Cloud Engineer

Responsibilities

• As a Cloud Security Engineer, you will work within a diverse team comprised of passionate technologists who believe in the power of innovation and constant collaboration. We believe that small, empowered, self‑motivated teams can achieve outstanding things. We are passionate about open‑source contribution, sharing our expertise and knowledge with the engineering community while adopting a continuous learning approach supported by a dedicated learning day each week.
• The Azure Security and Service Enablement squad is seeking a highly technical, hands‑on security engineer with experience on large‑scale and/or business critical Azure environments. On this squad, you will bring your cloud security skillset to a group of talented engineers that are continuously innovating and improving our capabilities to enable the acceleration of Fidelity’s journey to the cloud. You will work on a wide variety of cloud native stacks and technologies, demonstrating groundbreaking architectures and services.
  
  This squad is the starting point for all security capabilities, guardrail definition and service enablement for our Azure environment.
• Designing, scaling, and deploying various cloud security controls and services
• Building processes and workflows along with a consolidated and collaborative integration of IaaS, SaaS, and PaaS cloud services
• Ensuring seamless user experience with advanced security and compliance of our cloud infrastructure
• Maintaining and containing business risk as it pertains to the Azure cloud infrastructure
• Working across teams and Business Units to define requirements and deliver solutions
• Building comprehensive security controls to enforce policy
• Supporting business unit technologists deploying to the public cloud

• 6-9 years of experience in IT infrastructure, security, compliance
• A strong understanding of Azure services and security capabilities
• Solid hands‑on experience with at least two of the following:
• Engineering/operational support of cloud account configuration in AWS or Azure
• Software Development, Linux Systems Administration, Data Networking
• Hands‑on configuration of CI/CD pipelines for cloud‑native deployments
• Very strong with scripting languages, including integration with CSP APIs; python preferred
• Identity and Access Management - RBAC
• Azure Security Services - Security Center, Key Vault, Log Analytics
• Ability to work with application and security teams to promote a secure posture in the cloud
• You can mentor and train other team members to work effectively in the cloud
• You are a self‑starter who can independently by reading technical documentation
• Advanced Azure Certifications

Mid‑Senior level

Full‑time

IT Services and IT Consulting