Cloud Security Engineer, Senior

Requisition ID # 166413

Job Category: Engineering / Science

Job Level: Individual Contributor

Business Unit: Information Technology

Work Type: Hybrid

Job Location: Oakland

Department Overview

As a Senior Cloud Security Engineer on the Cybersecurity Services COE team, you will be responsible for supporting the secure design and delivery of technology tasks to protect PG&E against cyberattacks. In this role, you will be executing on design of interoperable platforms to implement effective security controls and compliance requirements. You will engage with other engineers and the major functions needed to support the identification of security controls, the detection of cybersecurity events and issues, and the prevention of cyberattacks.

Ensure that security requirements are met in an efficient, sustainable, adaptable, and reusable manner. Maintain a focus on both the present and the future, keeping in mind that cyberattacks against PG&E’s critical infrastructure are constantly evolving. Collaborate with multiple teams, both within the security department and with other PG&E lines of business.

Position Summary

The Senior Cloud Security Engineer role is responsible for security automation of cloud services for PG&E.

PG&E is providing the salary range that the company in good faith believes it might pay for this position at the time of the job posting. This compensation range is specific to the locality of the job. The actual salary paid to an individual will be based on multiple factors, including, but not limited to, specific skills, education, licenses or certifications, experience, market value, geographic location, and internal equity. We would not anticipate that the individual hired into this role would land at or near the top half of the range described below, but the decision will be dependent on the facts and circumstances of each case.

A reasonable salary range is:

Bay Area Minimum: $118,000

Bay Area Maximum: $188,000

This position is hybrid, working from your remote office and your assigned work location based on business need. The assigned work location will be within the PG&E Service Territory. Job Responsibilities

- Contribute and collaborate with team architects to implement initiatives for cybersecurity services.

- Develop and update service menus for cybersecurity domains.

- Model threats and identify controls to mitigate the risk that a successful attack will occur.

- Ensure that architectural deliverables are properly documented and kept up to date.

- Provide peer review and support for Cybersecurity’s organizational deliverables.

- Be a key participant in the company’s integrated planning processes and implement changes.

- Be an important interface with IT domain architects and IT solution architects.

- Engage with technology governance processes in IT and the lines of business.

Qualifications

Minimum:

- Bachelors Degree in Computer Science or job-related discipline or equivalent experience

- 5 years experience in IT-Information Technology

- 2 years experience in IT-Information Technology security

- 1 year experience in IT-Information Technology Cloud Technologies

- Experience working in Agile/Scrum environment

- Experience with computer programming and automation

- AWS-Amazon Web Services Certified Solutions Architect – Associate Certification or equivalent

Desired:

- Experience as a sysadmin in using OS platform (Linux/Unix).

- Experience with continuous integration and deployment technologies.

- Experience with configuration management and automation tools such as Chef, Puppet and Ansible.

- Experience with network fundamentals such as DNS, HTTP, TCP/IP.

- Experience with AWS API Gateway, AWS Network Firewalls, VPC Peering, AWS Autoscaling.

- Experience with Azure operations, Azure security tools, and Entra ID.

- Knowledge of cybersecurity technologies and products deploying those technologies.

- Knowledge of cybersecurity risk management and associated metrics.

- Knowledge of regulatory requirements (including but not limited to SOX, NERC-CIP, TSA, CCPA.

- Experience with industrial-control system (ICS) technologies commonly used in utilities.

- Experience with enterprise architecture tools.

- Experience providing direction to design and engineering staff.

- Experience providing direction to one or more architects.