Principal Cloud Security Engineer
The Principal Cloud Security Engineer is responsible for architecting, implementing, and maintaining the security measures necessary to safeguard the cloud-based systems and data within Comerica's cloud environment. The expertise this individual provides in cloud security services and industry best practices will drive the development and execution of strategies to protect Comerica's infrastructure from potential threats and vulnerabilities. The engineer works closely with architects, cloud security providers and the security team to build and maintain best practices, security rules, logging, controls, and threat detection.
This role demonstrates a blend of technical expertise, hands-on experience, and leadership skills. This role demands a deep understanding of cloud security practices within the context of cloud services and a proactive approach to mitigating risks and protecting sensitive data. CISSP and AWS certifications preferred.
Design & Methodology
Design and implement robust security architecture for cloud infrastructure, ensuring compliance with industry standards and regulatory requirements while maintaining high availability and scalability.
Develop and deploy advanced threat detection mechanisms, intrusion detection systems, and security monitoring tools to proactively identify and mitigate security risks.
Establish secure access controls and identity management solutions, implementing strong authentication and authorization mechanisms to safeguard data and resources.
Work closely with Business Units, Application teams, infrastructure areas & Vendors to identity, review & evaluate the solution requirements.
Investigate & propose strategic opportunities for enhanced cloud security controls and platforms through knowledge and research of industry trends.
Review & provide recommendations and input as applicable on new technologies, roadmap, presentations, and Vendor product offerings specific to cloud and cloud security products.
Review & identify outsourcing opportunities (e.g., ASP, IAAS, SAAS).
Evaluate & align strategic fit solutions across infrastructure platforms & solutions specific to "System" hardware & software technologies.
Serve as a key technical cloud security partner for all enterprise technology and business teams.
Provide consultation and works closely with other functional infrastructure areas/departments on multiple initiatives to meet common organizational / business goals and objectives.
Participate in and provides consulting to project teams on architectural, design development, integration opportunities, planning of highly complex systems and assures it is aligned to our established strategies, guiding principles, rationales, and practices.
Planning and Organizing
Identify and evaluate projects/programs/initiatives and design processes that enhance and rationalize existing and upcoming solutions.
Map requirements into standard services solution, identity opportunities for integrating to existing or reuse technology and provide cost effective solutions for moderate to large highly complex project/programs/initiatives.
Review, identify and manage requirements for moderate to complex solutions and do a cost value, feasibility, and risk analysis.
Review, participate, develop, and update architectural standards, guiding principles, rationales and strategies.
Evaluate, review, and approve highly complex design solutions for business and Infrastructure project or programs or initiatives.
Bachelor's degree in computer science, engineering or in a technology related field or equivalent through a combination of education and/or technology experience or 12 years of technology experience
7 years in identifying technical solutions for complex business problems, identifying the benefits and risks of the solutions and providing recommendations
6 years of Technology experience
5 years of experience mentoring another technologist
5 years of experience working with large cloud platforms, services and infrastructure
5 years of AWS platform experience
5 years of experience securing cloud environments
5 years of experience negotiating and designing complex solutions
This position is not eligible for sponsorship. Must have indefinite employment authorization.
Auburn Hills Operations Center
8:00am - 5:00pm Monday - Friday
Comerica is proud to be an Equal Opportunity Employer - veterans/individuals with disabilities, committed to workplace diversity.