Position Overview

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Software Engineer within PNC’s Technology organization, you will be based in Pittsburgh, PA; Cleveland, OH; Birmingham, AL or Dallas, TX. The position is primarily based in a PNC location. Responsibilities require time in the office or in the field on a regular basis. Some responsibilities may be performed remotely, at the manager’s discretion.


Position Overview:
PNC’s Cloud Security Development team is looking for a candidate who has technical experience or a desire to grow in developing products, capabilities, and reporting for cloud security configuration management and compliance in both AWS and Azure. As a Cloud Security Software Engineer, you will write automation that will deploy and measure security policy controls for resources in public cloud, assess posture management at build time from deployment pipelines, and build near real-time reporting databases and views of compliance across public cloud. This role is for a direct hands-on-keyboard individual who will deliver and develop enhancements to our team’s product suite both independently and collaboratively with a team.

You will work closely with partner security engineering teams to understand product requirements and how it relates to infrastructure security posture within AWS and Azure. You will assist in the development of DevOps practices within PNC and assist with the rollout of IAC scanning and reporting capabilities on the existing and future posture management. You will be assisting in executing techniques to integrate security automation into the processes that develop, test, build, configure, provision, and deploy cloud solutions across the enterprise. You will write code, tests, and automation with the guidance of the technical lead and principal members of the team in order to support the cloud compliance program to meet the needs of the cloud compliance program.

Job responsibilities will include:
• Assist Security Development team members with the development and operationalization of enterprise requirements for security, compliance, and access for public cloud
• Assist in automating and orchestrating the process of cloud software deployment (CI/CD) to integrate enterprise security standards, policies, configurations, and architectures into the PNC deployment mechanisms for applications, platforms, and infrastructure deployments
• Write source code to maintain, improve, and implement automation of reporting, compliance check deployments, and other automation as required (Python, SQL, Groovy)
• Perform deployments of our code to both Public and Private Cloud (AWS, Azure, OpenShift)
• Maintain and growing knowledge of relevant technologies in the public cloud and private cloud
• Implement security engineering feedback to programs and capabilities throughout the software development lifecycle to ensure systems meet NIST and Cloud standards
• Ensure the security posture of applications seeking deployment into production

Preferred Qualifications:
• 1-3 years of relevant Development, DevOps, or Security experience with one or more public cloud technologies
• Inquisitive and resourceful – not afraid to network within the organizations to ask relevant questions
• Ability to handle sensitive and confidential information appropriately
• Experience with programming languages and in writing automation scripts (Python)
• Knowledge and experience with CI/CD and DevOps tools such as BitBucket/GitHub/GitLab, Jenkins, Azure DevOps, Groovy, and Terraform
• Knowledge and experience with containerization (Docker, Rancher, Kubernetes, AKS, OpenShift)
• Prior usage of Serverless functions (Azure Function, AWS Lambda)
• Prior usage of relational databases (SQL)
• Knowledge and experience with Security / DevSecOps tools
• Prior usage of Cloud Security Posture Management tools (Azure Policy, AWS Config, Prisma Cloud)
• Strong troubleshooting/problem solving abilities
• Experience working with rele