Senior Cloud DevSecOps Engineer

T. Rowe Price; Owings Mills (MD); Hybrid; USD 121,000 - 206,000; Full time

Benefits offered by this job

Hybrid work schedule

Annual bonus eligibility

Competitive compensation

Health and wellness benefits

Paid time off

Job summary

T. Rowe Price in Owings Mills, MD is seeking a Senior Cloud DevSecOps Engineer with a strong development background to design secure, scalable automation and guardrails across our cloud platforms.

You will partner with engineering teams to embed automated security controls and promote secure development practices. Lead security engineering initiatives, craft Terraform-based guardrails, review code for secure design, and mentor engineers in IAM, IaC, and cloud security to balance risk with

Qualifications

• Bachelor’s degree or equivalent practical experience with 5+ years in engineering/security.
• Extensive AWS experience with guardrails and detective controls.
• Terraform IaC expertise with reusable modules and policy-as-code.
• Experience automating guardrails and IAM controls.
• Proficiency in Python, Go, or Java for automation.

Responsibilities

• Lead security engineering solutions focusing on automation and cloud governance.
• Design, maintain security guardrails using Terraform and policy-as-code.
• Participate in code reviews to promote secure coding.
• Develop automation tools and guardrails including Java and Python automations and GitLab with IaC gates.
• Collaborate with cloud and application teams to embed automated security controls.
• Mentor engineers on IaC, cloud identity management, and least privilege.

Skills

Cloud security

Automation

Python/Go/Java

Education

Bachelor's degree or equivalent

Tools

Terraform

GitLab CI/CD

OPA/Trivy

Job description

At T. Rowe Price, we identify and actively invest in opportunities to help people thrive in an evolving world. As a premier global asset management organization with more than 85 years of experience, we provide investment solutions and a broad range of equity, fixed income, and multi-asset capabilities to individuals, advisors, institutions, and retirement plan sponsors. We take an active, independent approach to investing, offering our dynamic perspective and meaningful partnership so our clients can feel more confident.

We believe doing the right thing for our clients and our associates is good business. With a career at the firm, you can expect opportunities to create real impact at work and in your community. You’ll enjoy resources to support your career path, as well as compensation, benefits, and flexibility to enrich your life. Here, you’ll find a collaborative culture that respects and values differences and colleagues who share a spirit of generosity.

Join us for the opportunity to grow and make a difference in ways that matter to you.

Role Summary

At T. Rowe Price, we are committed to advancing our technology and safeguarding our business and clients. We are looking for a Senior Cloud DevSecOps Engineer with a strong development background and a passion for designing secure, scalable, and automated solutions. In this role, you will work closely with engineering and product teams throughout the organization to deliver secure platforms, establish guardrails, and drive security initiatives. You will have the autonomy to solve complex problems, clarify technical challenges, and shape our engineering culture by promoting secure development practices.

Responsibilities

• Lead the development and implementation of security engineering solutions, focusing on infrastructure automation, cloud governance, and secure onboarding experiences for new workloads and teams.
• Design, maintain, and enhance security guardrails using Terraform, including reusable modules, policy-as-code solutions, and related automation.
• Participate in code reviews, offering constructive feedback to promote secure coding and improve design quality.
• Develop automation tools and security guardrails utilized by engineering teams to streamline developer workflows and minimize manual tasks, including Java and Python-based automations, and GitLab automations with Infrastructure as Code (IaC) gates.
• Collaborate with cloud engineering and application teams to embed automated security controls into their workflows, simplifying operational tasks and reducing friction for developers.
• Mentor engineers across teams on IaC best practices, cloud identity management, and principles of least privilege, including conducting AWS IAM reviews and configuring resource policies.

Qualifications

Required

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical discipline, or equivalent practical experience and 5+ years of progressive engineering and/or security experience.
• Extensive experience with AWS, including developing guardrails and detective controls.
• Expertise in Infrastructure as Code, especially Terraform: authoring reusable modules, implementing policy-as-code (OPA or Trivy), and supporting multi-account deployment patterns.
• Experience automating AWS guardrails, baseline configurations, identity bindings, and logging/monitoring controls for new accounts or teams.
• Strong knowledge of AWS IAM (roles, permission boundaries, SCPs, and RCPs).
• Experience developing GitLab CI/CD pipelines and automating guardrail checks and deployment controls.
• Solid software engineering skills in Python, Go, or Java for automation tooling.
• Ability to write secure, maintainable, and testable code.
• Demonstrated ability to quickly learn new technologies and stay up-to-date with industry trends.
• Familiarity with architecture and cybersecurity frameworks.
• Strong organizational skills, able to prioritize tasks across competing requirements and balance security risks with delivery timelines.
• Proven ability to work independently.

Preferred

• Experience in financial services or other highly regulated environments, with knowledge of risk management, audit, and compliance requirements.

What To Expect After Applying

• You will receive an email and text message to answer a few questions to verify your eligibility. If you apply for multiple jobs, you will receive separate invitations for each role and will need to respond to each. Estimated Time Commitment: 3-5 minutes
• If you are eligible, you will be asked to record video responses to introductory questions with our vendor partner, HireVue. Take time to read all instructions carefully before responding. Some questions may require you to respond within a set time limit, or with limited retakes. You can use this opportunity to tell us more about your background and interest than we can learn from a resume alone. Estimated Time Commitment: 20-30 minutes

FINRA Requirements

FINRA licenses are not required and will not be supported for this role.

Work Flexibility

This role is eligible for hybrid work, with up to three days per week from home.

Base Salary Ranges

• $121,000.00 - $206,000.00 for the location of: Maryland, Colorado, Washington and remote workers
• $133,000.00 - $227,000.00 for the location of: Washington, D.C.
• $151,000.00 - $258,000.00 for the location of: New York, California
• Placement within the range provided above is based on the individual’s relevant experience and skills for the role. Base salary is only one component of our total compensation package. Employees may be eligible for a discretionary bonus, which is determined upon company and individual performance.

Commitment to Diversity, Equity, and Inclusion

At T. Rowe Price, our associates are our greatest asset. We thrive because our company culture is built on inclusion and because we sustain a work environment where associates can bring their best selves to work every day. The backgrounds, talents, and experiences of our global associates allow us to embrace new ideas and perspectives that move our business priorities forward and enable us to deliver strong client outcomes. Here, you can expect equal opportunity and fair and consistent treatment for all.

Benefits

We value your goals and needs, at work and in life. As an associate, you’ll be supported with resources, benefits, and work-life balance so you can thrive in ways that matter to you.

Featured Employee Benefits To Enrich Your Life

• Competitive compensation
• Annual bonus eligibility
• A generous retirement plan
• Hybrid work schedule
• Health and wellness benefits, including online therapy
• Paid time off for vacation, illness, medical appointments, and volunteering days
• Family care resources, including fertility and adoption benefits

Learn More About Our Benefits.

T. Rowe Price is an equal opportunity employer and values diversity of thought, gender, and race. We believe our continued success depends upon the equal treatment of all associates and applicants for employment without discrimination on the basis of race, religion, creed, color, national origin, sex, gender, age, mental or physical disability, marital status, sexual orientation, gender identity or expression, citizenship status, military or veteran status, pregnancy, or any other classification protected by country, federal, state, or local law.