Senior Cloud Engineer

Sr Cloud Engineer - IE07NE

We’re determined to make a difference and are proud to be an insurance company that goes well beyond coverages and policies. Working here means having every opportunity to achieve your goals – and to help others accomplish theirs, too. Join our team as we help shape the future.   

         

This is a technical position that requires 5+ years of industry experience, as well as the engineering mindset to analyze and identify outstanding governance, risk, and compliance gaps and build maintainable standards and solutions. At The Hartford, our AWS cloud presence is growing and you will have a direct impact on the GRC standards of our cloud portfolio. You’ll have the opportunity to design, build, and innovate GRC related solutions that improve enterprise cloud computing and heighten security and compliance. The right candidate should be passionate for engineering; anything from identifying simple solutions to solving complex problems in support of our enterprise usage of AWS cloud services. This role will be accountable for helping us administrate, manage, and optimize our AWS resource usage, costs and adoption at the Enterprise level.

Responsibilities:

• Actively engineer and implement compliance and security controls to allow internal developers to succeed with cloud products.

• Work closely with engineering, product, and other business units to ensure regulatory control requirements are translated into understandable language that is informed by the organization’s current security practices and standards

• GRC partners closely with Security, Business application owners, IT Infrastructure, IT application owners and IT architecture to ensure controls are operating effectively and informing on decision making to minimize risk

• Ensure technical and operational security controls are incorporated into new services and offerings through participation in planning groups and the review of new systems, installations, and other major changes

• Creation and maintenance of an operational governance framework that is referenceable as a working document to ensure compliance with GRC standards

• Identify, engineer, and support automation to facilitate compliance with Governance Risk and Compliance (GRC) requirements for both preventative and detective controls.

• Integrate Governance Risk and Compliance (GRC) toolsets into enterprise capabilities including Continuous Integration and Continuous Deployment pipelines, IT Service Management tooling, and Data Warehouse Platforms.

• Assist the Teams on creating remediation plans where needed to resolve noncompliance issues

• Establish/Maintain processes and procedures that support audit and compliance management as daily operational functions vs. a disruptive event

• Own the successful planning and execution of 3rd party-risk assessments and audits

• Lead continuous process improvement, automation and third-party tooling that support scalable compliance and audit support functions

• Build rapport, credibility, and cohesion across all business units and teams

• Provide transparency and status reporting through the use of meaningful and actionable scorecards and relevant operational metrics and KPI’s

• Continue learning and building cloud knowledge into new services and solutions as they come to AWS.

• Review Infrastructure as Code templates and deployments for conformance with required controls and governance

• Implement and maintain various AWS tools to execute on GRC strategy

• Recommend, develop, and support automation to facilitate compliance with GRC requirements for both preventative and detective controls.

Qualifications:

• Bachelor's Degree in Computer Science, Engineering or related degree and 5+ years of cloud account administration, compliance and security experience on AWS

• A background in systems, software or IT administration and have been responsible for the implementation of technical security controls

• Expertise in AWS IAM, including IAM best practices surrounding, roles, policies, and permission boundaries.

• Proficiencies with the use of risk and control frameworks, and process improvement models

• Experience with internal/external audit procedures and processes

• Translates compliance and technical requirements into relevant and understandable terms

• Working with agile develo