Cloud Security Engineer Sr.

Company Description

Ent Credit Union exists to improve the financial quality of life of the people we serve. This mission drives us every day, but we are more than our mission. We're also individuals using our unique abilities to make our organization, and the communities we serve, better than they were yesterday. We're a not-for-profit that puts people above profits and actively invests in our community. Our rapidly growing team is expanding our reach to serve more people throughout Colorado. To spread our mission far and wide, we need people like you. If you're interested in a paycheck with a purpose, apply with us today. Our people make the difference, and we truly believe you are our greatest asset.

Job Description

As a key technical leader in the Cloud Team, the Senior Cloud Security Engineer is responsible and in partnership with security leadership for architecting, leading, and executing the security strategy for cloud-based systems within the Azure platform. This role demands a deep understanding of cloud architecture and security frameworks and involves advanced designing, implementing, and overseeing security measures, leading comprehensive risk assessments, formulating and governing security policies, and pioneering automation of security processes. The Senior Engineer plays a pivotal role in monitoring threats, orchestrating responses to security incidents, and mentoring team members. They are responsible for proactively safeguarding data, applications, and infrastructure in Azure, continuously aligning with evolving security best practices and emerging threats. As the senior-most security expert in the Cloud Team, this role involves close collaboration with CloudOps, DevOps, Enterprise Architecture, and security leadership to ensure secure operation and use of Azure cloud resources. Additionally, this role is a key member of our Security Program and will seek guidance from our Security Architect and partner with our other security domains. The Cloud Security Engineer will also work across various IT teams to support their cloud security needs and ensure best practices related to cloud security operations and engineering.

Essential Functions:

• Cloud Security: Champion the protection of cloud assets, including data, applications, services, infrastructure, and networks. Create and manage identity access controls, policies, and configuration to ensure proper authentication and authorization using Privilege Identity Management (PIM) and application registrations. Perform routine permission reviews of access, role, and managed identities. Perform and maintain cloud security risk assessments for new and existing cloud resources. Define, implement, and maintain Azure Policy to enforce governance and security controls.
• Automation & Release Management: Drive innovation in DevSecOps practices, focusing on security-centric automation and efficiency. Lead in developing and maintaining automated compliance and security configurations. Oversee and approve releases and PRs requiring security approval for the cloud team.
• Monitoring & Alerting: Lead vulnerability identification and remediation efforts using advanced security tools; establish and evolve security baselines. Design and implement platform security monitoring technologies, i. e. , Azure Monitor, diagnostic logging and log retention settings, log analytic workspaces, create and customize Defender and Azure monitor alerts. Create and manage custom Azure Monitor security alerts. Review Azure DevOps deployment and Infrastructure as Code (IaC) template security Maintain Azure Policy and Secure Score exceptions list. Review Secure Score for Defender for Cloud compliance reports and address issues. Document exceptions for Defender for Cloud alerts
• Security Program & Cloud Team Collaboration: Lead security discussion in an Agile team with CloudOps, DevOps, and Agile practice team members to address security concerns. Drive and automate security operations in partnership with DevOps engineers. Act as a technical senior advisor to the Cloud Platform Manager and Security Architect to support Ent's security program roadmap related to our Azure cloud platform and tools. Works closely with the Security Architect to implement a defense-in-depth approach using best practices that provide multiple security controls and mechanisms to protect an organization's IT systems and data. Collaborate with other security roles within Ent's federated security program to support our cybersecurity center of excellence. Reviews the work of others, mentors, trains, and aids other team members with technical challenges.
• Research, Education and Security Vigilance: Research native security features for improved monitoring. Perform third-party vendor review. Review new resource types and capabilities to understand associated security risks. Research Security Orchestration, Automation,