Senior Cloud Security Engineer: DevSecOps/Multi‐Cloud

Jack Henry & Associates, Inc.; Northern (KY); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Jack Henry is hiring a Senior Cloud Security Engineer to embed Security as Code across AWS, Azure, and GCP. You will design, implement and automate cloud security controls, advance CSPM capabilities, and enable secure CI/CD workflows. Remote work is possible in the U.S. with California excluded.

The role emphasizes automation, mentoring, and security engineering excellence across cloud environments, CI/CD, and guardrail enforcement.

Qualifications

• 6+ years of experience in software development, DevOps, or Infrastructure as Code.
• Experience building secure CI/CD workflows with GitHub tools and GitOps.
• Hands-on CSPM engineering across AWS, Azure, and GCP.

Responsibilities

• Research, recommend and implement changes to enhance cloud security as part of cloud infrastructure transformation.
• Design security solutions maintaining security and compliance in public cloud while aligning to business strategy.
• Develop and understand Jack Henry's public cloud strategic roadmap and identify gaps in cloud security program coverage.
• Work with Digital Cloud DevOps to integrate security into workflows.
• Participate in architecture reviews and vendor recommendations.
• Create security architecture documentation based on specifications.
• Review security designs for correctness and conformance.
• Build and maintain secure CI/CD workflows using GitHub repositories, actions, docs, and GitOps patterns.
• Champion and implement Security as Code from design through deployment.
• Engineer and operate CSPM across AWS, Azure, GCP.
• Build, test, validate, and promote cloud security controls into production workloads.
• Perform ongoing cloud control evaluations and contribute to security architecture.
• Use Terraform to build, deploy, and manage cloud security infrastructure.
• Develop automation using Python for monitoring, remediation, CI/CD integrations, and guardrail enforcement.
• Performs other duties as assigned.

Skills

DevSecOps

multi-cloud security

automation

security controls

Security as Code

Terraform

Python

Go

AWS

Azure

GCP

GitHub Actions

GitOps

Tools

Terraform

GitHub Actions

Go

Python

AWS

Azure

GCP

Job description

At Jack Henry, we’re more than a technology company, we’re a force for good in financial services. We’re redefining how community banks and credit unions connect with the people they serve. Our mission is rooted in people inspired innovation, empowering financial institutions to deliver seamless, secure, and human centered experiences. We deliver cutting‑edge solutions that are paving the way for the next generation of digital banking and payments, but our true impact begins with our associates. If you're ready to help transform an industry and grow with a company that values purpose, collaboration, and excellence then we’d love to meet you.

Jack Henry a leader in the fintech industry; is hiring a Senior Cloud Security Engineer with deep expertise in DevSecOps, multi‑cloud security engineering, automation, and security controls development. This role is responsible for embedding security throughout the CI/CD lifecycle—ensuring Security as Code across AWS, Azure, and Google Cloud Platform (GCP).

The ideal candidate is highly technical, automation‑driven, and passionate about building scalable, cloud‑native guardrails that secure critical Cloud workloads. This engineer will design, implement, and validate cloud security controls, improve our CSPM capabilities, and automate remediation workflows across multi‑cloud environments. This role also provides opportunities to mentor junior engineers and uplift engineering excellence across the team.

This position may be worked remotely within the United States, with the exception of California.

This position is not eligible for immigration sponsorship and support. Please do not apply if at any time you need immigration support now or in the future (i.e., H‑1B, PERM). All positions, regardless of location, may require an onsite interview or in‑person onboarding requirement to verify your identity.

