Senior Infrastructure Engineer – Asset Hardening Lead Analyst Lead Analyst

Truist; Atlanta (GA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

401(k) plan

Paid time off

Job summary

Truist is seeking an experienced Senior Infrastructure Security Engineer to lead asset hardening and security baseline governance across enterprise platforms in the United States. You will collaborate with engineering, cybersecurity, risk, and operations teams to drive remediation, compliance, and continuous improvement of hardening processes.

The role requires deep knowledge of secure configuration management, cloud platforms (AWS/Azure/GCP), and industry frameworks.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Systems, a related field, or equivalent experience.
• Minimum of 7 years of professional experience in infrastructure engineering.
• Advanced knowledge of enterprise infrastructure technologies including cloud, network, database, storage, platform, computing, and middleware.

Responsibilities

• Lead enterprise asset hardening strategy and remediation initiatives by overseeing the prioritization, governance, and remediation of security configuration risks across technology platforms.
• Establish and maintain enterprise security baseline requirements aligned to industry frameworks, regulatory expectations, and organizational risk tolerances.
• Provide technical leadership to multiple platform teams on secure configuration standards, hardening requirements, and remediation approaches.
• Drive governance activities supporting security baseline compliance, exception management, risk acceptance reviews, executive reporting, and remediation accountability.
• Develop and oversee enterprise metrics, dashboards, KPIs, and reporting to measure asset hardening effectiveness, compliance trends, and risk reduction outcomes.

Skills

Security governance

Secure configuration management

Vulnerability remediation

Collaboration across teams

Education

Bachelor’s degree in CS/Engineering/IS

Master’s degree (preferred)

Tools

AWS Cloud

Azure Cloud

GCP

Security baselines

Job description

Job Summary

Regular or Temporary: Regular Language Fluency: English (Required) Work Shift: 1st shift (United States of America)

Leads enterprise asset hardening and security baseline governance activities to reduce technology risk and strengthen the security posture of infrastructure platforms. Applies expertise in secure configuration management, security standards, vulnerability mitigation, and compliance requirements to ensure technology assets are configured and maintained in accordance with enterprise policies and industry best practices. Partners with engineering, cybersecurity, risk, and operations teams to drive security baseline adoption, configuration compliance, remediation activities, and continuous improvement of asset hardening processes. Serves as a subject matter expert for security configuration governance and infrastructure risk reduction initiatives.

Essential Duties and Responsibilities

• Lead enterprise asset hardening strategy and remediation initiatives by overseeing the prioritization, governance, and remediation of security configuration risks across technology platforms.
• Establish and maintain enterprise security baseline requirements aligned to industry frameworks, regulatory expectations, and organizational risk tolerances.
• Provide technical leadership to multiple platform teams on secure configuration standards, hardening requirements, and remediation approaches.
• Drive governance activities supporting security baseline compliance, exception management, risk acceptance reviews, executive reporting, and remediation accountability.
• Develop and oversee enterprise metrics, dashboards, KPIs, and reporting to measure asset hardening effectiveness, compliance trends, and risk reduction outcomes.
• Perform trend analysis and root cause investigations to identify recurring configuration weaknesses and drive sustainable corrective actions.
• Lead the development, implementation, and continuous improvement of enterprise asset hardening standards, procedures, controls, and operating models.
• Partner with Cyber Security, Risk Management, Audit, Compliance, Enterprise Architecture, and Technology Operations teams to support audits, examinations, and regulatory assessments.
• Evaluate security control effectiveness and configuration compliance programs to identify opportunities for process optimization and risk reduction.
• Drive automation and engineering solutions that improve security baseline enforcement, compliance monitoring, reporting, and remediation workflows.
• Review and approve remediation evidence, exception requests, and compensating control documentation to support governance and audit readiness.
• Serve as a senior subject matter expert for asset hardening, secure configuration management, and infrastructure security governance.
• Lead enterprise-wide initiatives to improve security baseline adoption, reduce configuration-related risk, and strengthen the overall security posture of technology assets.
• Monitor industry trends, security frameworks, threat intelligence, and emerging technologies to enhance asset hardening capabilities and governance practices.
• Mentor and provide technical direction to infrastructure engineers and technology teams while promoting security-by-design and secure configuration best practices across the organization.

Qualifications

1. Bachelor’s degree in Computer Science, Engineering, Information Systems, a related field, or equivalent education, training, and work-related experience.
2. Minimum of 7 years of professional experience in infrastructure engineering.
3. Advanced knowledge of enterprise infrastructure technologies including cloud, network, database, storage, platform, computing, and middleware.

Preferred Qualifications

1. Master’s degree in a relevant technical discipline.
2. Experience in the financial services industry.
3. Industry certifications such as CCIE, CISSP, CISM, or equivalent.
4. Strong experience with cloud platforms such as AWS, Azure, or Google Cloud.
5. Deep knowledge and experience in software development and technical designs and implementation.
6. Proven experience managing large IT infrastructure projects.

Benefits

• All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position.
• Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates.
• Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays.
• Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan.
• As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Equal Opportunity Statement

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law.

Truist is a Drug Free Workplace.

EEO is the Law E-Verify IER Right to Work About Truist

About Truist

Truist is a purpose-driven financial services company, formed by the historic merger of equals of BB&T and SunTrust. We serve clients in a number of high-growth markets in the country, offering a wide range of financial services. At Truist, our purpose is to inspire and build better lives and communities. That happens through real care to make things better. To meet client needs, to empower teammates, and to lift up communities. Learn more about Truist on truist.com.