NomadDesk

Cloud Security Engineer

Company Description

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to accomplish their financial goals and help them save time and money.

We invest in people and new advanced technologies to unlock the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com.

Internal Grade E/EB9

Description

Experian Global Security office are looking for a Cloud Security Engineer. You will be responsible for designing, implementing, and advancing security controls across multi-cloud environments including AWS, Azure, and GCP. You will focus on building secure architecture, identifying risks, and ensuring adoption of best practices for identity, access, and privileged account management in the cloud.

You will sit within our Privileged Access Management team with primary emphasis is on cloud security . You will focus on partnering with business Cloud SMEs, shape security roadmaps, and improve adoption of enterprise cloud security standards.

This is a remote, UK-based position reporting to the Director of Privileged Access Management.

Important Responsibilities

• Develop security controls for multi-cloud environments (AWS, Azure, GCP) with special focus on PAM capabilities.
• Define secure configurations for cloud-native services (compute, storage, networking, databases, containers, serverless around human and non-human identities.
• Collaborate with enterprise and business Cloud SMEs to align security requirements with business and technology roadmaps.
• Integrate cloud security with enterprise IAM and PAM solutions, ensuring enforcement of least-privilege access using moder concepts such JIT, Zero standing privileges.
• Contribute with the design and implementation of cloud IAM policies according to industry best practices access across AWS, Azure, and GCP.
• Partner with PAM engineers to extend privileged access controls to cloud-native services (integration with CyberArk or equivalent).
• Support secret management strategies for application-to-application and DevOps use cases.
• Contribute to the cloud security roadmap, ensuring understanding of enterprise goals and regulatory requirements.
• Evaluate new cloud security technologies, making recommendations for adoption.

• Experience in cybersecurity specializing in cloud security engineering and architecture.
• Hands-on experience with AWS, Azure, and GCP security controls, including IAM, networking, logging/monitoring, and workload protection.
• Knowledge of cloud security frameworks and best practices (e.g., CIS Benchmarks, NIST CSF, CSA CCM).
• Some understanding of designing and enforcing IAM/PAM controls in cloud environments i.e. CyberArk knowledge
• Background working with secret management, DevOps integration, and automation (Terraform, Ansible, Python, and CI/CD pipelines).
• Deep security knowledge covering primary technology infrastructure (network, storage, servers, databases), identity management, and application security practices
• Cloud security certifications such as AWS Certified Security, Azure Security Engineer Associate, Google Cloud Professional Cloud Security Engineer.
• Broader security certifications such as CISSP, CCSP, CISM, GIAC.

• Great compensation package and discretionary bonus plan
• Core benefits include pension, bupa healthcare, sharesave scheme and more
• 25 days annual leave with 8 bank holidays and 3 volunteering days. You can purchase additional annual leave.