Cloud Support Engineer
Role details
Job location
Tech stack
Job description
- Operate and optimize cloud infrastructure in accordance with FedRAMP High controls, including monitoring, incident response, configuration management, backups, and patching to maintain continuous compliance.
- Support privacy impact activities and ensure data flows adhere to BNY's data handling and protection standards within approved Azure boundaries.
- Manage identity, access, and authorization mechanisms such as Microsoft Entra ID (Azure AD), Active Directory, MFA, role-based access control, and Just-in-Time access to enforce least privilege and maintain access hygiene.
- Monitor Azure logs and alerts, triage and escalate incidents, participate in incident response testing and post-incident reviews, and enable relevant Azure security services.
- Coordinate oversight of third-party service providers interacting with BNY data or services, ensuring compliance with policies and supporting independent reviews.
- Define and enforce acceptable use restrictions for mobile code and communications technologies, and maintain clear, concise documentation and cross-team coordination.
Requirements
- Proven experience managing and securing FedRAMP High compliant environments, with strong hands-on skills in Azure identity, access, logging, incident handling, and configuration management.
- Expertise in Microsoft Entra ID/Azure AD, Active Directory, MFA (security keys/smartcards), Just-in-Time access, RBAC, and AAA concepts.
- Experience with Azure security alerts, audit log review, log analytics, alert triage, and incident response practices.
- Ability to build and maintain data and asset inventories, implement and track baseline configurations, and protect configuration plans.
- Strong technical writing and coordination skills to produce clear oversight documentation, runbooks, and reports.
- Experience collaborating with security, engineering, compliance, and vendor teams to drive outcomes in production environments.
- Preferred qualifications include hands-on experience operating Azure in enterprise or regulated environments, familiarity with security control frameworks and continuous monitoring, experience with Microsoft Defender for Cloud or similar tools, and knowledge of least-privilege design patterns and privileged access management.
- Bachelor's degree in computer science or a related discipline, or equivalent work experience required. 4 - 6 years of related infrastructure experience required; experience in the securities or financial services industry is a plus.
Benefits & conditions
America's Most Innovative Companies, Fortune, 2025 World's Most Admired Companies, Fortune 2025 "Most Just Companies", Just Capital and CNBC, 2025
Our Benefits and Rewards:
BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life's journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.
BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.
About the Team
At BNY, our culture speaks for itself, check out the latest BNY news at BNY Newsroom & BNY LinkedIn
Here's a few of our recent awards:
- America's Most Innovative Companies, Fortune, 2025
- World's Most Admired Companies, Fortune 2025
- "Most Just Companies", Just Capital and CNBC, 2025
Our Benefits and Rewards:
BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life's journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.
BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.
BNY assesses market data to ensure a competitive compensation package for our employees. The expected base salary for this position when employment commences can be found in the Job Info section at the bottom of the posting.
Base salary offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. Base salary is only part of the total rewards package, which may include eligibility for an annual discretionary incentive award. Subject to the terms and conditions of the applicable plans then in effect, eligible employees may enroll in a 401(k) plan as well as participate in Company-sponsored medical, dental, vision, and basic life insurance plans for the employee and the employee's eligible dependents. Eligible employees also may receive other benefits (including various paid time off benefits, such as vacation and sick time), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.
If hired, the employee will be in an "at will" position and the Company reserves the right to modify base salary (as well as any other discretionary payments or compensation programs) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.