About
iCapital provides a technology landscape that includes cloud infrastructure across AWS, Azure, and GCP.
Responsibilities
•Build and manage cloud security programs across AWS, Azure, and GCP infrastructure
•Design, implement, and validate secure cloud infrastructure architectures that meet established security standards and requirements
•Apply Zero Trust principles and best practices to cloud infrastructure design and access models
•Detect, remediate, and resolve cloud vulnerabilities and security misconfigurations using CSPM tools and automation
•Build automation for continuous monitoring and alerting across cloud infrastructure
•Partner with engineering teams to promote security standards and best practices throughout the development lifecycle
•Collaborate with the SOC to develop and strengthen cloud detection engineering capabilities
•Assist Risk and Governance teams in developing and implementing cloud-related policies, procedures, and standards
•Work with Platform, DevOps, and Software Engineering teams to deliver security initiatives and provide security guidance to projects
Requirements
•6–9 years of experience in cloud environments, primarily AWS, including hands-on expertise in cloud security architecture and infrastructure design
•Proficiency with AWS-native security services, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty
•Experience with cloud identity and access architecture, including federation, RBAC, ABAC, and service-to-service authentication models
•Hands-on experience with Infrastructure as Code tools such as AWS CDK, CloudFormation, or Terraform
Nice to have
•Relevant cloud or security certifications such as AWS Certified Solutions Architect, AWS Certified Security – Specialty, CISSP, or CCSP
Conditions
•Competitive salary, annual performance bonus, and equity
•100% employer-paid health and dental insurance
•Generous paid time off (PTO)
•Employees in this role work in the office four days per week, with the flexibility to work remotely one day (Friday)
