1 day ago
Durham, NC, USAMid Level
Responsibilities
- Own and advance secure-by-default cloud controls across Google Cloud.
- Design and deliver cloud security engineering work across platform, product, and security teams.
- Architect and build production-grade cloud-native and containerized systems using Azure and Google Cloud Platform services.
- Define Cloud IAM, RBAC, and least-privilege controls.
- Develop continuous integration and deployment pipelines using Terraform and CFT.
- Lead or support cloud security incident response, root cause analysis, and corrective action plans.
- Drive Google Cloud security policies and standards based on industry cybersecurity standards.
- Build automation, guardrails, and reusable security services across Azure, GCP, OCI, and on-premises private cloud environments.
- Track security posture KPIs and provide leadership updates on control coverage, remediation velocity, and residual risk.
- Share security insights, industry practices, and emerging technology perspectives across the organization.
Requirements
- Bachelor's or master's degree.
- 4+ years of knowledge and experience in software and cloud infrastructure engineering across various technology platforms.
- Proven experience with Google Cloud Platform and cloud-native security tooling.
- Experience architecting and delivering production-grade cloud-native systems using Azure/GCP services.
- Hands-on experience designing and building containerized applications.
- Expertise defining Cloud IAM, RBAC, and least-privilege controls.
- Expertise with continuous integration and deployment pipelines using Terraform and CFT.
- Ability to manage business priorities and make tradeoffs between delivery pace and perfection.
- Preferred experience using AI-assisted tools to improve engineering productivity, operational efficiency, or developer workflows.
- Preferred experience with InsightCloudSec, Wiz, Zscaler, and Defender for Cloud.
- Ability to learn and validate new features and remain current with emerging trends.
- Ability to present security risks and rewards to management and influence enterprise cloud strategy.
Benefits
- Fidelity is transitioning to a full-time onsite working model through a phased rollout; onsite requirements vary by region and role and may evolve.
- The role offers work on enterprise-scale cloud security problems protecting millions of customers' financial well-being.
- The team supports career growth, knowledge sharing, and exposure to modern DevSecOps, agentic workflows, and AI-assisted development practices.
Tech Stack
Categories
About Fidelity
Fidelity Investments provides brokerage, retirement plan recordkeeping, wealth management, and asset management services to individuals, employers, advisors, and institutions, plus online trading platforms and mutual funds and ETFs. It earns fees from managing and administering assets, advisory services, and brokerage transactions. Founded in 1946 and headquartered in Boston, it is privately held and administers trillions of dollars for U.S. and global customers.