Senior Cloud Security Lead: IaC & PaC Expert

001 The Northern Trust Company; Chicago (IL); On-site; USD 117,000 - 195,000; Full time

Job summary

Northern Trust is seeking a Sr Lead Cloud Security Engineer to safeguard cloud environments with a focus on PaC and IaC practices. You will mentor junior engineers, enforce security policies, and collaborate with security champions across business units.

The role emphasizes Terraform-based IaC, CSPM tooling, and a strong foundation in CIS/NIST controls, with hands-on experience in AWS/Azure and Python-based automation.

Qualifications

• Minimum of 3 years working in public cloud as an engineer or developer.
• 5+ years as an Engineer, Developer, or Architect in IT, preferably Cybersecurity.
• Strong Infrastructure-as-Code (IaC) expertise using Terraform.
• Proficiency in Python or familiarity with Python-based DevOps tooling.
• Experience with Git-based CI/CD processes (GitHub Actions, GitHub Package Repository).
• Deep understanding of cloud security principles and the integration of security into development workflows.
• Hands-on knowledge of cloud infrastructure (AWS, Azure, or GCP).
• Experience with privileged access management and identity systems (Azure Entra, Okta, Ping) is a plus.

Responsibilities

• Design, implement and support security measures for cloud platforms (Azure, AWS).
• Develop PaC and IaC through Terraform, maintaining security policies aligned with CIS/NIST 800-53.
• Utilize CSPM tools such as Wiz and Microsoft Defender for Cloud to continuously assess and enforce security controls.
• Work with security champions across units, providing guidance for security needs.
• Contribute to the cloud security roadmap to enhance practices.
• Conduct regular security assessments, audits, and reviews of cloud configurations.
• Investigate and respond to security incidents, performing root cause analysis.
• Mentor junior team members.

Skills

Public cloud engineering

Terraform

Python scripting

Cloud security principles

GitHub Actions

PAM & IAM

Education

Bachelor's degree in CS/Info Mgmt

Tools

Wiz

Microsoft Defender for Cloud

GitHub

Job description

Northern Trust is seeking a Sr Lead Cloud Security Engineer to safeguard cloud environments with a focus on PaC and IaC practices. You will mentor junior engineers, enforce security policies, and collaborate with security champions across business units.

The role emphasizes Terraform-based IaC, CSPM tooling, and a strong foundation in CIS/NIST controls, with hands-on experience in AWS/Azure and Python-based automation.