Cloud Security Generalists - AZ
Cloud Security Generalist Kubernetes Security
The Cloud Security Engineering team is dedicated to seamlessly integrating security through automation and collaboration across Technology Risk, Information Security, and various Technology teams. As an Information Security Analyst specializing in Kubernetes Security, you will play a key role in designing and implementing security measures for cloud infrastructure, spanning cloud platforms, containers, networks, and storage systems. Your primary focus will be automating security policies and establishing guardrails to facilitate secure cloud adoption in the enterprise s Hybrid Multi-Cloud environment.
This role demands strong problem-solving skills, multitasking abilities, and a proactive approach to tackling security challenges. You will work closely with Cloud Security Governance, Cloud Security Operations, and other key teams to deliver security-as-code solutions, ensuring automation, zero-touch security, and robust infrastructure protection.
Key Responsibilities
Design and implement cloud security solutions for private and public multi-cloud environments.
Provide security and engineering expertise for Cloud Programs, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Policy as Code (PaC).
Collaborate with enterprise architects and subject matter experts to develop and deploy security architecture solutions.
Establish and enforce container security policies for Kubernetes clusters, covering VMs, Containers, CNI, CSI, and Service Mesh architectures.
Develop security rules and policies using Terraform Sentinel to ensure compliance across cloud environments.
Define and implement security policies with OPA Gatekeeper.
Implement service control and security policies, prioritizing Google Cloud Platform (Google Cloud Platform), followed by Azure and AWS.
Automate security controls and processes using infrastructure-as-code methodologies.
Communicate key security insights and findings to both technical and non-technical stakeholders.
Educational Requirements
Bachelor s Degree in Computer Science, Software Engineering, Electrical & Computer Engineering (ECE), or a related Information Security field.
Required Skills & Experience
Terraform Sentinel: 2+ years of experience writing Terraform rules and Sentinel policies.
Cloud Security Policy Management: Experience managing security policies for Google Cloud Platform (preferred), Azure, and AWS.
OPA Gatekeeper: Hands-on experience defining security policies.
Container Security: Strong background in securing Kubernetes environments.
Certified Kubernetes Administrator (CKA) or equivalent work experience.
Information Security Experience: 3+ years in security roles.
Policy as Code (PaC): 3+ years of experience implementing security policies as code.
Cloud Security Fundamentals: Deep understanding of cloud security best practices and data protection controls.
Configuration Validation: Experience verifying and enforcing secure cloud configurations.
Security Configuration Management: Knowledge of endpoint security, secrets management, and security best practices in cloud applications.
Infrastructure as Code: Proficiency in defining resource configurations using Terraform or Helm.
DevOps & DevSecOps: Familiarity with modern DevOps and DevSecOps methodologies.
Preferred Qualifications (Nice-to-Have)
Experience with Golang or Python for security automation.
Certified Kubernetes Security Specialist (CKS).
Additional security or cloud certifications, such as CISSP, CISM, or CCSP.
Cloud Security Generalist Kubernetes Security
The Cloud Security Engineering team is dedicated to seamlessly integrating security through automation and collaboration across Technology Risk, Information Security, and various Technology teams. As an Information Security Analyst specializing in Kubernetes Security, you will play a key role in designing and implementing security measures for cloud infrastructure, spanning cloud platforms, containers, networks, and storage systems. Your primary focus will be automating security policies and establishing guardrails to facilitate secure cloud adoption in the enterprise s Hybrid Multi-Cloud environment.
This role demands strong problem-solving skills, multitasking abilities, and a proactive approach to tackling security challenges. You will work closely with Cloud Security Governance, Cloud Security Operations, and other key teams to deliver security-as-code solutions, ensuring automation, zero-touch security, and robust infrastructure protection.
Key Responsibilities
Design and implement cloud security solutions for private and public multi-cloud environments.
Provide security and engineering expertise for Cloud Programs, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Policy as Code (PaC).
Collaborate with enterprise architects and subject matter experts to develop and deploy security architecture solutions.
Establish and enforce container security policies for Kubernetes clusters, covering VMs, Containers, CNI, CSI, and Service Mesh architectures.
Develop security rules and policies using Terraform Sentinel to ensure compliance across cloud environments.
Define and implement security policies with OPA Gatekeeper.
Implement service control and security policies, prioritizing Google Cloud Platform (Google Cloud Platform), followed by Azure and AWS.
Automate security controls and processes using infrastructure-as-code methodologies.
Communicate key security insights and findings to both technical and non-technical stakeholders.
Educational Requirements
Bachelor s Degree in Computer Science, Software Engineering, Electrical & Computer Engineering (ECE), or a related Information Security field.
Required Skills & Experience
Terraform Sentinel: 2+ years of experience writing Terraform rules and Sentinel policies.
Cloud Security Policy Management: Experience managing security policies for Google Cloud Platform (preferred), Azure, and AWS.
OPA Gatekeeper: Hands-on experience defining security policies.
Container Security: Strong background in securing Kubernetes environments.
Certified Kubernetes Administrator (CKA) or equivalent work experience.
Information Security Experience: 3+ years in security roles.
Policy as Code (PaC): 3+ years of experience implementing security policies as code.
Cloud Security Fundamentals: Deep understanding of cloud security best practices and data protection controls.
Configuration Validation: Experience verifying and enforcing secure cloud configurations.
Security Configuration Management: Knowledge of endpoint security, secrets management, and security best practices in cloud applications.
Infrastructure as Code: Proficiency in defining resource configurations using Terraform or Helm.
DevOps & DevSecOps: Familiarity with modern DevOps and DevSecOps methodologies.
Preferred Qualifications (Nice-to-Have)
Experience with Golang or Python for security automation.
Certified Kubernetes Security Specialist (CKS).
Additional security or cloud certifications, such as CISSP, CISM, or CCSP.