Daley And Associates, LLC · 1 day ago
Principal Security and Cloud Engineer
Boston, MA
Contract
Onsite
Lead/Staff
12+ years expDaley And Associates, LLC is seeking a Principal Security & Cloud Engineer who will be responsible for defining, architecting, and advancing the security and infrastructure foundation for a financial services technology environment. This senior role involves designing zero-trust architectures, securing fintech platforms, and serving as the top technical authority for security engineering and infrastructure architecture.
BankingConsultingFinancial ServicesHuman ResourcesInsurance
No H1B
Responsibilities
Define and own enterprise security architecture for investment management and fintech platforms, including portfolio management systems, trading workflows, research environments, and financial data services
Architect and evolve zero-trust security models emphasizing strong identity controls, least privilege, segregation of duties, and continuous verification
Design, implement, and operate advanced security controls across AWS and Azure, including IAM, network segmentation, encryption, key management, logging, and workload protection
Serve as the final technical authority for security architecture reviews, threat modeling, and risk acceptance decisions in regulated financial environments
Engineer detection and response capabilities for financial systems, including SIEM/SOAR pipelines, telemetry strategy, insider-risk monitoring, and incident response automation
Lead complex security incidents involving sensitive financial, investor, or trading data, ensuring rapid containment, forensic integrity, and regulatory readiness
Architect secure, resilient, and highly available infrastructure platforms supporting mission-critical financial and investment applications
Design cloud networking and connectivity models (VPC/VNet architecture, private connectivity, VPNs, firewalls, routing, and high-availability patterns) suitable for low-latency and high-reliability use cases
Ensure platforms meet stringent requirements for availability, integrity, confidentiality, and auditability
Embed security controls into infrastructure and platform designs to support regulatory compliance and operational risk management
Act as a principal-level technical advisor to engineering, risk, compliance, and technology leadership
Establish security engineering standards, reference architectures, and control patterns aligned with financial services regulatory expectations
Partner with risk, legal, and compliance teams to translate regulatory requirements into enforceable technical controls
Evaluate fintech vendors, cloud services, and security tools with a focus on vendor risk, data protection, and operational resilience
Communicate complex technical risks, architecture decisions, and security posture clearly to senior leadership and auditors
Qualification
Required
12–15+ years of experience in security engineering, infrastructure engineering, or cloud platform engineering
Direct experience in investment management, fintech, capital markets, asset management, or financial services environments
Demonstrated success operating as a principal- or staff-level engineer in regulated, high-availability environments
Deep expertise designing and securing cloud and hybrid architectures in AWS and Azure
Strong understanding of financial data flows, market data systems, trading platforms, and sensitive investor information
Proven ability to solve complex, high-risk technical problems with long-term architectural impact
Exceptional technical judgment, analytical rigor, and decision-making ability
Strong communication skills with the ability to influence senior technology, risk, and business leaders
High ethical standards and discretion in handling confidential financial information
Bachelor's degree in computer science, engineering, or a related technical discipline, or equivalent practical experience
Deep hands-on expertise with AWS security services (IAM, Organizations, CloudTrail, GuardDuty, Security Hub, KMS) and Microsoft cloud and security platforms
Strong experience with SIEM/SOAR, endpoint security, vulnerability management, cloud workload protection, and data loss prevention
Expertise in infrastructure-as-code and automation (e.g., Terraform, CloudFormation, ARM/Bicep, scripting)
Advanced understanding of identity and access management, encryption, key management, networking, and secure system design
Familiarity with financial services regulatory and compliance frameworks (e.g., SOC 2, ISO 27001, SEC/FINRA expectations)
Preferred
Advanced security and cloud certifications strongly preferred (e.g., CISSP, AWS Security Specialty, AWS Solutions Architect Professional, Azure Security Engineer)
Company
Daley And Associates, LLC
Daley and Associates is a boutique executive search and contract staffing firm specializing in the placement of Accounting, Finance, Information Technology, Legal, Administrative and Life Sciences professionals.
11-50 employees
Funding
Current Stage
Early StageLeadership Team
Christyn Thatcher
CFO/COO
Hank Phillips
Principal & COO
Company data provided by crunchbase