Cloud Engineer II [T500-28813]

McDonald's Global Office in India; Hyderabad; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

McDonald’s Global Technology Infrastructure & Operations in Hyderabad seeks a Cloud Security Engineer II to lead enterprise security platform engineering, automations, and remediation for cloud resources, collaborating with DevOps and risk teams to improve security posture.

This role focuses on identity and access, data protection, threat detection, logging, and governance, and requires IaC automation, Kubernetes experience, and strong communication with senior IT leadership.

Qualifications

• Bachelor’s degree and 2+ years cloud experience.
• Experience with cloud security, IAM, data protection and governance.
• Strong written and verbal communication for IT leadership.

Responsibilities

• Automate provisioning of cloud monitors, remediation, baselines and templates via pipeline engineering.
• Implement core cloud security capabilities: identity, data protection, controls, logging and monitoring.
• Support operations and incident response in cloud events and incidents.
• Lead security programs, dashboards, tests, and automation to improve posture.
• Educate teams on cloud standards and best practices.
• Stay up-to-date on emerging technologies and propose adoption where appropriate.

Skills

Cloud security

IaC automation

Kubernetes

Threat detection

DevOps

Python

Education

Bachelor's degree

Tools

AWS

Azure

Docker

PowerShell/Bash

Job description

One of the world’s largest employers with locations in more than 100 countries, McDonald’s Corporation has corporate opportunities in Hyderabad. Our global offices serve as dynamic innovation and operations hubs, designed to expand McDonald's global talent base and in-house expertise. Our new office in Hyderabad will bring together knowledge across business, technology, analytics, and AI, accelerating our ability to deliver impactful solutions for the business and our customers across the globe.

Company Description:

McDonald’s new growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omni-channel restaurant brand. As the consumer landscape shifts, we are using our competitive advantages to further strengthen our brand. One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital and Drive Thru). McDonald’s will accelerate technology innovation so 65M+ customers a day will experience a fast, easy experience, whether at one of our 25,000 and growing Drive Thrus, through McDelivery, dine-in or takeaway.

Leading this revolution is McDonald’s Global Technology organization made up of intrapreneurs who get to build really cool tech with scary smart people using the latest innovations like AI, IOT, and edge computing. We do this working along diverse, global teams who are always hungry for a challenge. It’s bonus points when you get to see your family and friends use the tech you build at their favorite McD restaurant.

Job Summary:

This opportunity is part of the Global Technology Infrastructure & Operations team (GTIO), where our mission is to deliver modern and relevant technology that supports the way McDonald’s works. We provide best-in-class foundational technology products and services including Global Networking, Cloud, End User Computing, and IT Service Management. It’s our goal to always provide an engaging, relevant, and simple experience for our customers.

The Cloud Security Engineer II role is part of the Cloud Ecosystem team in Global Technology Infrastructure & Operations. The role reports to the Director of Cloud Security and is responsible for delivering the enterprise security platform engineering outcomes, delivering enhancements and automating security remediations, supporting DevOps and Engineers consuming cloud resources to ensure it is done in a meaningful and secure manner, and engaging with cybersecurity and risk management teams to improve the security posture of the cloud environments.

This is an exciting opportunity for an experienced technology leader to help shape the transformation of infrastructure and operations products and services to the entire McDonalds environment.

Responsibilities & Accountabilities:

• Automate the provisioning of cloud monitors, automated remediation, security baselines and templates, etc through the concept of pipeline engineering.
• Implement core cloud security capabilities such as identity & access, data protection, security controls and compliance, vulnerability management, threat detection and response, and logging/monitoring.
• Performing penetration testing, red/blue teaming, and gap analysis with audit and cybersecurity partners.
• Support operations and incident response in cloud events and incidents.
• Design and deploy programs, dashboards, tests, scripts, and automation to enhance cloud security posture, detection, and response.
• Build prototypes and perform proof of concepts to demonstrate security value
• Remain up-to-date on emerging technologies and architecture and propose ways to use them in current and upcoming projects.
• Educate and guide internal and external team members on cloud standards, procedures, and guidelines/best practices.
• Act as a SME for all Cloud technical hands-on questions cloud security related.
• Lead and facilitate the creation of compliance automation and policy-as-code to streamline cloud governance in partnership with the Technical Product Analyst(s) and Manager(s).
• Strive to provide internal and external customers with excellent customer service and world-class service and focus on improvement and benefits to the cloud consumer’s outcomes.

Basic Qualifications:

• Must be fully vaccinated (i.e., at least 2 weeks after last dose) for COVID-19 and, if hired, present proof of vaccination by start date.
• Willingness and ability to live the McDonald’s values every day: Serve, Inclusion, Integrity, Community, and Family.
• Ability to effectively communicate with other senior leaders of IT on program strategies and plans and negotiate quality solutions.
• Must be attentive to details, organized, self-motivated, and driven.
• Ability to create system and process flow diagrams, data flow diagrams, sequence and UML diagrams, inter and intra system dependencies within the functional domain and across them
• Knowledge and understanding of industry trends and new technologies and ability to apply trends to architectural needs.
• Excellent written and oral communication skills with ability to communicate effectively with technical and non-technical staff.
• Defines and promotes best practices; cultivates a culture of innovation and learning, including willingness to instruct and coach in a cloud training program as needed.
• Demonstrated strong analytic and problem-solving abilities.

Strong technical knowledge in 6 or more of the following domains:

• Cryotography, encryption, and key management
• Data protection and security
• Governance and risk management
• Identity, access and permissions
• Infrastructure security
• Logging and monitoring
• Security event and incident response
• Threat and vulnerability management
• Application and interface security
• DevOps pipeline governance and security
• Associate-level cloud certifications (AWS, Azure)

Preferred Qualifications:

• Infrastructure as Code (IaC) experience - scripting and automation via AZ CLI/PowerShell, Bash, Bicep, JSON templates etc.
• Deep experience in building Kubernetes environment.
• Prior experience in security Windows and Linux servers at scale. Enabling DevOps in IaaS/PaaS is a plus.
• CCSK or similar technical security certification.

Experience:

• 2+ years of cloud experience and a Bachelor’s degree.
• Experience in software development (e.g. C#, .Net, .Net core) or scripting (e.g. Python, Powershell, etc.).