Job Description:

The Role

As a Cloud Security Engineer, you will work within a diverse team comprised of passionate technologists who believe in the power of innovation and constant collaboration. We believe that small, empowered, self-motivated teams can achieve outstanding things. We are passionate about opensource contribution, sharing our expertise and knowledge with the engineering community while adopting a continuous learning approach supported by a dedicated learning day each week.

The Azure Security and Service Enablement squad is seeking a highly technical, hands-on security engineer with experience on large-scale and/or business critical Azure environments. On this squad, you will bring your cloud security skillset to a group of talented engineers that are continuously innovating and improving our capabilities to enable the acceleration of Fidelity's journey to the cloud. You will work on a wide variety of cloud native stacks and technologies, leveraging cutting edge architectures and services. This squad is the starting point for all security capabilities, guardrail definition and service enablement for our Azure environment.

• Designing, scaling, and deploying various cloud security controls and services
• Building processes and workflows along with a consolidated and collaborative integration of IaaS, SaaS, and PaaS cloud services
• Ensuring seamless user experience with advanced security and compliance of our cloud infrastructure
• Maintaining and containing business risk as it pertains to the Azure cloud infrastructure
• Working across teams and Business Units to define requirements and deliver solutions
• Building comprehensive security controls to enforce policy
• Supporting business unit technologists deploying to the public cloud

The Expertise and Skills You Bring

• 2-3 years of experience in IT infrastructure, security, compliance
• A strong understanding of Azure services and security capabilities
• Solid hands-on experience with at least two of the following:
  • Engineering/operational support of cloud account configuration in AWS or Azure
  • Software Development, Linux Systems Administration, Data Networking
  • Hands-on configuration of CI/CD pipelines for cloud-native deployments
• Very strong with scripting languages, including integration with CSP APIs; python preferred
• Azure Networking
• Identity and Access Management - RBAC
• Azure Policies
• Azure Security Services - Security Center, Key Vault, Log Analytics
• Azure ARM/PowerShell
• Ability to work with application and security teams to promote a secure posture in the cloud
• You can mentor and train other team members to work effectively in the cloud
• You are a self-starter who can independently by reading technical documentation
• Bonus skills: Advanced Azure Certifications

Note: Fidelity will not provide immigration sponsorship for this position.

The Team

This is an opportunity for a highly motivated Cloud Security Engineer to join the Fidelity Architecture and Engineering (FAE) business unit and work in a diverse, open and transparent culture where you will contribute to powering the next generation of Fidelity's digital services through innovative solutions using the latest cloud native technologies and leading-edge engineering practices.

Certifications:

Category:

Fidelity's hybrid working model blends the best of both onsite and offsite work experiences. Working onsite is important for our business strategy and our culture. We also value the benefits that working offsite offers associates. Most hybrid roles require associates to work onsite every other week (all business days, M-F) in a Fidelity office.

Please be advised that Fidelity's business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.