Senior Cloud Security Engineer
Job Summary
The Senior Specialist Cloud Security Engineer will design, deploy, and maintain robust cloud security solutions within Amgen's global infrastructure. This role focuses on automating security assessments, enforcing compliance policies, and integrating security guardrails into CI/CD pipelines. The successful candidate will collaborate with engineering teams to ensure secure architecture across AWS and other enterprise cloud environments.
Responsibilities
- Design and implement secure cloud architectures
- Develop cloud security controls and IAM policies
- Automate compliance and vulnerability assessments
- Embed security into CI/CD pipelines
- Respond to security incidents and conduct forensics
Required Skills
- Expertise in AWS and cloud-native security
- Infrastructure-as-Code (Terraform/CloudFormation)
- Proficiency in Java, Python, or Node.js
- CISSP or AWS Certified Professional
- Deep knowledge of security frameworks and cryptography
Job Details
Responsibilities:
- Design and implement secure cloud architectures ensuring alignment with enterprise security frameworks and regulatory requirements.
- Develop and enforce cloud security controls including IAM policies, network segmentation, encryption standards, and key management (KMS, HSM) to safeguard data and workloads.
- Continuously assess cloud configurations using automated compliance and vulnerability management tools to identify misconfigurations and security risks.
- Develop and maintain Infrastructure-as-Code (IaC) templates (e.g., Terraform, CloudFormation) with embedded security guardrails and policy-as-code enforcement.
- Integrate cloud-native logging and monitoring services (e.g., AWS CloudTrail, Azure Monitor, GCP Cloud Logging) into centralized SIEM platforms for threat detection and analysis.
- Collaborate with DevOps and application teams to embed security into CI/CD pipelines and implement automated scanning, secrets management, and dependency validation.
- Respond to cloud-related security incidents, conduct forensic investigations, and implement remediations to prevent recurrence and strengthen detection mechanisms.
- Conduct threat modeling and risk assessments for new cloud solutions and emerging services.
- Research and evaluate emerging cloud technologies and security tools to enhance resilience, efficiency, and automation.
- Develop and maintain technical documentation, runbooks, and operational standards.
- Provide expert guidance and training to engineering, operations, and product teams on secure cloud design principles.
- Lead efforts and participate in audits covering information security services and technologies.
- This position requires after hours responsibilities and may require some travel.
Required Qualifications:
- Strong command of security foundations (authentication, authorization, confidentiality, integrity, availability).
- Solid understanding of security principles such as principle of least privilege.
- Working knowledge of cryptography (key management, symmetric/asymmetric encryption).
- Comprehensive experience with Amazon AWS (IAM, Data Protection, Secure DevOps).
- Experience with Enterprise Cloud Solutions (IaaS, PaaS, SaaS) including Azure, OpenStack, Cloud Foundry, Salesforce, etc.
- Hands-on experience with AWS foundation services (compute, network, storage, administration, security).
- Technical experience with micro services programming (AWS Lambda, Docker, etc.).
- Extensive experience in architecting and programming applications/RESTful services in AWS.
- Experience architecting highly available systems utilizing load balancing and horizontal scalability.
- Proficient in one of the following: Java, Node.js, Python, or JSON policy language.
- CISSP or equivalent security-related industry certifications.
- AWS Certified Professional or higher.
- Minimum Education: High School diploma (Bachelor’s degree preferred) with approx. 5 years of InfoSec or IT experience.