The Cloud Network and Cyber Security Engineer will report to and assist the VP of IT Infrastructure and Security and will be responsible for designing, implementing, and maintaining secure and scalable cloud and on-premise network architectures. As part of the Infrastructure and Security team, this role will help lead cyber security efforts, securing our sensitive data and critical assets from current and emerging threats, and be the primary technical contact for all information security tooling, security risk and incident mitigation efforts, and documentation in our APAC region. This role will also work closely with the Lead Cyber Security Engineer and cross-functional teams to ensure that our organization’s systems are compliant with industry best practices and regulatory standards.The Cloud Network and Cyber Security Engineer will provide security and configuration expertise and will work with functional leaders on broad technical initiatives around design, implementation, rollout, and monitoring of cloud enterprise systems in support of Keypath’s global cyber security and cloud roadmap. The Cloud and Network Cyber Security Engineer will also provide mentoring of System Administrators in security-related topics. ESSENTIAL DUTIES AND RESPONSIBILITIESDesign and implement scalable and resilient cloud network architectures across multiple cloud platforms (e.g., Azure, AWS) to support our business operations.Ensure high availability, performance, and reliability of cloud-based networks by implementing redundancy, load balancing, and fault-tolerant configurations.Perform cyber defense incident triage, to include determining scope, urgency, and potential impact, identifying the specific vulnerability, and making recommendations that enable timely remediation. Collect intrusion artifacts (e.g., source code, malware, Trojans) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.Collaborate with cross-functional teams to gather requirements and design network solutions that meet business needs.Partner with leadership to educate staff in security best practices and requirements laid out in company security and technology policies and standards.Enforce policies, procedures, and security controls to ensure compliance with all applicable laws, regulations, and standards, such as SOC 2 and ISO 27001.Monitor and report on the effectiveness of the information security and compliance program, providing regular updates to senior management and relevant stakeholders.Participate in BC/DR and incident response tabletop exercises.In conjunction with 3rd party gap assessments, identify and recommend mitigation for security gaps in existing and proposed architectures.Other duties as assigned.
