This opportunity is part of the Global Technology Infrastructure & Operations team (GTIO), where our mission is to deliver modern and relevant technology that supports the way McDonald’s works. We provide best-in-class foundational technology products and services including Global Networking, Cloud, End User Computing, and IT Service Management. It’s our goal to always provide an engaging,
The Cloud Security Engineer III role is part of the Cloud Infrastructure and Operations team in Global Technology Infrastructure & Operations. The role reports to the Director of Cloud Security and is responsible for delivering the enterprise security platform engineering outcomes, delivering enhancements and automating security remediations, supporting DevOps and Engineers consuming cloud resources to ensure it is done in a meaningful and secure manner, and engaging with cybersecurity and risk management teams to improve the security posture of the cloud environments.
This is an exciting opportunity for an experienced technology leader to help shape the transformation of infrastructure and operations products and services to the entire McDonalds environment.
Responsibilities & Accountabilities:
- Automate the provisioning of cloud monitors, automated remediation, security baselines and templates through the concept of pipeline engineering.
- Implement core cloud security capabilities such as identity & access, data protection, security controls and compliance, vulnerability management, threat detection and response, and logging/monitoring.
- Performing penetration testing, red/blue teaming, and gap analysis with audit and cybersecurity partners to test and validate platform and pipeline controls.
- Support operations and incident response in cloud events and incidents.
- Design and deploy programs, dashboards, tests, scripts, and automation to enhance cloud security posture, detection, and response.
- Build prototypes and perform proof of concepts to demonstrate security value
- Remain up-to-date on emerging technologies and architecture and propose ways to use them in current and upcoming projects.
- Educate and guide team members on cloud standards, procedures, and guidelines/best practices.
- Act as a SME for all Cloud technical hands-on questions cloud security related.
- Lead and facilitate the creation of compliance automation and policy-as-code to streamline cloud governance in partnership with the Technical Product Analyst(s) and Manager(s).
- Strive to provide internal and external customers with excellent customer service and world-class service and focus on improvement and benefits to the cloud consumer’s outcomes.
- Influence and support more junior cloud security engineers and help develop their skill sets and understanding of cloud security.
- Ability to effectively communicate with other senior leaders of IT on program strategies and plans and negotiate quality solutions.
- Must be attentive to details, organized, self-motivated, and driven.
- Knowledge and understanding of industry trends and new technologies and ability to apply trends to architectural needs.
- Excellent written and oral communication skills with ability to communicate effectively with technical and non-technical staff.
- Defines and promotes best practices; cultivates a culture of innovation and learning, including willingness to instruct and coach in a cloud training program as needed.
- Demonstrated strong analytic and problem-solving abilities.
- Expert technical knowledge in three or more and strong technical knowledge in 6 or more of the following domains:
- Cryotography, encryption, and key management
- Data protection and security
- Governance and risk management
- Identity, access and permissions
- Infrastructure security
- Logging and monitoring
- Security event and incident response
- Threat and vulnerability management
- Application and interface security
- DevOps pipeline governance and security
- Professional-level cloud certifications (AWS, GCP, Azure)
Preferred Qualifications
- Infrastructure as Code (IaC) experience - scripting and automation via AZ CLI/PowerShell, Bash, Bicep, JSON templates etc.
- Deep experience in building Kubernetes environment.
- Prior experience in security Windows and Linux servers at scale. Enabling DevOps in IaaS/PaaS is a plus.
- Experience in multiple programming languages like Python, C#, Java, JavaScript, Ruby on rails etc.
Experience
- 5+ years of Cloud development and support experience such as Microsoft Azure, Amazon Web Services (AWS) or Google Cloud Platform (GCP) and a Bachelor’s degree or 3 years relevant experience and a Master’s degree.
- Demonstrated ability to provide architectural design, leadership, management, and mentoring to team members.
- Experience developing design specifications, test plans, and protocols.
- Experience mentoring less experienced team members.
McDonald’s is an equal opportunity employer committed to the diversity of our workforce. We promote an inclusive work environment that creates feel-good moments for everyone. McDonald’s provides reasonable accommodations to qualified individuals with disabilities as part of the application or hiring process or to perform the essential functions of their job. If you need assistance accessing or reading this job posting or otherwise feel you need an accommodation during the application or hiring process, please contact [email protected]. Reasonable accommodations will be determined on a case-by-case basis.
McDonald’s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Nothing in this job posting or description should be construed as an offer or guarantee of employment.
