Senior Cloud Application Security Lifecycle Specialist

Job Description

At Boeing, we innovate and collaborate to make the world a better place. We?re committed to fostering an environment for every teammate that?s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us. Boeing Information Technology & Data Analytics (IT&DA) is seeking a Senior Cloud Application Security Lifecycle Specialist to join the team in either Seattle, WA; North Charleston, SC; Hazelwood, MO; or Mesa, AZ. The Cloud and Development Platform team aims to provide a consumer like services which deliver agility, self-service and automation of compute, network and storage capability to enable business competitiveness and keep Boeing and its partners connected in the most innovative, efficient and effective way. We are looking for passionate individuals to continuously create and sustain the secure operating environment across the cloud service providers (AWS, Azure, GCP). This role will work closely with cross-functional teams to define, implement, maintain policies as code, automate policy enforcement, ensure compliance with regulatory standards, and enhance the overall security posture for the cloud platform and hosted workloads. Position Responsibilities: ? Partner with product owner, technical integrator, and architect collaborating within agile teams to deliver complex and highly complex technical user story/tasks ? Security-first development of solution architecture, documentation and support infrastructure services deployed on cloud ? Design, develop, and implement advanced technical automation solutions ? Develop and maintain policies in a code format using tools such as Terraform, Open Policy Agent (OPA), or similar frameworks ? Collaborate with security, compliance, and engineering teams to identify policy requirements and translate them into code ? Automate policy enforcement and monitoring to ensure compliance with internal and external regulations ? Conduct regular audits and assessments of policy implementations to identify gaps and areas for improvement ? Create and maintain documentation for policies, procedures, and code implementations ? Provide training and support to teams on policy as code practices and tools ? Stay updated on industry trends, best practices, and regulatory changes related to policy management and compliance ? Create and maintain necessary software design and relevant documentation ? Provide suggestions in identifying Technical Debt and make recommendations for removal ? Participate in group sessions within developer community and share knowledge ? Resolve problems and roadblocks as they occur, consistently following through details while driving innovation as well as issue resolution ? Monitor the implementation of architecture throughout the system development lifecycle and seek and provide clarification when needed Basic Qualifications (Required Skills/Experience): ? 5+ years of experience with Development Operations (DevOps) or Development Security Operations (DevSecOps) ? 5+ years of experience with Continuous Integration and Continuous Delivery (CI/CD), deploying to cloud environments ? 5+ years of experience with cloud-platform technologies (AWS, Azure, GCP) ? 5+ years of experience with Software Defined Networking and Network Function Virtualization ? 5+ years of experience with release tools (Azure DevOps, Artifactory, Gitlab, Maven), configuration management, monitoring, virtualization and containerization ? 3+ years of experience working with technical infrastructure configurations such as servers, databases, networks, development environments, services and software ? Experience in Infrastructure as Code (IaC) and CI/CD environments Preferred Qualifications (Desired Skills/Experience): ? 5+ years of experience with Cloud Infrastructure Scripting including ARM/Cloud Formation, Terraform, Node, Python, and PowerShell ? 5+ years of experience with security compliance tools such as AWS Inspector, AWS Security Hub, AWS Cloud Watch, Google Security Command Center, Microsoft Defender for Cloud, Microsoft Defender for Endpoint, and Azure Monitoring Agent Drug Free Workplace: Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies. Pay & Benefits: At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $148,750 - $215,050 Applications for this position will be accepted until Apr. 03, 2025 Export Control Requirements: This position must meet export control compliance requirements. To meet export control compliance requirements, a ?U.S. Person? as defined by 22 C.F.R. ?120.15 is required. ?U.S. Person? includes U.S. Citizen, lawful permanent resident, refugee, or asylee. Export Control Details: US based job, US Person required Relocation Relocation assistance is not a negotiable benefit for this position. Visa Sponsorship Employer will not sponsor applicants for employment visa status. Shift This position is for 1st shift Equal Opportunity Employer: Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. Apply Job!