Engineer Cloud Security

Our vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own. We have a flexible work environment, and fluid career paths. We not only encourage but celebrate internal mobility. We also recognize the importance of purpose, well-being, and work-life balance. Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them.

Chart your own path and grow your career while helping more customers achieve financial freedom. Empower Yourself.

• Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time, including CPT / OPT.

The Cloud Security Engineer will manage and secure cloud infrastructure environments by implementing and maintaining secure, reliable, and scalable cloud network architectures. This role focuses on AWS and Azure , applying strong expertise in cloud security controls, networking, and firewalls to protect systems against evolving threats while supporting operational performance and resilience.

What you will do :

Implement and manage secure cloud network infrastructure to support performance, security, scalability, and reliability.

Partner with development teams to integrate security measures and best practices into the development lifecycle.

Architect secure and resilient AWS and Azure environments aligned with industry standards and compliance requirements.

Design and implement security controls and policies to reduce unauthorized access, data breaches, and related risks.

Collaborate with cross-functional teams to support timely resolution of security incidents and security-related issues.

Create and maintain Terraform scripts to provision and manage infrastructure resources using Infrastructure-as-Code (IaC).

Stay current on security best practices, network technologies, and cloud services, and apply improvements to the environment.

Train and guide junior team members on security practices and technologies.

What you will bring :

Bachelor's degree in Computer Science, Information Technology, or a related field.

Proven experience designing, implementing, and managing network infrastructure, particularly in innovation lab or cloud development environments.

Extensive knowledge of security controls, protocols, and best practices across on-premises and cloud environments.

Strong expertise in AWS and Azure, including architecture, security, and automation capabilities.

Hands-on experience with IaC tools with a focus on Terraform.

Proficiency in Python.

Experience building, tuning, and operating detections using cloud-native tools (GuardDuty, Security Hub) and SIEM platforms (Splunk).

Ability to investigate cloud logs (CloudTrail, VPC Flow Logs, audit logs).

Strong understanding of least privilege IAM design, role-based access, service accounts, and federated identity.

Strong problem-solving, communication, and teamwork skills, with the ability to collaborate with technical and non-technical stakeholders across Cloud Platform, DevOps, SRE, and Engineering teams.

What will set you apart :

Relevant certifications such as CISSP, AWS Certified Security, or similar credentials.

3+ years managing security controls, including defining security policies and guardrails (preferred).

4+ years of technical experience working with security solutions and conducting security operations (preferred).

4+ years of cloud network security experience, including reviewing tools and making recommendations on utilization and strategy (preferred).

4+ years of experience with network protocols, data flows, and attacks within an IP environment (preferred).

3+ years building configurations for security devices and building automated processes to support large-scale deployment (preferred).

Extensive experience with security software, firewalls, intrusion detection systems, and network monitoring (preferred).

Extensive hands-on technical knowledge of network systems, protocols, and standards such as TCP / IP (preferred).

2+ years performing network and application security administration and threat assessments; CISSP or GIAC certification(s) (preferred).

2+ years programming or scripting experience in one or more of Java, Perl, PHP, Python, or shell (preferred).

This job description is not intended to be an exhaustive list of all duties, responsibilities and qualifications of the job. The employer has the right to revise this job description at any time. You will be evaluated in part based on your performance of the responsibilities and / or tasks listed in this job description. You may be required perform other duties that are not included on this job description. The job description is not a contract for employment, and either you or the employer may terminate employment at any time, for any reason.

What we offer you

We offer an array of diverse and inclusive benefits regardless of where you are in your career. We believe that providing our employees with the means to lead healthy balanced lives results in the best possible work performance.

Base Salary Range

$105,700.00 - $149,275.00

The salary range above shows the typical minimum to maximum base salary range for this position in the location listed. Non-sales positions have the opportunity to participate in a bonus program. Sales positions are eligible for sales incentives, and in some instances a bonus plan, whereby total compensation may far exceed base salary depending on individual performance. Actual compensation offered may vary from posted hiring range based upon geographic location, work experience, education, licensure requirements and / or skill level and will be finalized at the time of offer.

Equal opportunity employer

We are an equal opportunity employer with a commitment to diversity. All individuals, regardless of personal characteristics, are encouraged to apply. All qualified applicants will receive consideration for employment without regard to age (40 and over), race, color, national origin, ancestry, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, religion, physical or mental disability, military or veteran status, genetic information, or any other status protected by applicable state or local law.

Job Posting End Date at 12 : 01 am on :

02-12-2026

Want the latest money news and views shaping how we live, work and play? Sign up for Empower's free newsletter and check out The Currency .