Cloud Security Automation Engineer

The Ford Cloud Security team is responsible for working with other security and could services teams to ensure alignment and collaboration in securing Ford's public cloud infrastructure. The teams work closely together to identify security gaps in the cloud environments and address them.

The Cloud Security team is responsible for identifying, evaluating, and recommending cloud security tools and functions to enhance security around Ford's public cloud. The team is also responsible for developing and managing the following security services within Ford's public clouds:

- GCP Security Command Center

- GCP/Azure Security Compliance

- GCP VPC Service Control

- GCP Cloud Armor/ Azure WAF

- Partner with other Cloud Security team members to identify and develop automation for security related workflows and audits (VPC SC, DLP, Exceptions, Org Policy, etc..).

- Lead evaluation and develop an understanding of tools needed to address security gaps.

- Lead/Collaborate with EPEO Services teams on security gap remediation.

Desired Skills

- Experience working with CI/CD deployment pipelines & automated build and configuration tools such as Jenkins, Chef, OpenShift, Tekton, Cloud Build

- Experienced in developing and releasing infrastructure-as-code (IaC) using configuration management tools such as Terraform.

- Experience with automation using scripting languages such as Python, Go, Node.js, etc.

- Strong understanding of Git and GitHub.

- Strong knowledge of security best practices and guidelines (at the enterprise-level) related to GCP and Azure Cloud deployments as well as common web application frameworks

- Understand the functionality and secure usage of various GCP services: VPCs, IAM, security groups, compute engine, cloud storage, Security Command Center, VPC Service Control, Cloud DLP and Cloud Armor

- Understand the functionality and secure usage of various Azure services: Virtual Machines, Virtual Networks, Azure Active Directory, App Services, Azure SQL Databases, Storage Accounts, Kubernetes, Containers, Key vaults.

Required Skills

- Customer focused and strong team orientation

- Self-starter and fast-learner

- Strong communication and interpersonal skills

- Strong problem solving and Analytical/Reasoning skills

- Strong drive for results and ability to work independently

- Demonstrated commitment to quality and project timing

- Familiarity with the agile project planning process and use of Rally.

- Document processes & procedures and developing other documentation.