Apply on Employer Site

UMB Bank · 11 hours ago

Cloud Security Engineer

Kansas City, MO

Full-time

Hybrid

Mid Level

$83K/yr - $179K/yr

4+ years exp

UMB Bank is looking for a Cloud Security Engineer to serve as a subject matter expert in cloud security. The role involves defining and executing security controls for cloud environments, collaborating with various teams to ensure secure solutions, and providing operational support for information security initiatives.

BankingFinanceFinancial Services

No H1B

Responsibilities

Define and execute public cloud-centric security controls and help design secure patterns for computing, storage, networking, operational, and security domains. This includes advising application, product, and cloud infrastructure teams on incorporating cloud infrastructure capabilities with an information security mindset, actively collaborating with cloud stakeholders to deliver best-fit secure solutions for UMB, and identifying emerging cloud infrastructure services and needs to meet business requirements

Serve as a pragmatic, results-driven thought leader and consensus builder with a technology-savvy mindset capable of articulating complex IT concepts to all audiences, from technical contributors inside and outside the company

Deploy, consult, and manage security controls leveraging solutions included but not limited to AWS multi-accounts structure, Organizational Units, Service Control Policies (SCP), IAM policies, Virtual Private Cloud (VPC), AWS Control Tower Guardrails and best practices

Partner with application teams to support them in their design and implementation of infrastructure-as-code stacks that meet the needs of the applications leveraging technologies, included but not limited to Terraform, CloudFormation, CDK constructs, and Ansible

Advise on all aspects of secure cloud infrastructure offerings and solution design

Provide hands-on technical coaching to accelerate cloud security learnings across the organization

Provide accurate and current information on AWS services and serve as a consultant to the IT Information Security organization to solve business use cases

Qualification

Cloud security expertiseInfrastructure-as-code (IaC)AWS services knowledgeAutomation methodologiesScripting languagesContainer technologiesSecurity certificationsCollaboration skillsCommunication skills

Required

Bachelor's Degree in Management Information Systems, Computer Science or related field OR equivalent work experience

At least 4 years of experience designing and implementing secure solutions and securing public cloud workloads

At least 2 years of experience with Metrics, Events, Logging, and Tracing solutions like Cloudtrail, CloudWatch, or Splunk

Strong infrastructure-as-code (IaC) expertise and deployment experience with technologies such as Terraform or AWS CloudFormation

In-depth experience with automation methodologies, processes improvement, and development of CI/CD pipelines

Demonstrated knowledge/experience with at least 2 scripting languages like Python, PowerShell, AWS/Azure CLI, Ansible, Bash, and JSON

Hands-on experience deploying and operating AWS computer instances (EC2), AWS Storage Services (EBS/S3/Glacier), AWS multi-accounts environment, IAM Policies, AWS Tower, AWS Config, and Service Control policies (SCP)

Demonstrated knowledge with configuration management and pipeline automation with AWS DevOps, Jenkins, Git or similar offering

Knowledge with container technologies, such as Docker, Kubernetes, AWS EKS and ECS

Collaborated with service providers and partners

Working knowledge and expertise with common enterprise-grade security solutions

Preferred

Experience with Amazon GuardDuty, AWS Shield, and Amazon Inspector services

Any of the following certifications: AWS Solutions Architect Associate, AWS Certified Security – Specialty, CompTIA Cloud+, Certified Cloud Security Professional (CSSP), Certificate of Cloud Security Knowledge (CCSK), GIAC Cloud Security Automation (GCSA)

Previous experience working within the banking or financial industry