SENIOR SYSTEMS ENGINEER MIT

City/State:

Grant Funded:

Department:

Work Shift:

Work Days:

Scheduled Hours:

Scheduled Daily Hours:

Pay Range:

The Cloud Cybersecurity Solutions Engineer will serve as the technical expert and implementation specialist responsible for building scalable cloud security controls to protect cloud infrastructure. This individual will lead the implementation, and management of security solutions that protect our cloud infrastructure, support advanced workload scalability, and align with regulatory requirements. The role requires deep technical expertise in multi-cloud services and tools, a background in cybersecurity architecture, and hands-on experience with cloud-native security practices.

In office 4-6 times a year, or as needed.

Key Responsibilities:

• Implement a secure, resilient cloud architecture, aligning with business objectives and regulatory standards.
• Follow blueprints, design patterns, and reusable architecture frameworks for secure cloud deployments.
• Enforce best practices for securing cloud environments, including network segmentation, data encryption, and identity access management, specifically tailored for cloud services.
• Implement governance policies and guardrails for cloud usage across business units, ensuring consistent application of security controls.
• Identify, assess, and prioritize cloud security risks, implementing appropriate mitigation strategies.
• Integrate security monitoring, logging, and alerting with existing SIEM to proactively manage threats.
• Implement and enforce least-privilege IAM roles, fine-grained access policies, security groups, that integrate with existing privileged access management and multi-factor authentication mechanisms.
• Integrate identity federation and single sign-on (SSO) solutions with enterprise IAM solutions.
• Implement encryption strategies for data at rest, data in transit, and data in use that integrate with the enterprise HSM.
• Implement and enforce data protection policies, ensuring sensitive data is managed securely and complies with relevant data protection regulations.
• Implement security automation practices using Infrastructure as Code (IaC) tools.
• Perform the implementation of comprehensive cloud native cybersecurity solutions that protect the organization's critical assets.
• Generate reports and presentations demonstrating that the company cloud architecture complies with relevant laws, regulations, and industry standards (e.g., HIPAA, HITECH, NYSDOH 405.46, HITRUST, etc.).
• Engage with external stakeholders, including vendors, partners, and regulators, to ensure the organization's cloud cybersecurity posture is robust and aligned with industry standards.
• Participate in cross-functional teams in the design and implementation of cloud native security solutions, ensuring collaboration and alignment across the organization.
• Lead the continuous improvement of the organization's cloud cybersecurity posture, ensuring it evolves to address new threats and challenges.
• Stay informed of the latest developments in cybersecurity, participating in professional networks and continuing education opportunities.

Required Skills and Knowledge:

• Deep understanding of cloud-based cybersecurity principles, including encryption, authentication, access control, and network security.
• Extensive experience implementing and managing cybersecurity architectures for complex, multi-cloud environments.
• Expertise in cloud security, identity and access management (IAM), and security information and event management (SIEM) systems.
• Expertise in secure networking practices including segmentation and remote access management.
• Strong strategic thinking skills, with the ability to develop and execute long-term cybersecurity plans.
• Ability to operate within large-scale cybersecurity initiatives and projects, ensuring alignment with organizational goals.
• Excellent communication skills, with the ability to present complex technical information to both technical and non-technical audiences.
• Strong interpersonal skills, with the ability to build relationships and influence stakeholders at all levels of the organization.
• Experience in collaborating with cross-functional teams, including IT, legal, compliance, and business units.

Required Experience:

• Experience: 10+ years of experience in cybersecurity, with a focus on cloud configuration and management.
• Experience in Cloud Cybersecurity Tools and Practices: Hands-on experience implementing and managing cybersecurity solutions in complex multi-cloud organizations.

Education:

• Bachelor's degree or equivalent experience in Cybersecurity, Computer Science, Information Security, or a related field.

Certifications (Preferred but not required):

• AWS Certified Security - Specialty
• Microsoft Security Operations Analyst (SC-200)
• Microsoft Identity and Access (SC-300)
• Administering Information Protection and Compliance in Microsoft 365 (SC-400)
• Microsoft Azure Security Technologies (AZ-500)
• Google Professional Cloud Security Engineer
• ISC2 Certified Cloud Security Professional (CCSP)
• GIAC Cloud Security Automation (GCSA)
• GIAC Cloud Threat Detection (GCTD)
• EC-Council Certified Cloud Security Engineer

SF-DICE-MIT