Security Engineering

Engineering - Cloud Security - Security Architecture & Platform Engineering - Vice President - Seattle Seattle, Washington, United States

At Goldman Sachs, our Engineers don’t just make things – we make things possible. Change the world by connecting people and capital with ideas. Solve the most challenging and pressing engineering problems for our clients. Join our engineering teams that build massively scalable software and systems, architect low latency infrastructure solutions, proactively guard against cyber threats, and leverage machine learning alongside financial engineering to continuously turn data into action.

Create new businesses, transform finance, and explore a world of opportunity at the speed of markets. Goldman Sachs Engineers are innovators and problem-solvers, building solutions in Artificial Intelligence, risk management, big data, mobile and more.

As part of Core Engineering at Goldman Sachs, the Cloud Platform team is responsible for enabling the use of public cloud services across the firm. You will be working as part of multi-disciplinary team responsible for researching, architecting and building a cutting-edge platform that enable Goldman Sachs teams to deploy and manage services in public cloud safely and securely. We are at an early stage of modernizing our services around cloud native principles, and you will be directly contributing to platform that programmatically enforces safety, security and compliance of services and enables engineers to innovate faster.

The organization is seeking highly collaborative, creative, and intellectually curious engineers who are passionate about developing and implementing cutting-edge cloud computing solutions. The ideal candidate will thrive in a Dev Ops culture and contribute to customer-centric product development. They will work closely with cross-functional teams, and will be creative collaborators who evolve, adapt to change and thrive in a fast-paced global environment.

• Design, implement, and maintain secure cloud architecture aligned with NIST frameworks and industry-recognized cloud security standards, ensuring compliance, resilience, and least-privilege access across cloud environments
• Lead deployment and integration of cloud security posture management platforms with enterprise services including risk management systems, monitoring infrastructure, security information and event management (SIEM), and compliance frameworks
• Architect policy-as-code frameworks for infrastructure security controls, enabling shift-left security and automated compliance validation across multi-cloud environments
• Define and implement secure-by-default infrastructure patterns for cloud account provisioning and service onboarding

• Demonstrates thought leadership:
  Guides and upskills other engineers and clients in cloud best practices; demonstrates expertise with automation and infrastructure as code (IaC)
• Deep understanding of AWS services and how to leverage them
• Lead strategic initiatives for cloud-native authentication and authorization, including certificate-based service identity frameworks and fine-grained access control systems
• Partner with middleware and platform engineering teams on secure messaging infrastructure migration from on-premise to cloud-native solutions
• Provide regional timezone coverage for cloud access and security platform operational issues, participating in 24/7 follow-the-sun support model
• Past enterprise level experience in Dev Ops, Software, Infrastructure or Site Reliability Engineering
• Proficient in infrastructure as code practices using technologies such as CDK, Terraform, AWS Cloud Formation, and/or Salt Stack
• Experience building CI/CD pipelines from scratch with integrated security gates and automated policy enforcement
• Hands-on experience developing and improving all phases of the software development/delivery lifecycle
• Strong grasp of container technology and container orchestration

• Proficient in one or more enterprise scale observability tools such as Splunk, Datadog, Fluent
  
  D, ELK
• Experience maintaining and improving the reliability of applications and infrastructure
• Implement SLO/SLI frameworks, monitoring strategies, and automated remediation workflows
• Lead root cause analysis for security and access control incidents, implementing preventive measures
• Ability to document solutions, cloud architectural patterns, and best practices to ensure that clients have guidance as needed
• Proven ability to partner with cloud hyperscale partners to define and troubleshoot cloud architectures and service enablements
• Establish trusted partnerships with Tech Risk, Compliance, Platform Engineering, and business unit stakeholders
• Mentor Associate and Analyst-level engineers on platform internals, security best practices, and operational excellence

• Solid understanding of…