Cloud Engineer III
McDonald's1 day ago
Base Salary
$142k - $177k/yr
Responsibilities
- Engineer and operate enterprise CNAPP and cloud security platforms across AWS, Azure, and Google Cloud Platform.
- Configure security policies, connectors, APIs, dashboards, integrations, reporting, and automated remediation workflows.
- Implement identity, network, data protection, encryption, vulnerability management, logging, monitoring, threat detection, and incident-response controls.
- Design cloud-native preventative and detective guardrails using AWS Organizations, Service Control Policies, Azure Policy, and Google Cloud Organization Policy.
- Develop reusable Terraform modules, policy-as-code, APIs, and scripts for consistent deployment and operation of cloud security controls.
- Integrate security checks and policy enforcement into CI/CD workflows and connect cloud security data with SIEM/SOAR, ticketing, asset management, vulnerability management, and incident-response processes.
- Analyze cloud security findings and attack paths, identify systemic control gaps, and prioritize scalable remediation work.
- Support cloud security investigations and incidents, build proofs of concept, provide technical guidance, and mentor engineers.
Requirements
- At least 5 years of cloud security engineering, cloud security platform engineering, or cloud security architecture experience with a bachelor’s degree, or 3+ years with a master’s degree.
- Hands-on experience engineering or operating an enterprise CNAPP or cloud security platform such as Wiz, Palo Alto Prisma Cloud, Microsoft Defender for Cloud, or Orca Security.
- Experience with CSPM, vulnerability management, cloud configuration risk, identity and entitlement risk, attack-path analysis, security policy development, platform integrations, reporting, and automated remediation.
- Strong knowledge of cloud security architecture and controls across IAM, workload identity, network security, data protection, encryption, secrets management, logging, monitoring, threat detection, and incident response.
- Experience designing cloud security guardrails across AWS Organizations and Service Control Policies, Azure Policy, Google Cloud Organization Policy, or equivalent capabilities.
- Hands-on Terraform and Infrastructure as Code experience, including reusable modules and deployment of cloud security controls.
- Experience integrating security controls into CI/CD pipelines and developing automation through APIs and Python, PowerShell, Bash, Go, or an equivalent language.
- Preferred experience includes AWS Security Hub, GuardDuty, Inspector, Google Security Command Center, Open Policy Agent, Rego, Kubernetes, container security, Google SecOps, Microsoft Sentinel, Splunk, or equivalent platforms.
- Cloud security certifications such as CCSK, CCSP, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or Google Professional Cloud Security Engineer are preferred.
- Strong communication, analytical, problem-solving, documentation, technical leadership, and mentoring capabilities are required.
Benefits
- Health and welfare benefits including medical, prescription drug, mental health, dental, vision, and life insurance coverage.
- Eligibility for a performance-based bonus.
- Eligibility for stock or other equity grants under the long-term incentive plan.
Tech Stack
AWSAzureBashGitHub ActionsGitLab CI/CDGoGoogle Cloud PlatformKubernetesPowerShellPythonSplunkTerraform
About McDonald's
McDonald’s operates and franchises quick-service restaurants serving burgers, chicken, breakfast items, coffee, and soft drinks to consumers worldwide. The company earns revenue from company-operated restaurants plus franchising fees and real-estate rent paid by independent owner-operators, who run about 95% of its 40,000+ locations across 100+ countries. Founded in 1955 and headquartered in Chicago, it is publicly traded on the NYSE under the ticker MCD.