Senior DevSecOps Cloud Consultant

Summary

Vertical Relevance is looking for an AWS Dev Sec Ops / Security & Compliance Consultant, to join our team as a full-time employee in our work remotely. This person is responsible for the end-to-end planning, building, and deploying of software systems. Andbe able to drive the programming of well-constructed, testable code and work out of the New York Metro area.

As an AWS Dev Sec Ops /Security & Compliance Consultant, you will implement technical solutions as part of a team for customer engagements. This role requires strong teamwork, communication, patience and organization skills needed to drive customer success.

At Vertical Relevance we deliver with excellence through teamwork, automating everything, constantly learning and taking ownership for the outcomes our customers experience. Are you ready to join the team?

Responsibilities

• Help customers shape their journey to adopting the cloud and provide our customers with technical and strategic guidance on their “cloud journey”.

• Consult, plan, design, and implement security solutions on thecloudcustomers

  • Design and automate security and compliance solutions

  • Become a deep technical resource that earns our customer strust

  • Develop high-quality technical content such as automation tools, reference architectures, and white papers to help our customers build on the cloud

  • Innovate on behalf of customer sand translate your thoughts into action yielding measurable results.

• Support solution development by conveying customer needs and feedback as input to technology roadmaps. Share real world implementation challenges and recommend expansion of capabilities through enhanced and new offerings.

  • Assist with technical briefs that document solutions

  • Assist with reference architecture implementations

• Support internalandexternal brand development through thought leadership:

  • Work with Marketing/Alliances to write blog posts

  • Work with Marketing/Alliances to develop internal case studies

Qualifications

• Professional experience architecting/operating automated
  
  Security& Compliance /Dev Sec Ops solutions  built on AWS

• Experience in software/technology customer facing experience and Financial Services +

Sample Activities You’ll Do

Creating aSelf-Service Account Framework

• Assist Customer with organizational hierarchy design and configuration templates

• Assist Customer in the development of referenceable playbooks, supported by relevant code examples

• Assist Customer in the development of sample runbooks to automate the implementation of AWS account setup and configuration

• Account Framework
  - Developing an automated Continuous Delivery Pipeline framework that will be used to establish AWS Accounts to configured, tested infrastructure on AWS in a repeatable, reliable and secure manner eliminating the need for manual intervention.

• Security Control Policies
  - Development of the Service Control Policies and account baselines associated with the Customer’s security and compliance requirements

• Assist Customer with the development of a report and supporting sample code addressing the controls aspart of the playbook

Creating Security Threat Analytics and Dashboard Solutions

• Creating a framework to automatically gather, transform and interpret security event data in AWS.

• Selecting, defining, identifying security requirements and determine where:

  • Macie can be leveraged

  • Guard Dutycan be leveraged

  • Inspector can be leveraged

  • Security Hub can be leveraged

  • Alternative security products can be leveraged

• Codify the provisioning of security analytics and reporting workflow:

  • Implement Security Hub with in a central account with inputs from all accounts

  • Implement Guard Dutyfor  global security events

  • Implement Macie for detection of sensitive data in 23 buckets

  • Develop AWS Config rules to enforce security configurations in CIS AWS Foundations standard

  • Implementing Inspector to gather findings from EC2 instances

  • Enable Cloud Trail for monitoring API activity

  • Enable Flow Logsfor  VPC traffic

Creating a Self-Service Compliance Framework

• Selecting tools for building Policy-as-Code controls (preventative, detective, and responsive)

• Development of referenceable playbooks, supported by relevant code examples for controls

• Development of sample…