Cloud Monitoring & Compliance Engineer

KPMG United Kingdom; Birmingham; On-site; GBP 50,000 - 70,000; Full time

Job summary

A leading company seeks a Cloud Monitoring and Compliance Engineer to ensure security and compliance across cloud-native technologies. Responsibilities include managing tools, enhancing security features, and collaborating with teams. Ideal candidates will have strong IT experience and knowledge of cloud security standards.

Qualifications

• Solid IT experience with major cloud providers.
• Experience in securing cloud environments, including certification and compliance.

Responsibilities

• Analyzing MDC Product alerts requests from impacted clients.
• Customizing and enhancing Cloud Security Posture Management features.
• Planning and implementing automated remediation activities.

Skills

API security standards

Cloud Security Posture Management

Programming skills in Python

Web application architecture

System administration skills

Education

Bachelor’s degree in Computer Science

Tools

Microsoft Azure

AWS

GCP

Job description

Job description

About KPMG International

Together with more than 273,000 colleagues in 143 countries, KPMG members imagine big ideas and bring solutions to life for clients of all sizes. A role with KPMG International offers a global career opportunity.

KPMG International sets strategy and protects the reputation of this global organization of independent professional services firms providing Audit, Tax, and Advisory services. We deliver value to our member firms and drive positive community change. Joining us provides insight into global operations and involvement in impactful projects, from setting standards to developing innovative tech-enabled solutions. We look forward to welcoming you to our team.

About this Global Group

Global Technology & Knowledge is crucial for our future, enabling digital transformation, providing trusted technology services, ensuring security, and accelerating our Collective Strategy. Our principles include customer-centricity, communities of expertise, an optimized delivery model, flexibility, empowerment, and fulfilling careers. Organized into five domains—Technology Portfolio Delivery, Global Enterprise Technology, Technology Strategy & Blueprint, Global Information Security Group, and Business Operations—we are advancing technology excellence at the core of our strategy.

About this Team

As part of the Global Information Security Group (GISG), the Information Security Services (ISS) team—including the Global Security Operations Center (GSOC) and Vulnerability Attack Surface Defense (VASD)—helps defend KPMG and its clients from cyber threats through detection, investigation, and remediation.

Role summary

The Cloud Monitoring and Compliance Engineer provides visibility into security and compliance across KPMG's cloud-native technology stack. Responsibilities include ensuring configuration and compliance guardrails are followed and that cloud data and systems are secure. The role involves managing GSOC tools on Windows platforms in DataCentre, Azure, and O365, supporting cloud monitoring and compliance across multi-cloud environments. Key duties include:

1. Analyzing MDC Product alerts requests from impacted clients.
2. Customizing and enhancing Cloud Security Posture Management and Microsoft Defender for Cloud features.
3. Onboarding additional tenants and cloud providers.
4. Planning and implementing automated remediation activities.
5. Liaising with vendors to optimize product investments and influence roadmaps.
6. Managing, troubleshooting, and maintaining toolsets daily.
7. Collaborating with GISG teams to identify new opportunities.
8. Ensuring compliance with internal controls and standards.
9. Using DevOps practices to document project tasks.

Key Accountabilities

• Analyzing MDC Product alerts requests.
• Enhancing CSPM and CWP features to meet KPMG needs.
• Implementing automated remediation.
• Engaging with vendors for product development.
• Onboarding tenants and cloud providers.
• Managing toolsets and troubleshooting issues.

Experience / Qualifications

• Solid IT experience with major cloud providers.
• Bachelor’s degree in Computer Science or related field, or equivalent experience.
• Knowledge of Cloud Security Posture Management technologies (Microsoft MDC, Twistlock, Redlock).
• Experience in securing cloud environments, including certification and compliance.
• Understanding of API security standards.
• Knowledge of exploits, malware, ransomware, detection methods.
• Web application architecture and system administration skills.
• Experience building complex queries (RQL, KQL, SQL).
• Hands-on experience with Microsoft Azure, AWS, or GCP security features.
• Programming skills in Python or PowerShell.

Agile/Flexible Working

KPMG supports flexible working arrangements to help balance home and work demands. Contact us to learn more.

Inclusion & Diversity

We value inclusion and diversity, recruiting broadly and fostering an environment where everyone can thrive.

Applying with a disability

We are committed to fair treatment and reasonable adjustments during the recruitment process. Discuss your needs with your recruitment contact.