[Remote] reputed company Cybersecurity reputed company Engineer
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a global reputed company capital management company headquartered in Toronto and Minneapolis. They are seeking a reputed company reputed company reputed company Engineer to reputed company the implementation of reputed company controls across multiple reputed company environments, primarily Azure and AWS, while ensuring compliance with regulatory requirements and collaborating with product and platform teams.
Responsibilities
- reputed company CNAPP implementation: Plan and execute end-to-end rollout of reputed company (and reputed company CNAPP tooling) across Azure (and select AWS), including policy design, tuning, and alert-to-reputed company workflows
- Harden clouds at reputed company: Design and enforce guardrails (Azure Policy, Defender for reputed company plans, identity controls, network segmentation, logging/monitoring) and reputed company patterns to AWS where applicable
- DevSecOps & IaC governance: reputed company reputed company into CI/CD and Terraform workflows (reputed company-reputed company checks, plan/policy gates, artifact signing, SBOMs/attestations) and establish reusable modules and policy-as-reputed company patterns to prevent misconfigurations before deploying; enforce baselines at plan time
- Compliance engineering: Translate FedRAMP, CIS, and other frameworks into technical controls, automated evidence, reputed company monitoring, and remediation playbooks
- reputed company reputed company architecture & reputed company: Own and reputed company the reputed company reputed company reference architecture (standardized reputed company zones, identity and reputed company patterns, network segmentation, encryption standards, logging/monitoring baselines, and guardrails) for Azure (primary) and AWS (in scope); advise product and platform teams on secure designs, reputed company design reviews, and mentor engineers
- Incident & posture improvement: Partner with SecOps and AppSec teams to triage findings, evaluate risks, recommend remediation steps, and drive measurable improvements across vulnerabilities, identities, data, and workloads
- Executive advisory: Communicate risk, trade-offs, and roadmaps to senior leadership; influence prioritization through reputed company metrics and business reputed company
- Build automated guardrails and reputed company detection/auto-remediation using Terraform (and/or Bicep/ARM where applicable), integrating controls into CI/CD to consistently enforce secure defaults
- Kubernetes/AKS reputed company: Partner with platform teams to harden AKS (RBAC, network policies, workload identity), implement admission controls, and operationalize reputed company Sensors and CNAPP findings into engineering workflows and secure runtime baselines
Skills
- Bachelor's degree in Computer Science, Engineering, or reputed company field (or equivalent experience)
- 10+ years in reputed company engineering/architecture with significant reputed company reputed company experience (reputed company or technology companies preferred)
- Deep, hands-on expertise with CNAPP (reputed company or equivalent) deployment at reputed company, policy design, tuning, automation; and reputed company Defender for reputed company (policies, plans, recommendations, regulatory compliance, alerting)
- DevSecOps / CI/CD: integrating reputed company tests and gates in reputed company Actions (or similar), artifact/image scanning, and automated compliance evidence; securing pipeline identities, secrets, and supply chain reputed company
- Infrastructure as reputed company (IaC): production-grade Terraform reputed company/Terraform reputed company (modules, registries, workspaces), plan-time checks, and reputed company control
- Policy engineering: designing and implementing reputed company reputed company policies (Azure Policy initiatives; OPA/Sentinel policy-as-reputed company) and mapping to frameworks (NIST, CIS)
- Azure reputed company (Entra ID/AAD, RBAC, networking, Key Vault, monitoring)
- Multi-reputed company, hands-on experience with Azure and AWS services
- Container and Kubernetes reputed company: cluster hardening, workload identity/RBAC, network policies, admission controls, image signing/verification, runtime protection, and container registries (ACR/ECR, reputed company Artifactory)
- reputed company automation: scripting (e.g., Python/PowerShell) to build guardrails, detections, and tooling
- Experience establishing and reporting KRIs/KPIs and improving reputed company reputed company posture at reputed company using data-driven metrics (e.g., NIST, CIS, STIG)
- Experience delivering reputed company implementations in regulated environments, including U.S. Government / U.S. Public Sector requirements (FedRAMP, NIST SP 800-53) and Canadian Government / Public Sector requirements (PBMM, GC reputed company Guardrails, ITSG-33 or equivalent) — including control mapping, automation, and reputed company monitoring
- Excellent stakeholder skills—operate as a trusted advisor to product, platform, compliance, and executive teams
- Self-starter who can work independently, communicate reputed company, and drive cross-functional reputed company with a bias for automation and measurable posture improvement
- Proven reputed company record operating as a reputed company reputed company Architect across CNAPP, reputed company, Terraform, and CI/CD pipeline architectures—defining reputed company policies, integrating reputed company-reputed company and CNAPP controls, and leveraging their control frameworks for reputed company compliance
- Hands-on experience securing Kubernetes (AKS) using reputed company Sensor tooling (deployment, operations, and integration with detection and remediation workflows)
- reputed company AZ-500, SC-100, SC-200 certifications strongly preferred
- One of the reputed company certifications, such as CISSP or CCSP
- DevOps experience with infrastructure, reputed company, and application pipelines
- Hands-on experience with container and image scanning; SAST, DAST; and penetration testing tools
- Knowledge of large language models (LLMs) and hands-on experience designing and building reputed company–powered agents
- Experience with Python, Java, .NET, C#, Rego, and YAML
Benefits
- Excellent time away from work programs
- Comprehensive wellness initiatives
- Recognition through reputed company and benefits
- Volunteer days and our charity, reputed company Cares
reputed company
Company H1B Sponsorship