Cloud Support Engineer

BNY; Pittsburgh (Allegheny County); On-site; USD 80,000 - 100,000; Full time

Job summary

BNY is seeking a Cloud Support Engineer for its Technology team in Pittsburgh, PA or Lake Mary, FL. The role involves optimizing cloud infrastructure while adhering to FedRAMP High standards and managing identity and access mechanisms within Azure.

Ideal candidates will have demonstrated experience with Azure, strong technical writing skills, and the ability to collaborate across teams. A Bachelor's degree in Computer Science or equivalent and 4-6 years of experience in infrastructure are required.

Qualifications

• Proven experience in managing FedRAMP High compliant environments.
• Expertise in Azure identity, access, and incident handling.
• Strong technical writing skills for documentation and reports.
• Experience in collaborating with various teams to drive outcomes.

Responsibilities

• Operate and optimize cloud infrastructure under FedRAMP High controls.
• Manage identity and access mechanisms to enforce least privilege.
• Monitor Azure logs and alerts, participate in incident response.

Skills

Managing FedRAMP High compliant environments

Azure identity management

Access control management

Incident response

Configuration management

Technical writing

Collaboration with security teams

Education

Bachelor’s degree in computer science or related discipline

Tools

Microsoft Entra ID

Active Directory

Microsoft Defender for Cloud

Job description

Cloud Support Engineer

We are looking for a Cloud Support Engineer to join our Technology team in Pittsburgh, PA or Lake Mary, FL.

Responsibilities

• Operate and optimize cloud infrastructure in accordance with FedRAMP High controls, including monitoring, incident response, configuration management, backups, and patching to maintain continuous compliance.
• Support privacy impact activities and ensure data flows adhere to BNY’s data handling and protection standards within approved Azure boundaries.
• Manage identity, access, and authorization mechanisms such as Microsoft Entra ID (Azure AD), Active Directory, MFA, RBAC, and Just-in-Time access to enforce least privilege and maintain access hygiene.
• Monitor Azure logs and alerts, triage and escalated incidents, participate in incident response testing and post-incident reviews, and enable relevant Azure security services.
• Coordinate oversight of third-party service providers interacting with BNY data or services, ensuring compliance with policies and supporting independent reviews.
• Define and enforce acceptable use restrictions for mobile code and communications technologies, and maintain clear, concise documentation and cross-team coordination.

Qualifications

• Proven experience managing and securing FedRAMP High compliant environments, with strong hands‑on skills in Azure identity, access, logging, incident handling, and configuration management.
• Expertise in Microsoft Entra ID/Azure AD, Active Directory, MFA, Just-in-Time access, RBAC, and AAA concepts.
• Experience with Azure security alerts, audit log review, log analytics, alert triage, and incident response practices.
• Ability to build and maintain data and asset inventories, implement and track baseline configurations, and protect configuration plans.
• Strong technical writing and coordination skills to produce clear oversight documentation, runbooks, and reports.
• Experience collaborating with security, engineering, compliance, and vendor teams to drive outcomes in production environments.
• Preferred: hands-on experience operating Azure in enterprise or regulated environments, familiarity with security control frameworks and continuous monitoring, experience with Microsoft Defender for Cloud or similar tools, and knowledge of least-privilege design patterns and privileged access management.
• Bachelor’s degree in computer science or related discipline, or equivalent work experience. 4-6 years of related infrastructure experience required; experience in the securities or financial services industry is a plus.

BNY is an Equal Employment Opportunity/Affirmative Action Employer.