Google Cloud Security Engineer

Fidelity Investments; North Carolina; On-site; USD 120,000 - 150,000; Full time

Job summary

Fidelity Investments in North Carolina is seeking a Cloud Security Engineer to join the Cloud Platform and Security Team. You will own and advance secure-by-default cloud controls across Google Cloud, partnering with platform, product, and security teams to reduce risk without slowing delivery.

The role requires hands-on experience with Google Cloud and Azure, Terraform or CloudFormation, and building containerized applications, with a focus on IAM/RBAC and secure CI/CD pipelines.

Qualifications

• Bachelor's or master's degree with 4+ years of knowledge and experience in software and cloud infrastructure engineering across multiple tech platforms.
• Proven experience in Google Cloud Platform and cloud native security tooling.
• Experience balancing business priorities with pace and quality.
• Proven expertise leveraging Azure/GCP cloud services to architect and deliver production-grade, cloud-native systems with containerized apps.
• Experience defining Cloud IAM, RBAC and least-privileges.
• Proven expertise in CI/CD pipelines using Terraform, CloudFormation, etc.
• Led or supported cloud security incident response with measurable closure.
• Drive new policies and standards for Google Cloud based on industry cybersecurity standards.
• Preferred: AI-assisted tools to boost engineering productivity or workflows.
• Familiarity with security tools like InsightCloudSec, Wiz, Zscaler, Defender for Cloud.

Responsibilities

• Own and advance secure-by-default cloud controls across Google Cloud, partnering with teams to reduce risk without slowing delivery.
• Influence the team with new security trends and present risks vs rewards to management.
• Design and deliver work efficiently to maximize value for technical and business partners.
• Share insights and industry practices across the organization.
• Track security posture KPIs and report on control coverage, remediation velocity, and residual risk to leadership.
• Lead or support cloud security incident response and root cause analysis with corrective action plans.

Skills

Google Cloud Platform

Cloud native security tooling

Containerized applications

IAM & RBAC

CI/CD pipelines

Incident response

Security standards

AI-assisted tooling

Education

Bachelor's or Master's degree in related field

Tools

Terraform

CloudFormation (CFT)

InsightCloudSec

Wiz

Zscaler

Defender for Cloud

Job description

Note: Fidelity will not provide immigration sponsorship for this position.

The Role

Fidelity is currently seeking a Cloud Security Engineer to join their Cloud Platform and Security Team. It is a fast paced, dynamic environment with interactions with many enterprise applications and incorporating cloud technology ensuring the optimal internal associate experience. The candidate owns and advances secure-by-default cloud controls across Google Cloud, partnering with platform, product, and security teams to reduce risk without slowing delivery.

Influence the team with new security trends and ability to present risks vs rewards to management.

Develop a point of view on new and emerging trends to advance solutions that result in efficiencies andfastertime to market

Designing and delivering the work for your team in the most efficient manner, delivering the most value to your technical and business partners of Cloud platform

Actively sharing insights, knowledge, industrypracticesand developments across the organization

The Expertise and Skills You Bring

Bachelor's or master'sdegree with4+ years ofknowledge and experience working insoftwareandcloud infrastructureengineeringwith various technology platforms

Proven experience in Google Cloud Platform and cloud native security tooling.

Experiencemanaging business priorities and understanding how to make tradeoffs when considering pace with perfection

Proven expertise leveraging Azure/GCP cloud services to architect and deliver production‑grade, cloud‑native systems, with hands‑on experience designing and building containerized applications

Experience in defining Cloud IAM, RBAC and principal of least privileges

Proven expertise in continuous integration and deployment pipelines using Terraform, CFT etc.

Lead or support cloud security incident response, root cause analysis, and corrective action plans with measurable closure.

Drive new policies and standards for Google Cloud based on industry cybersecurity standards.

Preferred Experience leveraging AI‑assisted tools to improve engineering productivity, operational efficiency, or developer workflows

Preferred Experience in cloud security tools like InsightCloudSec, Wiz, and Zscaler, Defender for Cloud

Ability to learn and stay curious for new feature validation

Track security posture KPIs and deliver regular updates on control coverage, remediation velocity, and residual risk to leadership.

The Team

The Cloud Security Engineering team at Fidelity designs, builds, and operates the security foundations that protect our multi-cloud and hybrid platform, spanning Azure, GCP, OCI, and on-premises private cloud environments. We partner with application, platform, and infrastructure teams to embed security-by-design across identity, network, data, workload, and compliance domains, and we build automation, guardrails, and reusable security services that let thousands of developers ship quickly and safely at enterprise scale. Operating in a modern DevSecOps culture, we are actively adopting agentic workflows and AI-assisted development practices to accelerate secure engineering, automate detection and response, and scale our impact across the enterprise. As a member of the team, you will solve complex, real-world security problems, influence enterprise-wide cloud strategy, and grow your career while helping safeguard the financial well-being of millions of customers.

Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications:

Category:

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.

Fidelity Investments

Here to help you grow your savings and invest in the life you want.

Fidelity Investments is a leading financial services firm dedicated to enhancing clients' financial well-being, managing over $12.6 trillion in assets globally.

Fidelity Wise Origin Bitcoin Fund$129.3M

Fidelity Venture Capital Fund I$250M

Oct 2024

Fidelity Evergreen Private Credit Rated Fund$215M

Fidelity Real Estate Opportunistic Income Fund$380M

Jul 2019

Footprint

Where they work

245 Summer St, Boston, MA 02210, US