Cloud Governance, Risk, and Compliance Engineer

Sr Cloud Engineer - IE07NE

We’re determined to make a difference and are proud to be an insurance company that goes well beyond coverages and policies.

Working here means having every opportunity to achieve your goals and to help others accomplish theirs, too. Join our team as we help shape the future.

The Cloud Services organization is searching for Senior Cloud Engineer aligned to the Cloud Governance Team. This is an individual contributor position and the candidate is expected to be a technical lead helping guide the Cloud Governance team by driving an end-to-end vision and instrumentation of preventive and detective controls across The Hartford’s cloud environment.

Additionally, the candidate will need to support the greater alignment of our collective Cloud Services and Cloud customer base on the adoption of these capabilities.

At The Hartford, our AWS cloud presence is growing and you will have a direct impact on the Governance Risk and Compliance (GRC) standards of our cloud portfolio.

You will have the opportunity to design, build, and innovate Governance Risk and Compliance GRC related solutions that improve enterprise cloud computing and heighten security and compliance.

This technical lead position requires 7+ years of industry experience, preferably in Cloud Engineering or Cloud Security Engineering.

Possessing an engineering mindset to analyze and identify outstanding governance, risk, and compliance gaps and build maintainable standards and solutions is required.

The right candidate should be passionate for engineering; anything from identifying simple solutions to solving complex problems in support of our enterprise usage of AWS cloud services.

Responsibilities :

Serve as the primary technical lead engineer accountable for the success of the technical instrumentation of preventive (IaC Scanning, SCPs, Policy as Code) and detective (Cloud Security Posture Management, Configuration Drift) controls across The Hartford’s public cloud environment (primarily AWS).

Identify, engineer, and support automation to facilitate compliance with Governance Risk and Compliance (GRC) requirements for both preventative and detective controls.

Actively identify Governance Risk and Compliance (GRC) gaps and lead the design and engineering efforts to mitigate gaps across the Cloud Services portfolio.

Develop robust KPI’s that measure the adoption and effectiveness of Governance Risk and Compliance (GRC) capabilities deployed across The Hartford.

Provide transparency and status reporting using meaningful and actionable scorecards with relevant operational metrics.

Lead continuous process improvement, automation and third-party tooling that supports scalable compliance and audit support functions.

Integrate Governance Risk and Compliance (GRC) toolsets into enterprise capabilities including Continuous Integration and Continuous Deployment pipelines, IT Service Management tooling, and Data Warehouse Platforms.

Act as a Cloud Engineering role model by actively building an engineering culture and actively mentor junior engineers.

Support broader Cloud Governance organization by actively contributing to open audits and reduction of residual risks created by existing control gaps.

Qualifications :

7+ years of IT experience with an emphasis on Cloud Infrastructure, Security Engineering, Governance and Compliance, and Automation Support

Bachelor of Science in Information Technology (or related field) OR additional work experience in a suitable field

Proficiency in security and governance related AWS services including but not limited to CloudTrail, Security Hub, Config, GuardDuty, Inspector, SSM, and ControlTower

Strong expertise in AWS services including but not limited to EC2, S3, ECS, EKS, RDS, Fargate, Lambda, etc.

Strong background in systems engineering, cloud administration, or security engineering and have been responsible for the implementation and delivery of an enterprise solution

Working experience with Continuous Integration and Continuous Deployment concepts, inclusive of source code management, automated build and deployment, artifact management, security scanning, and best practices for leveraging Infrastructure as Code (IaC)

Understanding of Configuration Management process, goals, and practices for cloud resources.

Foundational knowledge on Engineering concepts including Source Code Management (GitHub), enterprise log aggregation and monitoring (Splunk), networking, encryption, and Configuration Management and Drift (Ansible, Posture Management).

Experience with Cloud Security standards and frameworks including NIST, CIS, etc.

Ability to effectively communicate, both verbally and written, and has experiencing working in an agile development team along with its associated methodologies and toolsets.t

This role will have a Hybrid work arrangement, with the expectation of working in an office 3 days a week (Tuesday through Thursday).

Compensation

The listed annualized base pay range is primarily based on analysis of similar positions in the external market. Actual base pay could vary and may be above or below the listed range based on factors including but not limited to performance, proficiency and demonstration of competencies required for the role.

The base pay is just one component of The Hartford’s total compensation package for employees. Other rewards may include short-term or annual bonuses, long-term incentives, and on-the-spot recognition.

The annualized base pay range for this role is :

$133,760 - $200,640

Equal Opportunity Employer / Females / Minorities / Veterans / Disability / Sexual Orientation / Gender Identity or Expression / Religion / Age

About Us Culture & Employee Insights Diversity, Equity and Inclusion Benefits