Cloud Security Engineer, Sr
Old National Bank3 months ago
Base Salary
$98k - $199k/yr
Responsibilities
- Design, implement, and maintain secure AWS and Azure landing zones with preventive guardrails and security baselines.
- Develop and review complex IAM policies, cross-account access patterns, just-in-time access workflows, and least-privilege controls.
- Use Tenable, Qualys, Snyk, and related tools to identify, prioritize, remediate, and report cloud vulnerabilities.
- Integrate SAST, SCA, infrastructure-as-code scanning, and automated security testing into CI/CD pipelines.
- Write, review, and maintain Terraform configurations and secure-by-default modules enforcing encryption, least privilege, and compliance.
- Develop cloud security monitoring, log and metric observability, incident response, forensic analysis, and root-cause investigations.
- Perform continuous compliance checks and support internal and external cloud security audits.
- Collaborate with InfoSec, platform engineering, data engineering, and application development teams to advance cloud security initiatives.
Requirements
- 5–7+ years of experience in cloud security engineering or related roles.
- Deep practical knowledge of AWS and Azure security services and proficiency with HashiCorp Terraform.
- Hands-on experience with Tenable, Qualys, Snyk, or similar vulnerability and scanning tools.
- Expertise in observability and incident management, plus strong knowledge of IAM, network security, zero trust, encryption, key management, secrets management, and data privacy.
- Experience implementing security practices in GitOps environments and integrating security into the secure software development lifecycle.
- Strong communication, documentation, collaboration, prioritization, and independent initiative skills.
- Preferred certifications include AWS Security Specialty, Azure Security Engineer Associate, CISSP, CCSP, and GIAC Cloud Security certifications such as GCSA or GCLD.
- Preferred experience includes OPA/Rego or HashiCorp Sentinel, AWS Lambda, DynamoDB, API Gateway, Azure Functions, and scripting with Python, Bash, or PowerShell.
Benefits
- Medical, dental, and vision insurance.
- 401(k), continuing education opportunities, and an employee assistance program.
- Access to Impact Network Groups and an inclusive workplace culture.
- The stated base salary range is $98,400.00/Yr. to $199,000.00/Yr.; actual offers vary by responsibilities, qualifications, experience, and location.