Senior Cloud Security Engineer

Zions Bank; Midvale (UT); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

Job summary

Zions Bancorporation is seeking a Senior Cloud Security Engineer to drive cloud security strategy, governance, and operational excellence across AWS, Azure, SaaS, IaaS, and PaaS. You will partner with IAM, engineering, and business teams to eliminate Shadow IT, strengthen Zero Trust, and improve visibility into cloud usage.

This role requires on-call rotation and limited travel. You will lead administration of Broadcom CloudSOC and Prisma Cloud CSPM, develop dashboards and executive reporting,

Qualifications

• 8-10+ years of cybersecurity experience with 3-5+ years in cloud security
• Hands-on with Broadcom CloudSOC (Symantec CASB)
• Hands-on with Palo Alto Prisma Cloud CSPM
• Strong knowledge of AWS and Azure cloud platforms and cloud security best practices
• Experience partnering with application owners and stakeholders to improve visibility and reduce Shadow IT
• Bachelor's degree in Cybersecurity, IT, CS, or equivalent

Responsibilities

• Lead admin, configuration, and optimization of Broadcom CloudSOC and Prisma Cloud CSPM
• Collaborate with application owners to eliminate Shadow IT and enable secure cloud adoption
• Strengthen IAM, authentication, authorization, and Zero Trust across cloud platforms
• Provide SME guidance, best practices, and risk-based consultations to teams
• Develop cloud security dashboards, KPIs, KRIs, and executive reporting
• Drive roadmaps and continuous improvement for CASB, CSPM, SaaS security, and cloud governance
• Assist in incident response and on-call rotation for critical cloud security events

Skills

Cloud security engineering

CASB CSPM

AWS/Azure

IAM/Zero Trust

Security governance

Executive reporting

Shadow IT mitigation

Education

Bachelor's degree in Cybersecurity or related field

Tools

Broadcom CloudSOC

Palo Alto Prisma Cloud CSPM

Job description

Zions Bancorporation is transforming what it means to work for a financial institution. With a commitment to technology and innovation, we have been providing our community, clients and colleagues the best experience possible for over 150 years. Help us transform our workforce of the future, today.

We are currently looking for a Senior Cloud Security Engineer. The Senior Cloud Security Engineer is responsible for driving the organization's cloud security strategy, governance, and operational excellence across SaaS, IaaS, and PaaS environments.

This person will serve as a key partner to application owners, Identity & Access Management (IAM) teams, infrastructure teams, architects, and business stakeholders to identify and eliminate Shadow IT, increase visibility into cloud usage and risk, and strengthen the organization's overall security posture.

The engineer will lead the administration, configuration, and optimization of Broadcom CloudSOC (Symantec CASB) and Palo Alto Prisma Cloud CSPM, providing actionable insights, risk assessments, and executive-level reporting. As the subject matter expert for CASB, CSPM, SaaS security, and cloud governance initiatives, this individual will drive strategic roadmap development, security recommendations, automation opportunities, and continuous improvement efforts that reduce organizational risk while enabling secure business innovation. While not a member of the architecture team, this position will provide expert guidance, best practices, risk-based recommendations, and security consultation for cloud initiatives across the enterprise.

The ideal candidate is highly collaborative, proactive, and experienced in securing modern cloud ecosystems while balancing risk reduction, business enablement, and operational efficiency. This role participates in an on-call rotation and requires limited travel as needed.

Why Join Our Team

In this highly visible role, you will have the opportunity to shape the future of cloud security by driving strategy, improving governance, increasing visibility into cloud adoption, and partnering with stakeholders across the organization to reduce risk while enabling business growth. You will play a critical role in advancing our CASB, CSPM, SaaS security, and cloud governance capabilities while serving as a trusted advisor and technical leader within the cybersecurity organization.

Visa Sponsorship:

This Senior Cloud Security Engineer position is currently not eligible for employment visa sponsorship (e.g., H-1B visa). This includes, for example, situations where a candidate may have temporary work authorization while enrolled in school or upon graduation (e.g., CPT, OPT) but would need H-1B visa sponsorship within a few years of employment in order to maintain employment eligibility.

Key Responsibilities

• Lead the administration, configuration, and optimization of Broadcom CloudSOC (Symantec CASB) and Palo Alto Prisma Cloud CSPM to improve visibility, governance, compliance, and risk reduction across cloud environments.
• Partner with application owners and business stakeholders to discover, assess, and eliminate Shadow IT while enabling the secure adoption of approved cloud services and SaaS applications.
• Collaborate closely with IAM teams to strengthen identity governance, authentication, authorization, privileged access controls, and Zero Trust initiatives across cloud platforms.
• Serve as the cloud security subject matter expert (SME), providing guidance, recommendations, best practices, and risk-based consultation to application teams, engineering teams, and project stakeholders.
• Develop and maintain cloud security dashboards, KPIs, KRIs, and executive reporting to communicate cloud risks, security trends, posture improvements, and remediation progress.
• Drive proactive roadmap planning and continuous improvement initiatives for CASB, CSPM, SaaS security, and cloud governance capabilities.
• Assess SaaS, IaaS, and PaaS environments against organizational standards, regulatory requirements, and industry security frameworks, providing actionable remediation guidance.
• Evaluate emerging cloud technologies, SaaS platforms, and security capabilities, identifying risks and recommending controls that support secure business adoption and innovation.
• Partner with Security Operations, Infrastructure, IAM, Architecture, and Application teams to investigate cloud security findings, remediate risks, and support incident response activities.
• Participate in an on-call rotation and provide advanced technical support for critical cloud security events, platform issues, and operational escalations.

