python, PowerShell, Bash, etc.).
Proficiency in reliability automation tools, CI/CD, infrastructure-as-code, and DevOps practices.
Hands-on experience with public cloud infrastructure and security (Azure preferred; AWS/GCP a plus)
Ability to communicate complex technical concepts clearly and collaborate across teams
Track record of engineering excellence, integrity, and continuous learning

Responsibilities

Treat security controls as critical infrastructure and proactively test and monitor their performance and reliability.
Design and implement capabilities to proactively test control performance and reliability end-to-end.
Build and maintain monitoring solutions for security controls to detect drift, degradation, and silent failures before they impact security operations.
Engineer automation for control incident triage, remediation, and artifact generation.
Integrate control reliability automation into CI/CD pipelines, infrastructure-as-code, and cloud-native services to reduce manual effort and scale efficiently.
Introduce runtime protection against control failures for critical security controls.
Ensure controls are reproducibly built.
Lead technical investigations, root cause analysis, and incident response for control incidents, performance degradation, and control drift.
Apply standard technical and security incident response practices, including SLO management, root cause analysis, and problem resolution.
Provide quick cold start recovery capabilities to rebuild controls on demand after disruption.
Document and communicate technical risks, solutions, and best practices to technical and non-technical stakeholders.
Fix root causes to eliminate repeat problems and prevent recurrence.
Document designs, data flows, changes, and troubleshooting runbooks to ensure shared learnings and prevent history from repeating.
Educate teams on reliability principles and foster a culture of operational excellence.