What you’ll be responsible for:

• Researches, recommends and implements changes to enhance network security as part of our cloud infrastructure transformation.
• Design security solutions that maintain security and compliance within public cloud while ensuring alignment of technology to business strategy.
• Develop and understand JHA’s public cloud strategic roadmap and continuously identify gaps in cloud security program coverage.
• Work with the Digital Cloud DevOps team to integrate and operationalize security within their workflows.
• Participate and collaborate in project level architecture reviews and vendor selection recommendations.
• Assist in creating security architecture documentation based on specifications.
• Review security design to discover any errors or confirm the design meets required specifications.
• Build and maintain secure CI/CD workflows using GitHub Repositories, GitHub Actions, GitHub Docs, and GitOps operating patterns.
• Champion and implement Security as Code principles from design through deployment.
• Engineer and operate Cloud Security Posture Management (CSPM) solutions across AWS, Azure, and GCP.
• Build, test, validate, and promote cloud security controls into production workloads.
• Perform ongoing cloud control effectiveness evaluations and contribute to IC security architecture.
• Use Terraform to build, deploy, and manage cloud security infrastructure and guardrail configurations.
• Develop automation using Python to support monitoring, remediation, CI/CD integrations, and guardrail enforcement.
• Performs other duties as assigned.

What you’ll need to have:

• Minimum of 6 years of experience in software development, DevOps, or Infrastructure as Code
• Build ingand maintainingsecure CI/CD workflows using GitHub Repositories, GitHub Actions, GitHub Docs, and/or GitOps operating patterns
• Cloud Security Posture Management (CSPM) Engineering
• Hands‑on experience deploying and managing containerized applications
• Practical experience in declarative service infrastructure environments, specifically using Terraform
• Experience in an AWS, Azure, and/or GCP cloud environment

What would be nice for you to have

• Experience managing production environments in Google Cloud Platform (GCP)

• Support cloud security architecture decisions, threat modeling engagements, and change control processes.

• Implement serverless automated remediation using AWS Lambda, Azure Functions, and GCP Cloud Functions.

• Mentor and coach junior and mid‑level engineers.

• Lead design discussions, perform peer reviews, and provide guidance on best practices.

• Maintain engineering documentation, runbooks, diagrams, and GitHub‑based developer guidance.

• Production Programming Experience in Go or Python

• Familiarity with operating in a Unix/Linux shell.

• Industry Certification in Google PCSE, AWS Security, AZ‑500, CKS, CCSP, CISSP, CCSK

If you got this far, we hope you're feeling excited about this opportunity. Even if you don't feel you meet every single requirement on this posting, we still encourage you to apply. We’re looking for passionate, driven individuals who align with our mission and can bring unique perspectives to our team.

Why Jack Henry?

At Jack Henry, we live by the motto: "Do the right thing, do whatever it takes, and have fun." It’s more than a tagline, it’s the foundation of our culture. We recognize that our associates are the key to our success, and we’re deeply committed to their wellbeing. That’s why we offer comprehensive benefits designed to support your physical, mental, and financial health so you can thrive both personally and professionally.

We’re also leading the way in technology modernization, helping financial institutions evolve with speed, security, and flexibility. Our strategy focuses on delivering secure data access, mitigating fraud, and enabling seamless integration. Empowering our teams to build innovative solutions that meet the evolving needs of account holders.

Culture of Commitment

Ask our associates why they love Jack Henry, and many will tell you it is because our culture is exceptional. We do great things together. Our culture empowers us to rise to challenges, seek new opportunities, and support one another through change. It’s this shared commitment that drives our success. We’re proud to foster an environment where inclusion, sustainability, and community impact are more than values, they’re how we operate. Visit our Corporate Sustainability site to learn more about our culture and commitment to our people, customers, community, environment, and shareholders.

Equal Employment Opportunity

At Jack Henry, we know we are better together. We value, respect, and protect the uniqueness each of us brings. Innovation flourishes by including all voices and makes our business - and our society - stronger. Jack Henry is an equal opportunity employer and we are committed to providing equal opportunity in all of our employment practices, including selection, hiring, performance management, promotion, transfer, compensation, benefits, education, training, social, and recreational activities to all persons regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, genetic information, pregnancy, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, and military and veteran status, or any other protected status protected by local, state or federal law.

No one will be subject to, and Jack Henry prohibits, any form of discipline, reprisal, intimidation, or retaliation for good faith reports or complaints of discrimination of any kind, pursuing any discrimination claim, or cooperating in related investigations.

Requests for full corporate job descriptions may be requested through the interview process at any time.

#IND4