Qualifications

• 8-10+ years of cybersecurity experience, including 3-5+ years focused on cloud security engineering, cloud governance, CASB, CSPM, or SaaS security.
• Hands-on experience administering and supporting Broadcom CloudSOC (Symantec CASB).
• Hands-on experience utilizing Palo Alto Prisma Cloud CSPM to assess cloud posture, identify misconfigurations, evaluate risk, and drive remediation activities.
• Strong knowledge of AWS and Azure cloud platforms, cloud-native security services, and cloud governance best practices.
• Experience partnering directly with application owners and business stakeholders to improve visibility, reduce Shadow IT, and strengthen cloud security controls.
• Experience building strategic roadmaps, security metrics, executive reporting, and continuous improvement initiatives.
• Strong understanding of Identity and Access Management (IAM), Zero Trust principles, cloud governance, compliance frameworks, and risk management practices.
• Excellent written and verbal communication skills, including the ability to present technical risks and recommendations to leadership and non-technical stakeholders.
• Demonstrated ability to influence decisions and drive security outcomes through collaboration and subject matter expertise rather than direct authority.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience.

Plus

• Experience discovering, governing, and securing SaaS applications, including Shadow IT analysis, application risk assessments, tenant governance, and cloud usage analytics.
• Experience integrating CASB, CSPM, IAM, SIEM, DLP, and cloud-native security controls to provide end-to-end visibility and risk management.
• Experience with cloud security automation, workflow orchestration, and API-driven security improvements.
• Knowledge of data protection technologies, DLP, data classification, encryption, and secure data handling practices.
• Relevant certifications such as CISSP, CCSP, CCSK, AWS Security Specialty, Azure Security Engineer Associate, Palo Alto Prisma Cloud certifications, or equivalent.

Location

This position has a hybrid work from home schedule with a minimum of three days per week in the office at the new Zions Technology Center in Midvale, UT.

The Zions Technology Center is a 400,000-square-foot technology campus in Midvale, Utah. Located on the former Sharon Steel Mill superfund site, the sustainably built campus is the company’s primary technology and operations center. This modern and environmentally friendly technology center enables Zions to compete for the best technology talent in the state while providing team members with an exceptional work environment with features such as:

• Electric vehicle charging stations and close proximity to Historic Gardner Village UTA TRAX station.
• At least 75% of the building is powered by on-site renewable solar energy.
• Access to outdoor recreation, parks, trails, shareable bikes and locker rooms.
• Large modern cafe with a healthy and diverse menu.
• Healthy indoor environment with ample natural light and fresh air.
• LEED-certified sustainable building that features include the use of low VOC-emitting construction materials.
• Medical, Dental and Vision Insurance - START DAY ONE!
• Life and Disability Insurance, Paid Parental Leave and Adoption Assistance
• Health Savings (HSA), Flexible Spending (FSA) and dependent care accounts
• Paid Training, Paid Time Off (PTO) and 11 Paid Federal Holidays
• 401(k) plan with company match, Profit Sharing, competitive compensation in line with work experience
• Mental health benefits including coaching and therapy sessions
• Tuition Reimbursement for qualifying employees
• Employee Ambassador preferred banking products

This position will be open until filled.

All candidates, including those with criminal histories will be considered for employment. However, a background check adjudicated consistently with the FDIC Section 19 regulation will be completed on any candidate who accepts a conditional job offer from the Company. Because the Company is a financial institution, the FDIC guidelines apply to all positions within the company and as such any and all job duties have a direct relationship to a candidate’s criminal history and that criminal history would need to align with the FDIC Section 19 regulations.

Zions Bancorporation, National Association prohibits illegal discrimination and reaffirms its policy of providing Equal Employment Opportunity (EEO), by extending equal employment and advancement opportunities to all employees and applicants for employment, without regard to race, color, religion, age (40 and over), sex, pregnancy, gender, disability, national origin, ethnic background, citizenship, protected veteran status, military service, sexual orientation, gender identity, genetic information or any other characteristic protected by applicable federal, state or local law.

It is the Company’s policy not to discriminate because of a person’s relationship or association with a protected veteran. This includes spouses and other family members. Also, Zions will safeguard the fair and equitable treatment of protected veteran spouses and family members with regard to all employment actions and prohibit harassment of applicants and employees because of their relationship or association with a protected veteran.

Applicants Requesting Accommodations: If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to use or access our career site. You can request reasonable accommodations by contacting us at [e-mail] or 801/844-7618. Please email your resume/cover letter, indicate what position you are interested in and include "Accommodation needed" in the subject line to ensure your information is routed to the appropriate contact.

Zions Bank a division of Zions Bancorporation, N.A. Member FDIC