Adopting and promoting engineering excellence byidentifyingefficiencies and synergies through means of automation, collaboration, and orchestration

Collaborates with architecture toidentifycapability gaps, develop requirements,identifysolutions to address,assistwith proof of concepts and testing of solutions

Implementation and technical lead responsibilities that include ongoingDevSecOps/Engineeringsupport for a global cryptography programthatleveragesa portfolio ofmulti-clouddata protection capabilities

Managing technology fromtheground up and understanding gaps within the tech stack, including overlap with other technology and/or coverage, capability gaps

Maintaining technology from a business as usual (BAU) aspect by ensuring the proper change management,disasterrecover,incident managementprocessesare occurring and current

Participate as one of several technical leads on team ofInformationSecurity engineers

Participate in authoring, editing, providing, or reviewing documentation (procedures, standards) to ensure a well-managed and mature security infrastructure

Partners with peerswithintheorganizationtoeffectively prioritize work by usingAgile processesand ensuring risks, impediments, and asks are brought to leadership ina timelyfashion

Plays a hands-on role in the engineering and implementation ofmulti-cloudsecurity measures that protectenterprise applications,computer systems,information, infrastructure, andnetworks

Plays a key role in designing and buildingmulti-cloudsolutionsthatsafeguard theorganizationsplatformsand systems

Proactivelyidentifiesproblems and clearlyarticulatessolutionsand recommendations

Provide day-to-day administration and support formulti-cloudinfrastructure related to API, application security, firewalls, encryption, intrusion detection systems, PKI, secrets management, vulnerability scanning, security monitoring tools, penetration testing, authentication, web filtering, identity management, or access control systems, and their associated logs and processes

Providingengineering/operationssupport formulti-cloudtechnology and processes, ensuring superior customer service is being met, andidentifyingprocess improvements

Serving as aleader,mentor, andsubject-matter expert (SME) to other InformationSecurityteam members and/or stakeholders throughout the organization

Serving as aSAFeProduct Owner for cryptographic technologies, accountable fordefining/leading/maintainingthe team backlog and product roadmap

Supporting a you build it you own it modelmeaning the technology built byEngineering is also supported from a wing-to-wing operations aspect

Works closely with Information Security program manager, scrum master, and architects to convey technical impacts todevelopment/engineeringtimeline and risks

Work independently inidentifyingopportunities to improve engineering or other performance for Information Security/Technology & other functions across Synchrony

Work withEnterprise andInformation Security/Technologyapplication owners, architects, developers,engineers, and governance teamsto drive program delivery

Perform other duties and/or special projects as assigned

Bachelordegree with a minimum of 5years experiencein Application Development, Information Security, Systems Engineering or related field; in lieu of a degree, a High School Diploma/GEDand minimum 7 years equivalent work experience

Minimum3+ years of experience in Cloud

Minimum3+yearsof experience in Cryptography

Minimum3+yearsof experience inDevSecOps

Minimum3+ years of experience in leadership roles (as Cryptography Engineer is preferred)

Minimum4+ years of experience with regulatory compliance and information security management frameworks (e.g., COBIT, ISO27001, NIST, etc.)

Proficient hands-on technical/workingexpertise with APIdevelopment, API security, AWS(Certificate Manager, KMS, Private CA,Secrets Manager),Azure(Key Vault),big data,CI/CD pipelines,Cloudbees/Jenkins,Cloudera, containers,cryptography methodologies,data encryption,databases,GCP (Cloud KMS, Secret Manager)Git/Github, Go,HashiCorpVault,Java,key/secrets management,Linux, Perl, PKI, Python,storage security,Terraform,tokenization

Excellent oral communication and writing skills. Adept and presenting complex topics,influencingand executing withtimely/ actionable follow-through

Ability to work under pressure and sustain productivity with multiple simultaneous projectsacross cross-functional engineering and operational information security teams

Certifications in audit, big data, cloud, cybersecurity, governance, information security, PCI, privacy, risk; AWS, Azure, CSA, GCP, GIAC, IAPP, ISC2, ISACA, PCI

Cloud Security experience, especially around designing, building, managing solutionswith the following vendors:

AWS(Primary)

Azure

GCP

Creativity and individual thinking, the ability to work both independently & with teams

Cyber Security experience, especially around designing, building, managing solutions

Demonstrate technicalexpertisein existing Information Technology/Security systems with the ability to keep pace with evolving security and technologies

Demonstrate an understanding of business needs and commitment to deliveringconsistent,efficient, high quality, reliable and responsive service to the business

Demonstrate an understanding of the impact of emerging business and end-user technologies have on Information Security architecture/engineering requirements

Demonstrated experience communicating complex and technical issues to diverse audiences (verbally and in writing), in an actionable and easy to understand manner

Demonstrated team focused mentality with proven experience to work effectively with diverse stakeholders

Experience with Agile, Scaled Agile (SAFe