DevOps Engineer – Cybersecurity Senior Associate

In order to address the most critical needs of our clients, RSM US LLP established the Security and Privacy Services Consulting (SPRC) practice, comprised of more than 300 professionals dedicated exclusively to serving the cloud engineering needs of our clients. This group includes experienced consultants located throughout the globe dedicated to helping clients with preventing, detecting, responding and recovering to security threats that may affect their critical systems and data. We serve a diverse client base within a variety of industries and are focused on meeting our clients where they need us most across a variety of security and risk domains - helping them realize their stated outcomes through our cyber advisory, assessment, implementation and managed solutions.  As part of this team, you are immersed in an environment where you are able to work directly with clients, helping advise, assess, implement and operate their critical operations.

We are seeking individuals to join our team with an interest in cloud transformation, architecture, and DevSecOps engineering. As a DevOps Engineer, you will play a critical role in driving cloud-native transformations, automation, and CI/CD enablement for RSM clients.  You will design and implement scalable DevOps pipelines, cloud infrastructure automation, and site reliability engineering (SRE) best practices to optimize application delivery and performance. In this client-facing role, you will work with cross-functional teams, including software engineers, architects, and cybersecurity professionals, to accelerate digital transformation initiatives across industries. The successful candidate will have solid working knowledge of leading cloud architecture and engineering practices, understanding of cloud architecture models, leading vendor products and solutions, cloud technology trends and innovation as well as experience leveraging this knowledge to benefit global organizations.

At RSM, associates work with large and medium-sized companies in variety of industries. They develop strong working relationships with their peers while learning their clients’ businesses and challenges facing their organizations. Associates work as part of a broader team under the direction of more senior members in support of one or more clients. Working in a mutually respectful team environment helps our associates perform at their best and integrate their career with their personal life. You will have the opportunity to:

• Work independently as well as with large project teams delivering value to RSM clients
• Experience working with distributed development and technology implementation teams. Experience building and running technology products, solutions, and capabilities
• Understanding and experience with Agile Delivery methods and approaches
• Assist clients with solving complex technology problems
• Perform hands on development and configuration to design, develop, and implement cloud capabilities for our clients
• Develop “as-code” cloud transformation accelerators for use on client engagements
• Understand business and technology risk and learn how to apply risk reduction techniques
• Grow sought after marketplace skills in areas such as Cloud Engineering, Cloud Security, DevSecOps,  Cloud FinOps, Cloud Migration, AI Development and Risk Management, Data Protection, Identity Management
• Understand, identify and research complex technology and security challenges
• Support the engagement of Cloud Transformation Leaders helping develop their strategies, drive success in their programs

Basic qualifications for this Sr. Associate-level position include:

• Personable, problem-solving oriented thinker who can develop a plan to solve a challenge they have been given. Willing to challenge themselves and bring their perspective to the conversation
• Doer / Driver type who is proactive about doing technical research, coming up with a plan, and brining recommendations to leadership.  Individuals who expect to sit idle while waiting to be tasked are not a good fit for this role
• The ability to interpret and convey technical information through written and oral communications to all levels of technical aptitude, including senior management
• Minimum B.A. or B.S. degree or equivalent from an accredited university by the time employment commences with a major in Computer Science, Information Technology, Information Systems Management, Information Security or other similar degrees
• Technical background in computer science and related fields
• High degree of integrity and confidentiality, as well as ability to adhere to company policies and best practices

Successful candidates typically have 4-6+ years of experience in the following areas:

• Experience delivering engineering solutions as code on client cloud platforms to include, to Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP) and other common Cloud IaaS and SaaS solutions (e.g. Oracle OCI, Alibaba, DigitalOcean).
• Hands-on cloud engineering and architecture expertise across cloud technologies and Transformation initiatives including: Cloud Transformation Strategy and Operating Models, Core Platform Engineering, Cloud Security, Cloud Centers of Excellence, DevSecOps, Cloud Operations, Application Disposition, Modernization, and Migration, and Applied Cloud Engineering in AI and Data Analytics.
• Experience in cloud architecture design and software development to include the development of Infrastructure as Code (IaC), Policy as Code (PaC), and cloud automation and integration software packages.
• Design, architect, implement and support simple to complex enterprise Cloud solutions for a variety of business use cases and requirements. Guide and mentor clients through the end to end cloud journey.
• Work as part of integrated squads of consultants and cloud engineers.
• Development of internal solution summaries and accelerator tool kits.
• Building demonstration scenarios and prototypes.
• Collaborating and working effectively with consultants in other regions and practices.

Required Qualifications:

• Bachelor's degree or graduate degree and 2-4 years of related work experience
• Proficiency with popular Cloud technologies (AWS, GCP, Azure)
• Experience developing and implementing at-scale cloud and hybrid architectures
• Ability to deliver end-to-end automation in a cloud environment
• Experience with software build automation, CI / CD pipelines, and a DevSecOps approach to technology delivery
• Experience with private, public and hybrid Cloud deployments

• Infrastructure as Code (IaC) and Policy as Code (PaC) experience
• Proficiency in Terraform and CSP native IaC languages (CloudFormation, ARM, Bicep)

• Proficiency in Python, Java, Powershell, C# .Net Bash, PowerShell, or Go. or alternative equivalent languages
• Knowledge of networking, security principles, and DevSecOps best practices.
• Ability to communicate effectively, both in writing, using presentations, and verbally
• Ability to interact effectively with internal and external resources at all organizational levels
• Experience guiding clients in the adoption of cloud-native, serverless, and containerized architectures (AWS, Azure, GCP).
• Experience participating in product management / agile approach to technology delivery
• Highly curiosity technology; ability to self-educate on new technologies with appropriate support form leadership. Motivated with a desire to keep learning and growing skillset

The following qualifications are preferred:

• Landing Zone Development and Deployment
• Cloud Managed Service Development and Delivery
• Experience with SIEM and SOC operations and technology stack to include Microsoft Sentinel and Microsoft Purview
• Experience performing technology assessments, gap analysis, audits and providing recommendations for improvement
• Cloud Security and Cloud FinOps approaches and tooling
• Cloud security frameworks, maturity models, and benchmarks (CSA CCM, NIST 800-53, CMMC, CIS etc)
• Certifications such as AWS Certified Solutions Architect – Professional, Azure Solutions Architect Expert, or Google Professional Cloud Architect. AWS Certified DevOps Engineer, Azure DevOps Expert, Google Professional DevOps Engineer.
• Proficiency with AWS Security Center and popular security services (IAM, Key Vault, etc.)
• Cloud FinOps experience.  Familiarity with AWS Cost Explorer, CUR, Budgets, CUDOS and Azure Cost Management, Analysis, Budgets Cost Alerts, Anomaly Detection
• Knowledge and proficiency with popular cloud security services (VPC, RDS, IAM, WAF, IDS/IPS, AS3, SQS, SNS, CloudWatch, CloudTrail, Inspector, Config, etc.)
• Experience with logging & monitoring tools (Prometheus, Grafana, Datadog, ELK, Splunk).
• GenAI infrastructure platform design and development
• DevOps tooling experience such as GitHub Actions, Jenkins, Azure DevOps or alternative CI / CD automation and orchestration tools
• Experience with CSP container registries and orchestration services  (Kubernetes, Docker, ECR, ECS, EKS, Fargate, AKS, ACA, ACI, ACR ) and container security leading practices
• A minimum 3.0 GPA in technical coursework