Cloud Security Engineer

Fidelity; Durham (NC); On-site; USD 90,000 - 140,000; Full time

Job summary

Fidelity’s Cloud Security Engineering team is seeking a Cloud Security Engineer to design, implement, and maintain secure Azure cloud controls in partnership with stakeholders. You will contribute to risk assessments, automate security workflows, and help accelerate secure software delivery across multi-cloud environments.

As part of a modern DevSecOps culture, you’ll share security best practices, participate in continuous improvement, and work onsite in a dynamic enterprise setting with a

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity.
• 2+ years in cloud engineering or cloud security.
• Hands-on Azure workload deployment and security.
• Experience with IaC (Terraform or similar).
• Familiarity with Azure IAM, RBAC and least-privilege access.
• CI/CD and DevOps practices experience.
• Understanding of vulnerability management and monitoring.

Responsibilities

• Contribute to cloud security trends and risk assessment.
• Develop and implement cloud security solutions.
• Design and maintain Azure infrastructure and security controls.
• Share knowledge and security best practices across the organization.
• Improve cloud security posture via automation, monitoring, and continuous improvement.

Skills

Cloud engineering

Azure security

CI/CD pipelines

DevOps practices

Security knowledge

Education

Bachelor's degree in Computer Science/Information Technology/Cybersecurity

Tools

Terraform

Azure Defender

Microsoft Defender for Cloud

Sentinel

Job description

Fidelity will not provide immigration sponsorship for this position.

Job Description:

The Role

Fidelity is currently seeking a Cloud Security Engineer to join the Cloud Platform and Security Team. It is a fast-paced, dynamic environment with interactions across many enterprise applications and cloud technologies, ensuring an optimal internal associate experience. The candidate will help implement and maintain secure-by-default cloud controls within Microsoft Azure, partnering with platform, product, and security teams to support secure cloud adoption while enabling efficient software delivery. Responsibilities will include:

• Contribute to the team's understanding of evolving cloud security trends and help assess risks and opportunities associated with new technologies.
• Support the development and implementation of cloud security solutions that improve efficiency and accelerate delivery.
• Design, implement, and maintain Azure cloud infrastructure and security controls in partnership with technical and business stakeholders.
• Actively share insights, technical knowledge, industry practices, and security best practices across the organization.
• Assist in strengthening cloud security posture through automation, monitoring, and continuous improvement initiatives.

The Expertise and Skills You Bring

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, with approximately 2+ years of experience in cloud engineering, cloud security, infrastructure engineering, or software development.
• Hands-on experience deploying, securing, and supporting workloads in Microsoft Azure.
• Working knowledge of Azure services, including identity, networking, storage, and security capabilities.
• Experience with Infrastructure as Code (IaC) using Terraform or similar automation tools.
• Understanding of Azure IAM, RBAC, and least-privilege access principles.
• Experience working with CI/CD pipelines and modern DevOps practices.
• Familiarity with cloud security concepts such as vulnerability management, monitoring, logging, and secure configuration.
• Exposure to cloud security tools such as Microsoft Defender for Cloud, Sentinel, Wiz, InsightCloudSec, or similar platforms.
• Strong problem-solving skills, curiosity, and a desire to learn new cloud technologies and security capabilities.
• Excellent communication and collaboration skills, with the ability to work effectively across technical teams.

The Team

The Cloud Security Engineering team at Fidelity designs, builds, and operates the security foundations that protect our multi-cloud and hybrid platforms, spanning Azure, OCI, and on-premises private cloud environments. We partner with application, platform, and infrastructure teams to embed security-by-design across identity, network, data, workload, and compliance domains. The team builds automation, guardrails, and reusable security services that enable developers to deliver secure solutions at enterprise scale.

Operating in a modern DevSecOps culture, we are actively adopting AI-assisted development practices to accelerate secure engineering, automate detection and response, and scale our impact across the enterprise. As a member of the team, you will gain hands-on experience solving real-world cloud security challenges, contribute to enterprise-scale security initiatives, and grow your career while helping safeguard the financial well‑being of millions of customers.

Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications:

Category:

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.