Azure Cloud Security Engineer

---

Job description

Senior Cloud Security Engineer (Azure)

The Role

As a Cloud Security Engineer, you will work within a diverse team comprised of passionate technologists who believe in the power of innovation and constant collaboration. We believe that small, empowered, self-motivated teams can achieve outstanding things. We are passionate about opensource contribution, sharing our expertise and knowledge with the engineering community while adopting a continuous learning approach supported by a dedicated learning day each week.

The Azure Security and Service Enablement squad is seeking a highly technical, hands-on security engineer with experience on large-scale and/or business critical Azure environments. On this squad, you will bring your cloud security skillset to a group of talented engineers that are continuously innovating and improving our capabilities to enable the acceleration of Fidelity's journey to the cloud. You will work on a wide variety of cloud native stacks and technologies, leveraging cutting edge architectures and services. This squad is the starting point for all security capabilities, guardrail definition and service enablement for our Azure environment.

• Designing, scaling, and deploying various cloud security controls and services
• Building processes and workflows along with a consolidated and collaborative integration of IaaS, SaaS, and PaaS cloud services
• Ensuring seamless user experience with advanced security and compliance of our cloud infrastructure
• Maintaining and containing business risk as it pertains to the Azure cloud infrastructure
• Working across teams and Business Units to define requirements and deliver solutions
• Building comprehensive security controls to enforce policy
• Supporting business unit technologists deploying to the public cloud

The Expertise and Skills You Bring

• Experience in IT infrastructure, security, compliance
• A strong understanding of Azure services and security capabilities
• Solid hands-on experience with at least two of the following:
• Engineering/operational support of cloud account configuration in AWS or Azure
• Software Development, Linux Systems Administration, Data Networking
• Hands-on configuration of CI/CD pipelines for cloud-native deployments
• Very strong with scripting languages, including integration with CSP APIs; python preferred
• Azure Networking
• Identity and Access Management - RBAC
• Azure Policies
• Azure Security Services - Security Center, Key Vault, Log Analytics
• Azure ARM/PowerShell
• Python Scripting for Automation required
• Ability to work with application and security teams to promote a secure posture in the cloud
• You can mentor and train other team members to work effectively in the cloud
• You are a self-starter who can independently by reading technical documentation

Bonus skills

• Advanced Azure Certifications

The Team
This is an opportunity for a highly motivated Cloud Security Engineer to join Cloud And Platform Engineering (CAPE) and work in a diverse, open and transparent culture where you will contribute to powering the next generation of Fidelity's digital services through innovative solutions using the latest cloud native technologies and leading-edge engineering practices.
Company Overview
At Fidelity, we are passionate about making our financial expertise broadly accessible and effective in helping people live the lives they want! We are a privately held company that places a high degree of value in creating and nurturing a work environment that attracts the best talent and reflects our commitment to our associates. We are proud of our diverse and inclusive workplace where we respect and value our associates for their unique perspectives and experiences. For information about working at Fidelity, visit Fidelity Investments is an equal opportunity employer.
Fidelity will reasonably accommodate applicants with disabilities who need adjustments to complete the application or interview process. Please email us at or call , prompt 2, option 2 if you would like to request an accommodation.

Company Overview

Fidelity TalentSource is the in-house temporary staffing provider for Fidelity Investments, one of the largest and most diversified global financial services firms in the industry. We welcome individuals from all backgrounds, including technology and customer service, to fill assignments across Fidelity's U.S.-based regional and investor center locations. If you would like to experience Fidelity's supportive and collaborative culture while expanding your skill set and developing your professional network, consider a role with Fidelity TalentSource. Apply today at .

We believe that the most effective way to attract, develop and retain a diverse workforce is to build an enduring culture of inclusion and belonging.
Fidelity TalentSource will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation, please contact our HR team at .

Information about Fidelity investments

At Fidelity Investments, our customers are at the heart of everything we do. As a privately held company with a rich 75-year history, our mission has remained the same since our founding: to strengthen the financial well-being of our clients. We help people invest and plan for their future. We assist companies and non-profit organizations in delivering benefits to their employees. And we provide institutions and independent advisors with investment and technology solutions to help invest their own clients' money. For information about working at Fidelity, visit .

Fidelity TalentSource's working model blends the best of working offsite with maximizing time together in person to meet associate and business needs. Currently, most hybrid roles require associates to work onsite all business days of one assigned week per four-week period (beginning in September 2024, the requirement will be two full assigned weeks).

Fidelity Investments and Fidelity TalentSource are equal opportunity employers.

<!– job description page –>