Cloud Engineer

Responsibilities:
Automate the provisioning of cloud monitors, automated remediation, security baselines, and templates, etc., through the concept of pipeline engineering.
Implement core cloud security capabilities such as identity and access, data protection, security controls and compliance, vulnerability management, threat detection and response, and logging/monitoring.
Perform penetration testing, red/blue teaming, and gap analysis with audit and cybersecurity partners.
Support operations and incident response in cloud events and incidents.
Design and deploy programs, dashboards, tests, scripts, and automation to enhance cloud security posture, detection, and response.
Build prototypes and perform proof of concepts to demonstrate security value
Remain up-to-date on emerging technologies and architecture and propose ways to use them in current and upcoming projects.
Educate and guide team members on cloud standards, procedures, and guidelines/best practices.
Act as an SME for all cloud technical hands-on questions related to cloud security.
Lead and facilitate the creation of compliance automation and policy-as-code to streamline cloud governance in partnership with the technical product analyst(s) and manager(s).
Strive to provide internal and external customers with excellent customer service and world-class service, and focus on improvement and benefits to the cloud consumer's outcomes.
Influence and support more junior cloud security engineers and help develop their skill sets and understanding of cloud security.
Requirements:
Willingness and ability to live the McDonald's values every day: Serve, Inclusion, Integrity, Community, and Family.
Ability to effectively communicate with other senior leaders of IT on program strategies and plans and negotiate quality solutions.
Must be attentive to details, organized, self-motivated, and driven.
Ability to create system and process flow diagrams, data flow diagrams, sequence and UML diagrams, and inter- and intra-system dependencies within the functional domain and across them
Knowledge and understanding of industry trends and new technologies and ability to apply trends to architectural needs.
Excellent written and oral communication skills with the ability to communicate effectively with technical and non-technical staff.
Defines and promotes best practices; cultivates a culture of innovation and learning, including willingness to instruct and coach in a cloud training program as needed.
Demonstrated strong analytic and problem-solving abilities.
5+ years of cloud development and support experience, such as Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP), and a bachelor's degree or 3 years of relevant experience and a master's degree.
Demonstrated ability to provide architectural design, leadership, management, and mentoring to team members.
Experience developing design specifications, test plans, and protocols.
Experience mentoring less experienced team members.
Expert technical knowledge in three or more and strong technical knowledge in 6 or more of the following domains:
Cryptography, encryption, and key management.
Data protection and security.
Governance and risk management.
Identity, access, and permissions.
Infrastructure security.
Logging and monitoring.
Security event and incident response.
Threat and vulnerability management.
Application and interface security.
DevOps pipeline governance and security.
Professional-level cloud certifications (AWS, Azure).
Preferred Qualifications:
Infrastructure as Code (IaC) experience: scripting and automation via AZ CLI/PowerShell, Bash, Bicep, JSON templates, etc.
Deep experience in building Kubernetes environments.
Prior experience in securing Windows and Linux servers at scale. Enabling DevOps in IaaS/PaaS is a plus.
Experience in multiple programming languages like Python, C#, Java, JavaScript, Ruby on Rails, etc.
CCSK or similar technical security certification.

Experience
7-11 yrs