Cloud Security Engineer

**Discover Vanderbilt University Medical Center:** Located in Nashville, Tennessee, and operating at a global crossroads of teaching, discovery, and patient care, VUMC is a community of diverse individuals who come to work each day with the simple aim of changing the world. It is a place where your expertise will be valued, your knowledge expanded, and your abilities challenged. Vanderbilt Health recognizes that diversity is essential for excellence and innovation. We are committed to an inclusive environment where everyone has the chance to thrive and where your diversity of culture, thinking, learning, and leading is sought and celebrated. It is a place where employees know they are part of something that is bigger than themselves, take exceptional pride in their work and never settle for what was good enough yesterday. Vanderbilt’s mission is to advance health and wellness through preeminent programs in patient care, education, and research. **Organization:** VEC SEO **Job Summary:** This engineering-level position operates, designs, and troubleshoots cloud infrastructure and cloud application security assets. It provides cloud security monitoring, response, consultation, and architectural services for projects and various-sized initiatives within the cloud cybersecurity space. Identify and develop infrastructure-level solutions to the VUMC organization's cloud cybersecurity posture (e.g., Security as Code, Data Security, App Security, Cloud Platform Security). Note: This is not a senior-level role and we are targeting a salary range of $80k - $95k DOE . **JOB DESCRIPTION:** Emergency and After-Hours Response -> The Cloud Security Engineer must participate in a weekly rotation for Emergency and After-hours on-call assignments. He or she will possess the skill set and process familiarization required to resolve any VEC Cloud Infrastructure Security (VEC CIS) cloud-scoped emergency or critical after-hours issue reported. Escalation / Advanced Trouble-shooting -> The Cloud Security Engineer will be expected to review, analyze, coordinate, and troubleshoot any issues escalated and assigned to his or her care within the scope of the VEC CIS team and cloud computing technologies. The Cloud Security Engineer becomes the escalated problem owner and manager until a resolution is obtained or the root issue is correctly transferred to the appropriate support provider. The Cloud Security Engineer is expected to demonstrate proficiency in all supported platforms and provide guidance and instruction to supporting personnel as prescribed. Project Resource -> The Cloud Security Engineer will be expected to deploy and operate within the context of a project resource under the capacity of a cloud security subject matter expert. He or she will represent and enforce any decision points within the context of VEC CIS’s jurisdiction, policies, and procedures until completion of the initiative or reassignment. The Cloud Security Engineer should expect assignment to multiple concurrent initiatives simultaneously. He or she is expected to operate individually, executing proper time and resource management. Regular communication synchronization with the VEC SEO Director is expected. Coordination efforts and ownership/execution of assigned taskings by outside resources assigned to the initiatives/projects are expected by the Cloud Security Engineer. Cloud Security Infrastructure, Operation, and Design -> The Cloud Security Engineer will be expected to identify potential cloud security organization enhancements and required design changes to increase VUMC’s cloud security posture and compliance. He or she will attend vendor presentations and technical deep dives to maintain an understanding of the latest technology from a security perspective for future solutions. The Cloud Security Engineer can operate in a leadership and/or supporting role for architecture/design initiatives involving cloud technologies and cloud security-focused changes within the institution. Cloud Security Infrastructure Consultation -> The Cloud Security Engineer provides consulting services to VUMC support personnel as designated by VEC SEO and VEC SOS leadership. He or she will operate in this capacity on a per-directive basis and typically when engaged through sanctioned mediums. These mediums include but are not limited to, problem management engagements, disaster recovery exercises, go-live events, architectural review boards, assigned steering committees, and leadership-approved short-term initiatives. Cloud Security Policy, Guidance, and Strategy Documentation Development.