Lead Cloud Security Engineer

At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at—all from Day One.

Job Description

U.S. Bancorp is seeking a Lead Cloud Automation engineer with experience in cloud environments and programming technologies. This individual will be working with various technology teams across the enterprise to implement cloud-capable security technologies with an automated and pattern-driven approach.

This role offers a hybrid/flexible schedule, which means there's an in-office expectation of 3 or more days per week and the flexibility to work outside the office location for the other days.

Top 3 Skills:

Knowledge of Public Cloud Providers (Azure, AWS, GCP)

Object-Oriented Programming languages (C++, Java, or similar)

Experience working with DevOps tools, e.g. Docker, Kubernetes, JIRA, Git, Jenkins

Responsibilities

Apply experience and understanding of Cloud Technologies and Programming best practices to create solutions that enable security controls in the public clouds

Make key contributions to support automation services, including implementing automation and custom API's for provisioning, network & security services for our public cloud platforms

Integration of security tools with our standard CI/CD platform and emerging technologies.

Design, develop, implement, and test features end-to-end to ensure adherence to quality standards

Implement enterprise security best practices for cloud infrastructure

Create supporting documentation and utilize self-documenting scripting/coding techniques for service consumers as well as business users to be able to understand your products

Minimum Qualifications

College degree or equivalent industry experience and certifications

Typically seven or more years of relevant experience in cybersecurity

Advanced technical and functional subject matter expertise and knowledge across multiple security domain areas

Experience Should Include

5+ years experience provisioning and managing applications in both virtual and cloud infrastructures (Azure or AWS preferred)

7+ years Shell scripting for process automation, preferably utilizing Ansible and/or Templating languages such as Cloud Formation (AWS), ARM (Azure), or Terraform

CI/CD scripting

5+ years managing cloud-based systems and/or cloud-native clusters

5+ years experience working with cloud security principles and techniques including but not limited to elastic network security and cloud-native/PaaS security constructs

7+ years of experience working with DevOps tools, e.g. Docker, Kubernetes, JIRA, Git, Jenkins.

7+ years of experience programming with Object-Oriented Languages (ANY of the following: JAVA, C++, Rust, Golang, Python).

Proven ability to work independently and to take ownership of issue analysis and resolution efforts

PreferredSkills/Experience

Kubernetes experience

Python experience

Financial or other regulated industry experience

Certifications: CISSP, CISA, CRISC, CISM, Cloud (AWS or Azure)

#ISS

#LI-HYBRID

If there’s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.

Benefits:

Our approach to benefits and total rewards considers our team members’ whole selves and what may be needed to thrive in and outside work. That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind. Our benefits include the following (some may vary based on role, location or hours):

Healthcare (medical, dental, vision)

Basic term and optional term life insurance

Short-term and long-term disability

Pregnancy disability and parental leave

401(k) and employer-funded retirement plan

Paid vacation (from two to five weeks depending on salary grade and tenure)

Up to 11 paid holiday opportunities

Adoption assistance

Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law

EEO is the Law

U.S. Bank is an equal opportunity employer committed to creating a diverse workforce. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, among other factors. Applicants can learn more about the company’s status as an equal opportunity employer by viewing the federal KNOW YOUR RIGHTS EEO poster.

E-Verify

U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services. Learn more about the E-Verify program. The salary range reflects figures based on the primary location, which is listed first. The actual range for the role may differ based on the location of the role. In addition to salary, US Bank offers a comprehensive benefits package, including incentive and recognition programs, equity stock purchase 401k contribution and pension (all benefits are subject to eligibility requirements). Pay Range: $129,455.00 - $152,300.00 - $167,530.00 Job postings typically remain open for approximately 20 days of the posting date listed above, however the job posting may be closed earlier should it be determined the position is no longer required due to business need. Job postings in areas with a high volume of applicants, such as customer service, contact center, and Financial Crimes investigations, remain open for approximately 5 days of the posting listed date.