Senior Cloud Security & IAM Engineer

Capital One National Association; McLean (VA); On-site; USD 197,000 - 225,000; Full time

Job summary

Capital One National Association is seeking Security Engineers to design, build, and automate security controls across cloud and on-premise environments. The role focuses on enterprise IAM, data-driven validation, and DevSecOps practices to secure Capital One's platforms.

We value experience with SailPoint IdentityIQ, CI/CD security integration, and infrastructure-as-code, along with relevant certifications. This position is based in McLean, VA, offering a competitive salary and incentives.

Qualifications

• At least 5 years of experience in cybersecurity or information technology.
• At least 3 years of experience working in a cloud-based environment.
• At least 2 years of experience designing and implementing automated security solutions.
• One or more professional certifications: CISSP, AWS Security Specialty, CIDPRO or GIAC Cloud Security.
• Experience leading enterprise-scale architecture or automation initiatives.

Responsibilities

• Architect, engineer, and deploy enterprise-grade IAM frameworks by utilizing advanced data engineering and programmatic automation to build resilient, high-availability identity solutions.
• Analyze data requirements and requests from management, define operational problems, and develop models and frameworks for validation and problem solving.
• Lead the design and delivery of technology platforms and automated controls across cloud and on-prem environments
• Present complex data analysis concepts to diverse audiences in non-technical areas in clear and concise terms
• Develop advanced automation for vulnerability management, detection, and compliance monitoring
• Partner with software, cloud and infrastructure teams to embed security by design into enterprise platforms
• Evaluate and integrate new security technologies, ensuring interoperability and operational scalability
• Influence and codify engineering standards, patterns, and reusable modules
• Participate in ongoing support of security tools, including investigations, analysis and break fix

Skills

IAM frameworks

Cloud security

Automation

Vulnerability management

CI/CD security

SailPoint IdentityIQ

Data engineering

Terraform

CloudFormation

Security tooling

Education

Bachelor’s Degree

Tools

Terraform

CloudFormation

SailPoint IdentityIQ

SailPoint ISC

Job description

Capital One National Association is seeking Security Engineers to design, build, and automate security controls across cloud and on-premise environments. The role focuses on enterprise IAM, data-driven validation, and DevSecOps practices to secure Capital One's platforms.

We value experience with SailPoint IdentityIQ, CI/CD security integration, and infrastructure-as-code, along with relevant certifications. This position is based in McLean, VA, offering a competitive salary and incentives.