Principal Cloud Security Engineer

As one of the world's leading asset managers, Invesco is dedicated to helping investors worldwide achieve their financial objectives. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world.
If you're looking for challenging work, smart colleagues, and a global employer with a social conscience, come explore your potential at Invesco. Make a difference every day!
Job Description
Your Role
The Principal Engineer Cloud Security will work closely with security, technology and application teams to help them secure their cloud environment. In this role, you will act as a lead partner with Information Security and Infrastructure teams to provide secure cloud platform requirements, and ensure the solutions and infrastructure are securely designed, developed, and implemented, while enforcing conformity with technical standards and approved Cloud Security architectures that align to regulatory and compliance. This role will deal with escalated challenges that arise. As a Principal Engineer Cloud Security, the individual will be a member of the Global Information Security team ensuring that Invesco's landscape is secure.
You Will Be Responsible For:

• Defining technical security requirements related to cloud platforms to include IAM, Security Groups, Data Protection, Cloud Workload Protection, CI/CD pipelines, Kubernetes, Security Information Event Monitoring (SIEM) systems integration, and others
• Researching and designing current and future Cloud Security solutions to improve compliance with NIST Framework and Cloud Security Alliance guidance by working to identify common patterns for template provisioning
• Actively build relationships with and engage key stakeholders to influence cloud design from a security standpoint.
• Evaluating, configuring, and implementing Cloud Security solutions to meet business needs.
• Developing and deploying infrastructure as a code scripts to implement and optimize security controls and mechanisms of a cloud infrastructure
• Mentoring and development of team members and act as a resource for escalated challenges
• Leading cloud projects, including tactical initiatives and architecture and implementation of various security solutions & processes with focus on Cloud Security. Support key business and tech projects related to Cloud Transformation.
• Providing metrics and periodic updates on various projects assigned
• Providing appropriate Cloud Security Engineering support activities such as patches, upgrades, break fix and improvements
• Investigating, documenting, and reporting on information security issues and emerging trends related to cloud environments globally

The Experience You Bring:

• 2+ years' experience as a leader in an information security role, supporting security programs and Security Engineering/architecture in complex enterprise environments
• 5+ years of hands-on experience designing, configuring, and implementing enterprise-wide Cloud security solutions across AWS, Azure, Oracle and other major cloud providers, including microservices security
• 2+ years practical experience working in DevSecOps team with applied Agile development methodology
• Highly skilled with cloud deployment orchestration, automation, and security configuration management
• Proficiency in one or more scripting languages such as Python and Powershell, including JSON
• Expertise with blueprints, patterns, and guidelines that standardize and accelerate organizational cloud adoption and align to industry compliance frameworks such as SOX, PCI-DSS, HIPPA, NIST, ISO, GDPR, SOC1/2, etc.
• Knowledge of various security methodologies and processes, and technical security solutions, such as Prisma Cloud, Wiz, Container security, McAfee CASB, SIEM (Qradar/Splunk), IAM, Virtual Palo Alto, and other workload protection and security solutions
• Experience with drafting and institutionalizing security standards, reference architecture, patterns, and guidelines
• Hands on experience in developing Cloud Security solutions, configurations, and presenting to architecture review boards and senior leadership
• Willingness to travel both domestically and internationally. Frequency and duration to be determined by manager.
• Bachelor's degree in computer science/information systems or related field or equivalent demonstrated experience.
• Preferred Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Certified Cloud Security Knowledge (CCSK), and/or SABSA certifications are a plus
• Preferred Vendor Certifications from AWS, Microsoft Azure or Google Cloud Platform

Full Time / Part Time
Full time
Worker Type
Employee
Job Exempt (Yes / No)
Yes
Workplace Model
At Invesco, our workplace model supports our culture and meets the needs of our clients while providing flexibility our employees value. As a full-time employee, compliance with the workplace policy means working with your direct manager to create a schedule where you will work in your designated office at least three days a week, with two days working outside an Invesco office.
What's in it for you?
Our people are at the very core of our success. Invesco employees get more out of life through our comprehensive compensation and benefit offerings including:

• Flexible time off and opportunities for a flexible work schedule
• 401(K) matching of 100% up to the first 6% with additional supplemental contribution
• Health & wellbeing benefits
• Parental Leave benefits
• Employee stock purchase plan

The above information on this description has been designed to indicate the general nature and level of work performed by employees within this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. The job holder may be required to perform other duties as deemed appropriate by their manager from time to time.
Invesco's culture of inclusivity and its commitment to diversity in the workplace are demonstrated through our people practices. We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender, gender identity, sexual orientation, marital status, national origin, citizenship status, disability, age, or veteran status. Our equal opportunity employment efforts comply with all applicable U.S. state and federal laws governing non-discrimination in employment.