Sr. Lead - Cyber Security Cloud Engineer

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.

Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.

With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Position Overview

Northern Trust is seeking a Sr Lead, Cloud Security Engineer to secure a highly available multi-cloud provider environment for an organization undergoing an exciting transformation to the cloud. The job will require the right candidate to secure cloud infrastructure to protect Northern Trust’s cloud-hosted assets and applications. The role is responsible for designing, implementing, and governing cloud security controls across enterprise cloud platforms, with a strong focus on Microsoft Azure. This role will act as a technical leader driving secure‑by‑design cloud architectures, security automation, and compliance at scale, while partnering closely with Cloud Platform, DevOps, and Risk teams.

This role requires a hands‑on security engineer who can define cloud security strategy, build security tooling, and influence the cloud roadmap while ensuring alignment with enterprise risk and regulatory requirements.

Key Responsibilities

Cloud Security Engineering & Architecture

• Develop, implement, and enforce Policy-as-Code (PaC) for cloud environments (Azure and AWS) to configure, detect, remediate, and enforce security standards.

• Define and implement security policies based upon CIS/NIST industry benchmarks.

• Support remediation of security vulnerabilities and misconfiguration using Cloud Posture Management and ITSM tooling in accordance with Service Level Agreements (SLA).