Apply on Employer Site

Ford Motor Company · 8 hours ago

Cloud Security Engineer

United States

Full-time

Remote

Senior Level

5+ years exp

Ford Motor Company is looking for a Cloud Security Engineer to join their Enterprise Cyber Security Cloud Security team. The role involves collaborating with other teams to secure Ford's public cloud infrastructure and developing automation for security workflows and audits.

AutomotiveAutonomous VehiclesManufacturingTransportation

No H1B

Responsibilities

Partner with other Cloud Security team members to identify and develop automation for security related workflows and audits (VPC SC, DLP, Exceptions, Org Policy, etc..)

Lead evaluation and develop an understanding of tools needed to address security gaps

Lead/Collaborate with EPEO Services teams on security gap remediation

Qualification

Cloud Security AutomationGCP/Azure Security ComplianceScriptingAutomationGitGitHubCI/CD PipelinesInfrastructure-as-Code (IaC)Security Best PracticesTeam OrientationAgile Project PlanningCommunication SkillsProblem Solving

Required

Bachelor's degree in Computer Science, Information Technology or related OR a combination of education and experience

5+ years of scripting and automation experience

Proven experience in developing and implementing automation using scripting languages such as Python, PowerShell, or Go, particularly for API integrations, security tool orchestration, and custom audit scripts

Solid understanding and practical experience with Git and GitHub for version control, collaborative development, and security automation pipeline management

Familiarity with CI/CD pipelines and automated deployment tools (e.g., Jenkins, Azure DevOps, GitHub Actions) to integrate security automation into the software development lifecycle

Knowledge of Infrastructure-as-Code (IaC) principles and tools like Terraform

Strong knowledge of security best practices and guidelines (at the enterprise-level) related to GCP and Azure Cloud deployments as well as common web application frameworks

Understand the functionality and secure usage of various GCP services: VPCs, IAM, security groups, compute engine, cloud storage, Security Command Center, VPC Service Control, Cloud DLP and Cloud Armor

Customer focused and strong team orientation

Self-starter and fast-learner

Strong communication and interpersonal skills

Strong problem solving and Analytical/Reasoning skills

Strong drive for results and ability to work independently

Demonstrated commitment to quality and project timing

Familiarity with the agile project planning process and use of Rally

Document processes & procedures and developing other documentation

Preferred

Understand the functionality and secure usage of various Azure services: Virtual Machines, Virtual Networks, Azure Active Directory, App Services, Azure SQL Databases, Storage Accounts, Kubernetes, Containers, Key vaults