Senior Cloud Engineer

Fivesky • $110K — $130K *

Alpharetta, GA 30022In-Person

Information Technology

Less than 5 years of experience

Today

Be an Early Applicant

Job Overview by Ladders

Qualifications

5-7 years of experience in Data Loss Prevention (DLP) and security engineering in enterprise environments.
Strong understanding of networking, firewalls, and data protection technologies.
Proficient in scripting languages for automating security processes.
Bachelor's Degree in Computer Science, Computer Information Systems, or Electrical Engineering required.
Experience with Cloud Access Security Brokers (CASB/MCAS) and Active Directory.

Responsibilities

Implement security controls and develop solutions for information protection.
Architect and engineer DLP solutions across the enterprise environment.
Advise on Data Loss Policy development and configure DLP policies.
Perform installations and upgrades of three-tier DLP systems in production.
Create deployment procedures and publish fixes in the knowledge base.
Configure network scans to identify and quarantine sensitive data.
Automate security procedures using scripting languages.

Benefits

Collaborative work environment with cross-functional teams.
Opportunity to work with leading financial institutions.
Focus on innovative security solutions and technologies.
Professional development and training opportunities.

Show MoreShow Less

Full Job Description

Are you a data protection expert who loves building security controls that actually stop data from walking out the door? Do you want to architect and engineer enterprise-wide Data Loss Prevention for some of the world's largest financial institutions? If so, you might be Fivesky's next Senior Cloud Engineer!

Who you are:

Experienced in Data Loss Prevention (DLP), cloud integration, and security engineering across enterprise environments.
Deeply familiar with networking, firewalls, and data protection technologies, and able to troubleshoot issues across the application and transport layers.
Capable of automating security processes using scripting languages and building workflows for incident alerting, response, and remediation.
A strong collaborator who partners with Operations and Network teams to deliver secure, stable, and scalable enterprise environments.
Bachelor's Degree is required in Computer Science, Computer Information Systems, or Electrical Engineering.

It would be awesome if you had:

Expertise in architecting and engineering DLP solutions integrated across user, network, email, and cloud environments.
Knowledge of Cloud Access Security Brokers (CASB/MCAS), Active Directory, Kerberos, and TLS encryption for enterprise data protection.
Experience with three-tier DLP installations, upgrades, health checks, and policy fine-tuning to reduce false positives.
Hands-on familiarity with network traffic analysis, VPN tunneling, NAT, and proxy configurations (PAC, ICAP, etc.).
A track record of designing and implementing automated, scalable security controls aligned to evolving business and compliance needs.

What you will do:

Implement security controls in an enterprise environment and develop security solutions for information protection.
Architect and engineer DLP solutions across the enterprise environment and integrate DLP controls across user environments.
Advise on Data Loss Policy development as business needs evolve, and configure DLP policies to prevent data loss in email and web traffic.
Perform three-tier DLP installations and version upgrades in production, and conduct periodic health checks and performance assessments.
Create procedures and workflows for production deployment, and publish fixes in the knowledge base.
Configure network scans on DLP detection servers to identify sensitive data at rest and quarantine data classified as Restricted.
Generate data indexes/fingerprints remotely for use in Exact Data Match (EDM) detection rules within DLP policies.
Extend DLP capabilities to cloud applications using MCAS/CASB to monitor protected data in motion and at rest.
Automate security procedures using scripting languages based on the operating system in use.
Configure detection server settings to route traffic through specific TCP ports, and build DLP detection rules to monitor data stored and transferred from endpoint devices.
Configure prevent actions for HTTP/S, FTP, SMTP, SMB, SFTP, and other protocols, including web block, email encryption, and quarantine responses for outgoing traffic.
Troubleshoot network issues involving firewalls, traffic routing, proxies, and gateways across application and transport layer protocols.
Develop Proxy Auto Config (PAC) files to route traffic through defined proxy servers, and configure Network Prevent DLP detection servers to use ICAP.
Interpret network diagrams and apply knowledge of VPN tunneling, NAT, the OSI model, LAN/WAN, SSL, and packet trace analysis to structure DLP network architecture and traffic routing.
Configure Active Directory connections over TCP ports using LDAP, and enable Kerberos authentication by modifying Kerberos initialization files.
Configure Active Directory security group policies for DLP user/group exceptions to restrict data access and usage.
Generate key pairs and configure keys and certificates for end-to-end TLS email encryption.
Collaborate with Operations to troubleshoot production issues and perform root cause analysis on data loss caused by detection failures in network or email traffic.
Debug network traffic logs to resolve critical production issues, and fine-tune service memory settings based on traffic load on detection servers.
Use Security Incident and Event Management (SIEM) tools to monitor suspicious user activity in network traffic.
Develop DLP incident alerting, response, and remediation workflows, and analyze incidents to identify malicious insiders and false positives for detection rule fine-tuning.
Build user attributes for identified DLP security incidents.
Modify firewall rules to enable communication between DLP detection servers and ensure full detection coverage without violating company firewall policy.

(FS-RID-0467)

Show MoreShow Less

About Fivesky

Fivesky is a technology consulting firm that provides end-to-end solutions for businesses. The company specializes in cloud computing, cybersecurity, and digital transformation. Fivesky's team of experts work with clients to identify their unique needs and develop customized solutions that help them achieve their goals. The company is committed to delivering high-quality services and building long-term relationships with its clients. Fivesky has offices in New York, Toronto, and Kyiv.

Learn more about Fivesky

Size

500 employees

Industry

Information Technology

Net Income

$10 million

Founded

2017

5 Year Trend

+50%

Revenue

$150 million

NASDAQ

FSKY

* Ladders Estimates

Similar Jobs

Cloud Security Engineer
$90K — $130K *
Greenberg Traurig
Atlanta, GA 30349 (FULTON County)
More than 3 months ago
Cyber Oracle Cloud Security - Consultant / Security Engineer II
$82K — $162K *
Deloitte
Atlanta, GA 30349 (FULTON County)
More than 3 months ago
Lead Specialist, Cloud Security
$114K — $268K *
KPMG
Atlanta, GA 30349 (FULTON County)
2 months ago
Lead Cloud Identity Engineer
$120K — $145K *
Koch Industries
Atlanta, GA 30349 (FULTON County)
2 months ago
Sr. Cybersecurity Specialist
$110K — $130K *
Altium Packaging
Atlanta, GA 30349 (FULTON County)
2 months ago
Cyber Senior Consultant - Cloud DevSecOps
$105K — $207K *
Deloitte
Atlanta, GA 30349 (FULTON County)
2 months ago

More Jobs at Fivesky

Program Financial and Governance Reporting Analyst
$75K — $95K *
Montreal, QC H1A 0A1
More than 3 months ago
Information Technology
In-Person

More Information Technology Jobs

Machine Learning Researcher
$150K — $180K *
NXT Level Technologies
San Francisco, CA 94112 (SAN FRANCISCO County)
Today
Senior Manager, Project Manager
$110K — $130K *
Appnovation Technologies
Toronto, ON M3C 0E3
Today
SOC Analyst (Secret Clearance)
$95K — $115K *
ShorePoint Inc.
Denver, CO 80219 (DENVER County)
Today
Zero Trust Architect / SME (Q/Top Secret Clearance)
$150K — $180K *
ShorePoint Inc.
Washington, DC 20011 (DISTRICT OF COLUMBIA County)
Today
Principal Product Manager, AI Infrastructure
$218K — $328K *
Equinix
Redwood City, CA 94061 (SAN MATEO County)
Today