Cloud Engineer

at  Morgan Stanley

Cloud Engineer
Job Number:

3259923
POSTING DATE: Oct 2, 2024
PRIMARY LOCATION: Europe, Middle East, Africa-Hungary-Budapest-Budapest
EDUCATION LEVEL: Refer to Position Description
JOB: Other
EMPLOYMENT TYPE: Full Time
JOB LEVEL: Associate

DESCRIPTION

Cloud Engineer
We’re seeking someone to join our team as a Cloud Engineer.
The successful candidate joins the Cloud Security team that is responsible for securely enabling the use of cloud technologies to support the firm’s desire to leverage cloud-native services at enterprise scale. The Cloud Security team designs the security requirements that must be adhered to in cloud as well as builds the tooling and automation needed to provide enterprise capabilities to protect the firm and make securing workloads easier for application teams.
The team works with multiple cloud providers and is currently looking for an experienced Azure Security Engineer familiar with multiple cloud concepts, cloud services, and programming languages. The team this engineer will join implements security controls into our cloud platforms (detective, preventative, and corrective) and owns platforms used to further secure our cloud footprint. This team also works to enable the Security Operations teams to extend their enterprise security functions to the cloud environments.
Morgan Stanley is an industry leader in financial services, known for mobilizing capital to help governments, corporations, institutions, and individuals around the world achieve their financial goals.
Morgan Stanley Budapest is an integral part of the Firm’s global critical business functions including Technology, Finance, Risk, Institutional Securities and Wealth Management. Morgan Stanley has been rooted in the Budapest community since 2006 and is considered a leading employer among the area’s highly skilled talent. Our innovative team delivers deep technical and mathematical expertise to support the Firm’s capabilities in quantitative analysis, data analysis, and risk management. We are relentless collaborators and creative thinkers, fueled by our diverse backgrounds and experiences. We believe in empowering individuals to advance their careers through exposure to innovation, hands on collaboration and enriching learning and development opportunities.
Interested in joining a team that’s eager to create, innovate and make an impact on the world? Read on…

What you’ll do in the role:

• Developing, testing, and deploying Public Cloud Controls across the firm’s Cloud footprint.
• Providing security recommendations and solutions for migrating and new applications in the Morgan Stanley environment to Azure, AWS and GCP platforms.
• Serve as a subject matter expert for security tools, DevOps practices across all major Cloud Providers.
• Working closely with vendors and partner squads to develop, deploy, and test Cloud security services
• Responding to Cloud security drifts in timely manner and working with the stakeholders to remediate the drifts.
• Integrating, configuring, documenting, and deploying compliant infrastructure and supporting services in the Cloud platform
• Troubleshooting problems, analyzing root cause, and (where possible) fixing bugs introduced by owned or managed security solutions
• Collaborating with Risk Management, Security Architecture, and Cyber Incident Response teams to ensure necessary controls to Cloud services are deployed and tested
• Working in a globally distributed team to provide innovative and robust Cloud-centric solutions #LI-FT1 #BPTECH

QUALIFICATIONS

What you’ll bring to the role:

• Knowledge of the Shared Responsibility Model; keen understanding of the security risks inherent in hosting cloud-based applications and data
• Experience developing across the security assurance lifecycle (including prevent, detect, respond, and remediate controls)
• Experience configuring Public Cloud native security tooling and capabilities such as Azure Policy, Azure Monitor, AWS SCP and Google Cloud Organizational policies.
• Experience solutioning and configuring event-driven serverless-based security controls in Azure, including but not limited to technologies such as Azure Function, Automation Runbook, AWS Lambda and Google Cloud Functions.
• Deep understanding of DevOps processes and workflows.
• Working knowledge of the Secure SDLC process.
• Experience with Infrastructure as Code (IaC) tooling such as Terraform and ARM templates
• Familiarity with standard Cloud native CSPM tooling such as Defender for Cloud, AWS GuardDuty.
• Familiarity with Logging and data pipeline concepts and architectures in cloud.
• Strong in scripting languages such as PowerShell or Python or Bash.
• Experience creating technical architecture documentation.
• Excellent communication, written and interpersonal skills.
• Practical experience in designing and configuring CICD pipelines.
• Practical experience in Azure DevOps, GitHub Action, and Jenkins.
• Experience in ITSM.
• Ability to articulate complex technical concepts to non-technical stakeholders.
• Experience with risk control frameworks and engagements with risk and regulatory functions

