Cloud Security Engineer

• →Review and audit AWS/GCP/Azure environments spanning across multiple business units and recommend changes to reduce risk and improve security.
• →Support development and work with technologists across the firm to unify cloud security efforts.
• →Integrate services and access routes in a data intensive hybrid cloud environment. 

Provide architectural recommendations and support to ensure cloud and Kubernetes environments are securely deployed, including controls for role-based access, workload identity, network policies, secrets, container images, admission policies, runtime protection, logging, and monitoring.

• →Provide recommendations and create working examples of secure hybrid cloud implementations.
• →Helping business units across the firm to securely migrate on-premise designed software to the appropriate cloud technologies.
• →Stay abreast of new developments in the areas of cloud technology, security, services, and networking. 
• →Work with vendors and vendor solutions to evaluate products, produce recommendations for the firm, and educate internal clients. 
• →Have a strong grasp of technologies that can be leveraged across both cloud and on-premise deployments (user supported authorization, etc).
• →Identify and analyze vulnerabilities and work with the various business units on remediation.
• →Continuously assess and enhance cloud privilege models to ensure least privilege access to data and services.
• →Respond to any security related incidents.

• Bachelor’s degree or relevant work experience required. 
• Relevant cloud certifications are a plus.
• Strong knowledge of cloud encryption technologies including key management such as (KMS, HSM, etc).
• 5+ years of experience working with Amazon Web Services, with exposure to other cloud vendors such as Google Cloud Platform and Microsoft Azure. 
• A strong command of infrastructure-as-code tools such as Terraform, CloudFormation, and related technologies.
• Proficient with containerization and Kubernetes in Linux environments, including Kubernetes architecture, workloads, networking, managed services, security configuration assessment, vulnerability remediation, and automated guardrails using infrastructure-as-code and policy-as-code.
• Proficient with at least one applicable programming language (Python, Go, Javascript, etc).
• Experience with automation in the cloud, in addition to services used in loosely coupled serverless architectures, such as Lambda, SQS, API Gateway, and DynamoDB. 
• Knowledge of cloud security best practices and cloud based controls.
• Familiarity with security considerations, capabilities, and regulatory adherence for services across cloud providers.
• Working knowledge of networking in hybrid cloud environments. 
• Must work well in a fast-paced, dynamic work environment and have strong work ethic and initiative.
• Proven ability to troubleshoot and resolve production problems while making sensible decisions in times of stress.
• Excellent verbal/written communication skills and documentation/knowledge management skills.

The annual base salary range for this position is $150,000 USD to $200,000 USD depending on the candidate’s experience, qualifications, and relevant skill set. The position is also eligible for an annual discretionary bonus. In addition, DRW offers a comprehensive suite of employee benefits including group medical, pharmacy, dental and vision insurance, 401k (with discretionary employer match), short and long-term disability, life and AD&D insurance, health savings accounts, and flexible spending accounts.