Job description

Do you want your voice heard and your actions to count? Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world. With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career. Join MUFG, where being inspired is expected and making a meaningful impact is rewarded. The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details. Job Summary: The Cloud Engineering, Vice President position is a hands-on expert responsible for turning high-level cloud designs into secure, automated, and production-ready infrastructure across AWS, Azure, and OCI. This role requires disciplined engineering, deep knowledge of Terraform for Infrastructure as Code, and a commitment to automation, compliance, and reliability. The ideal candidate is capable of independently building and operating complex cloud environments, automating deployment pipelines, hardening platforms against security threats, and managing multi-cloud services at scale. Success in this role depends on strong execution, ownership of delivery, and the ability to refine engineering standards through code reviews, documentation, and mentoring others. Your work will directly improve platform stability, delivery speed, and team capability. Core Responsibilities: Infrastructure Engineering and Delivery Implement multi-cloud infrastructure aligned with enterprise design standards and governance controls. Engineer compute, storage, network, and identity services across AWS, Azure, and OCI with an emphasis on automation, repeatability, and security. Deliver production-grade builds with automated patching, backup, and monitoring integrated from day one. Infrastructure as Code and Automation Define, modularize, and maintain reusable Terraform codebases and state management strategies across multiple accounts and tenants. Create CI/CD pipelines using Azure DevOps, GitHub Actions, or Jenkins to orchestrate provisioning, testing, and deployment of infrastructure. Integrate policy-as-code, compliance scanning, and automated guardrails into all deployment workflows. Security and Compliance Integration Enforce least-privilege IAM, encryption, network segmentation, and configuration hardening aligned to CIS and NIST 800-53 frameworks. Implement continuous compliance and drift detection through automation and native cloud controls. Collaborate with security engineering to integrate vulnerability scanning, key management, and secrets automation. Cloud Networking and Connectivity Design and deploy hybrid connectivity (VPN, Direct Connect, ExpressRoute, OCI FastConnect), private endpoints, and inter-VPC/VNet peering. Implement resilient routing, DNS, and firewall configurations supporting multi-region failover and segmentation. Operations and Observability Build telemetry, monitoring, and alerting solutions using native services (CloudWatch, Azure Monitor, OCI Observability) and third-party tools. Lead incident analysis, root cause investigation, and long-term remediation through automation. Optimize cost, performance, and reliability through continuous measurement and tuning. Collaboration and Mentorship Partner with architecture, security, and platform engineering to ensure consistency across environments. Mentor engineers in Terraform, automation best practices, and operational excellence. Author detailed runbooks, reference implementations, and design documentation to standardize delivery. Qualifications: 8 years in enterprise infrastructure engineering, with at least 6 years in public cloud engineering roles. Proven success building and operating secure, automated AWS, Azure, and OCI environments. Demonstrated capability in multi-account governance, landing zone engineering, and environment standardization. Strong record of automating deployment pipelines and operational processes end-to-end. Technical Expertise Cloud Platforms: Advanced proficiency in AWS (IAM, VPC, EC2, S3, Route53, Security Hub, GuardDuty), Azure (AD, networking, container services, resource management), and OCI (VCN, IAM, compartments, object storage, security zones). Infrastructure as Code: Deep experience in Terraform (preferred over CloudFormation) including module design, state management, workspaces, and version control integration. Automation & Scripting: Skilled in Python, PowerShell, or Bash for infrastructure automation, orchestration, and operational tooling. DevSecOps Pipelines: Expertise in designing CI/CD workflows for infrastructure deployment using Azure DevOps, GitHub Actions, or Jenkins. Networking: Strong command of IP routing, subnets, VPNs, DNS, firewalls, and private connectivity across clouds. Security Engineering: Hands-on implementation of IAM, encryption, secrets management, vulnerability scanning, and compliance automation. Soft Skills Self-driven and capable of owning complex builds through completion. Precise technical communicator able to interpret architecture and deliver engineered, automated outcomes. Collaborative across disciplines while maintaining a deep technical focus. Passionate about continuous improvement and mentorship within a technical team. Preferred Professional-level certifications such as AWS Solutions Architect – Professional, Azure Solutions Architect Expert, or OCI Architect Professional. Experience supporting regulated or security-sensitive environments such as finance or government. Success Indicators Terraform modules and pipelines are standardized, version-controlled, and auditable. Multi-cloud environments are secure, observable, and compliant by design. Deployments are automated, repeatable, and measurable for performance and cost. Junior engineers adopt your code patterns and operational practices as the team standard. Education: •Bachelor s degree in Computer Science or a closely-related discipline, or an equivalent combination of formal education and experience “Visa sponsorship/support is based on business needs. We do not anticipate providing visa sponsorship/support for this position.” The typical base pay range for this role is between $159K - $194K depending on job-related knowledge, skills, experience, and location. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays. MUFG Benefits Summary We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any. The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified. We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual’s associates or relatives that is protected under applicable federal, state, or local law.

Requirements

Must-haves

Do you want your voice heard and your actions to count?
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.
Infrastructure Engineering and Delivery
Implement multi-cloud infrastructure aligned with enterprise design standards and governance controls.
Engineer compute, storage, network, and identity services across AWS, Azure, and OCI with an emphasis on automation, repeatability, and security.
Deliver production-grade builds with automated patching, backup, and monitoring integrated from day one.
Infrastructure as Code and Automation
Define, modularize, and maintain reusable Terraform codebases and state management strategies across multiple accounts and tenants.
Create CI/CD pipelines using Azure DevOps, GitHub Actions, or Jenkins to orchestrate provisioning, testing, and deployment of infrastructure.
Integrate policy-as-code, compliance scanning, and automated guardrails into all deployment workflows.
Security and Compliance Integration
Enforce least-privilege IAM, encryption, network segmentation, and configuration hardening aligned to CIS and NIST 800-53 frameworks.
Implement continuous compliance and drift detection through automation and native cloud controls.
Collaborate with security engineering to integrate vulnerability scanning, key management, and secrets automation.
Cloud Networking and Connectivity

Nice-to-haves

Infrastructure as Code: Deep experience in Terraform (preferred over CloudFormation) including module design, state management, workspaces, and version control integration.
Professional-level certifications such as AWS Solutions Architect – Professional, Azure Solutions Architect Expert, or OCI Architect Professional.
Experience supporting regulated or security-sensitive environments such as finance or government.
Success Indicators
Terraform modules and pipelines are standardized, version-controlled, and auditable.
Multi-cloud environments are secure, observable, and compliant by design.
Deployments are automated, repeatable, and measurable for performance and cost.
Junior engineers adopt your code patterns and operational practices as the team standard.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazureci/cdpython

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Vision

Wellness