> The Cloud Security Engineer is expected to participate in developing VUMC cloud security and technology policies, standard operating procedures, strategy, and guidance. He or she will exercise professional written and verbal skill sets to support developments in these areas, intending to publish all written and approved documents internally to the VUMC organization. Situational awareness will be maintained to the level of influence any produced documents have on the direction of the organization’s pursuit of cloud computing technologies and services. **TECHNICAL REQUIREMENTS** : + Identify, deploy, and maintain cloud security technologies. + Implement cloud security architecture design and recommendations. + Assist in developing a cloud defense strategy for the VUMC organization. + Familiar with the following cloud service providers (CSP) functions, features, and services (Azure, AWS, Google, Alibaba) - Preferred AZURE. + Provides advanced network knowledge and troubleshooting capabilities. + Skilled in cloud networking concepts + Independently delivers on objectives with an understanding of how they impact the results of his or her own area/team and other related teams. + Utilizes multiple sources of data to analyze and resolve complex problems. + Knowledgeable in cloud computing tools and solutions (Preferred Kubernetes, CSP Portals and Console UI’s listed above, Azure Security Center and Portal ) . + Preferred experience with Palo Alto Networks and Prisma Cloud solutions + Familiar with Microsoft O365 Security products and services + Understanding of containerization and virtualization + Capable of deploying cloud firewalls and threat prevention systems: security gateways (application/web) (WAF) + Establish solutions to conduct security assessments and audits. + Implement, troubleshoot, and maintain VPN connections. + Familiar with Azure Express Route, VNET, and Tenant/Subscription properties, capabilities, and operations. + Professional and effective verbal and written skills + Implement actions around Application Security (APPSEC) concepts and security measures. Our professional administrative functions include critical supporting roles in information technology and informatics, finance, administration, legal and community affairs, human resources, communications and marketing, development, facilities, and many more. At our growing health system, we support each other and encourage excellence among all who are part of our workforce. High-achieving employees stay at Vanderbilt Health for professional growth, appreciation of benefits, and a sense of community and purpose. **Core Accountabilities:** Organizational Impact: Executes job responsibilities with the understanding of how output would affect and impact other areas related to own job area/team with occasional guidance. Problem Solving/ Complexity of work: Analyzes moderately complex problems using technical experience and judgment. Breadth of Knowledge: Has expanded knowledge gained through experience within a professional area. Team Interaction: Provides informal guidance and support to team members. **Core Capabilities** **:** Supporting Colleagues:- Develops Self and Others: Invests time, energy, and enthusiasm in developing self/others to help improve performance e and gain knowledge in new areas.- Builds and Maintains Relationships: Maintains regular contact with key colleagues and stakeholders using formal and informal opportunities to expand and strengthen relationships.- Communicates Effectively: Recognizes group interactions and modifies one's own communication style to suit different situations and audiences. Delivering Excellent Services:- Serves Others with Compassion: Seeks to understand current and future needs of relevant stakeholders and customizes services to better address them.- Solves Complex Problems: Approaches problems from different angles; Identifies new possibilities to interpret opportunities and develop concrete solutions.- Offers Meaningful Advice and Support: Provides ongoing support and coaching in a constructive manner to increase employees' effectiveness. Ensuring High Quality: - Performs Excellent Work: Engages regularly in formal and informal dialogue about quality; directly addresses quality issues promptly.- Ensures Continuous Improvement: Applies various learning experiences by looking beyond symptoms to uncover underlying causes of problems and identifies ways to resolve them. - Fulfills Safety and Regulatory Requirements: Understands all aspects of providing a safe environment and performs routine safety checks to prevent safety hazards from occurring. Managing Resources Effectively: - Demonstrates Accountability: Demonstrates a sense of ownership, focusing on and driving critical issues to closure.- Stewards Organizational Resources: Applies understanding of the departmental work to effectively manage resources for a department/area.- Makes Data Driven Decisions: Demonstrates strong understanding of the information or data to identify and elevate opportunities. Fostering Innovation:- Generates New Ideas: Proactively identifies new ideas/opportunities from multiple sources or methods to improve processes beyond conventional approaches.- Applies Technology: Demonstrates an enthusiasm for learning new technologies, tools, and procedures to address short-term challenges.- Adapts to Change: Views difficult situations and/or problems as opportunities for improvement; actively embraces change instead of emphasizing negative elements. **Position Qualifications:** **Responsibilities:** **Certifications:** **Work Experience:** Relevant Work Experience **Experience Level:** 2 years **Education:** Bachelor's Vanderbilt Health recognizes that diversity is essential for excellence and innovation. We are committed to an inclusive environment where everyone has the chance to thrive and to the principles of equal opportunity and affirmative action. EOE/AA/Women/Minority/Vets/Disabled