You might also bring:

• Experience in the financial industry
• Cloud Certifications

We are committed to maintaining the first class service and high standard of excellence that have defined Morgan Stanley for over 85 years. At our foundation are five core values putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back that guide our more than 80 000 employees in 1 200 offices across 42 countries. At Morgan Stanley, you’ll find trusted colleagues, committed mentors and a culture that values diverse perspectives, individual intellect and cross collaboration. We Firm is differentiated by the caliber of our diverse team While our company culture and commitment to inclusion define our legacy and shape our future, helping to strengthen our business and bring value to clients around the world. Learn more about how we put this commitment to action morganstanley.com/diversity
We are proud to support our employees and their families at every point along their work life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry.
Interested in flexible working opportunities? Morgan Stanley empowers employees to have greater freedom of choice through flexible working arrangements. Speak to our recruitment team to find out more.
This role is deemed a Certified role and may require the role holder to hold mandatory regulatory qualifications or the minimum qualifications to meet internal company benchmarks.
Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives and experiences. Our strong commitment to a culture of inclusion is evident through our constant focus on recruiting, developing and advancing individuals based on their skills and talents.

What you’ll do in the role:

• Developing, testing, and deploying Public Cloud Controls across the firm’s Cloud footprint.
• Providing security recommendations and solutions for migrating and new applications in the Morgan Stanley environment to Azure, AWS and GCP platforms.
• Serve as a subject matter expert for security tools, DevOps practices across all major Cloud Providers.
• Working closely with vendors and partner squads to develop, deploy, and test Cloud security services
• Responding to Cloud security drifts in timely manner and working with the stakeholders to remediate the drifts.
• Integrating, configuring, documenting, and deploying compliant infrastructure and supporting services in the Cloud platform
• Troubleshooting problems, analyzing root cause, and (where possible) fixing bugs introduced by owned or managed security solutions
• Collaborating with Risk Management, Security Architecture, and Cyber Incident Response teams to ensure necessary controls to Cloud services are deployed and tested
• Working in a globally distributed team to provide innovative and robust Cloud-centric solutions #LI-FT1 #BPTEC

What you’ll bring to the role:

• Knowledge of the Shared Responsibility Model; keen understanding of the security risks inherent in hosting cloud-based applications and data
• Experience developing across the security assurance lifecycle (including prevent, detect, respond, and remediate controls)
• Experience configuring Public Cloud native security tooling and capabilities such as Azure Policy, Azure Monitor, AWS SCP and Google Cloud Organizational policies.
• Experience solutioning and configuring event-driven serverless-based security controls in Azure, including but not limited to technologies such as Azure Function, Automation Runbook, AWS Lambda and Google Cloud Functions.
• Deep understanding of DevOps processes and workflows.
• Working knowledge of the Secure SDLC process.
• Experience with Infrastructure as Code (IaC) tooling such as Terraform and ARM templates
• Familiarity with standard Cloud native CSPM tooling such as Defender for Cloud, AWS GuardDuty.
• Familiarity with Logging and data pipeline concepts and architectures in cloud.
• Strong in scripting languages such as PowerShell or Python or Bash.
• Experience creating technical architecture documentation.
• Excellent communication, written and interpersonal skills.
• Practical experience in designing and configuring CICD pipelines.
• Practical experience in Azure DevOps, GitHub Action, and Jenkins.
• Experience in ITSM.
• Ability to articulate complex technical concepts to non-technical stakeholders.
• Experience with risk control frameworks and engagements with risk and regulatory function