2 days onsite - remote the rest of week preferred/ Will consider remote

Description:

Cloud Security Engineer - Risk Reduction Role Summary We are looking for an experienced Cloud Security Engineer to drive the remediation of our public cloud platforms (GCP, Azure and AWS). In this role, you will help us improve client's cloud security posture. You will work at the intersection of cloud resources, backend systems, networking, and data engineering to deliver scalable security solutions. Key Responsibilities Define Secure patterns for

Cloud Deployments:

Develop and publish security requirements for the most common cloud deployments patterns in GCP, Azure or AWS. This might involve also building Terraform code and/or scripts to enable end users to adopt the pattern.

Modernize existing CSPM solution:

Help with selecting and testing CSPM tool alternatives and work with key stakeholders to build up an Enterprise ready new CSPM environment for our public cloud footprint.

Policy-as-code:

You will be responsible to enforce secure patterns for cloud deployment using policy-as-code frameworks like OPA/rego. This includes building, testing/validating and maintaining a library of policies for the Enterprise to consume. Qualifications (About You)

Experience:

5+ years of Cloud Engineering experience with a 4-year degree (or equivalent experience). GCP is a must-have.

Technical Depth:

Strong proficiency in cloud engineering, traditional infrastructure and automation (infrastructure-as-Code, Scripting, CI/CD etc.)

Problem Solving:

Ability to design new testing methods and resolve complex technical issues with minimal assistance.

Architecture:

Ability to navigate the current architecture and repositories to understand the context of the issues at stake. Ability to anticipate problems and/or possible outages in the proposed remediation plans.

Communication:

Clearly communicates Agile concepts to partners and demonstrates a commitment to team priorities.

Continuous Learning:

Stays current with evolving technologies via formal training and self-directed education.

Required Technical Skills Policy-as-Code:

Experience developing policy-as-code libraries e.g Rego, Sentinel, CEL (Rego strongly preferred)

GCP Experience:

GCP certification required.

TECHNICAL SKILLS

Must Have Language:

5+ years writing automation pipelines and/or scripts for GCP specifically.

Infrastructure-as-Code:

at least 3+ years writing production Terraform code in a complex environment (e.g. >100 GCP projects)

Infrastructure:

Proficiency with on-prem and cloud networking (SDN). Strong understanding of core infrastructure components on-prem and in the cloud: compute, storage, databases, IAM etc. Nice To Have Experience with Azure or AWS Experience with Github or Atlantis Experience with Cloud Security specifically Mix of infrastructure and security background

Notes:

2 days onsite - remote the rest of week preferred/ Will consider remote VIVA is an equal opportunity employer. All qualified applicants have an equal opportunity for placement, and all employees have an equal opportunity to develop on the job. This means that VIVA will not discriminate against any employee or qualified applicant on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status