Cloud Security Platform Engineer

Regions Bank is dedicated to safeguarding and protecting private information, and they are seeking a Cloud Security Platform Engineer to advance their cloud strategy. This role focuses on developing and implementing secure CI/CD pipelines while collaborating with various stakeholders to ensure best practices in DevSecOps.

Responsibilities:

• Assists with releasing candidate CI/CD pipelines as a mechanism to communicate the states and steps necessary to determine a release candidate for each application and service
• Designs and develops fully autonomous CI/CD pipelines which facilitate cloud deployments which includes automation of all infrastructure, services and application build and deployment
• Ensures that all parts of the pipeline follow good software engineering practices to include automated tests and infrastructure tests
• Builds tools which reduce errors and improve our overall customer experiences
• Assists in troubleshooting of production issues and ensure pipeline and infrastructure produces clear documentation and metrics which enables Root Cause Analysis
• Develops and tests – Ansible Playbooks, Terraform Scripts, Packer Scripts and establish immutable infrastructure such that patches are an artifact of the past
• Works with Enterprise Architecture, Information Security (InfoSec), Software Delivery, and Quality Assurance to enable the organization to move to the cloud using complete automation
• Ensures compliance with risk management programs, rules and regulations, and cybersecurity practices; identifies opportunities for and supports process improvements; applies disciplined change management practices

Requirements:

• High School Diploma or GED and six (6) years of related post-secondary education and/or experience in Information Security or Information Technology
• Two (2) years of relevant DevSecOps experience
• AWS DevOps certification or Azure DevOps certification
• Experience in building / deploying cloud native applications – OpenShift, Azure Kubernetes Service (AKS)
• Experience with interfacing with secrets management solutions like Hashicorp Vault
• Familiar with implementing Chaos engineering principles in the pipeline to determine weak links and suggest solutions
• Familiar with testing tools used to facilitate automation and integration of the tools into CI/CD pipelines
• Exposure to AWS AI/ML services (e.g. Amazon Bedrock, SageMaker) and familiarity with security best practices around AI workloads