Job description

We create possibilities that move life and commerce forward Welcome to Manhattan. Every day, our supply chain commerce technology connects two billion people to 20 billion consumer choices. In the warehouse, on the road and in the store, we make what was once impossible, possible. If you want to tackle complex problems and redefine markets, you’ve come to the right place. Architect, design, and continuously improve security across all major cloud platforms – Google Cloud, Microsoft Azure, Amazon Web Services (AWS), and Oracle Cloud – to ensure the confidentiality, integrity, and availability of cloud-based and Internet-accessible systems and services Build cloud-native security solutions and tooling from scratch, applying hands-on software engineering and coding expertise to automate and scale security controls Lead in-depth project planning and produce clear, comprehensive documentation of security improvements, designs, and architectural decisions Partner and coordinate across multiple cross-functional teams to drive security projects through to completion Research emerging trends in cloud security and proactively propose improvements and strategic recommendations to leadership Manage the organization’s Cloud-Native Application Protection Platform (CNAPP) and drive improvements to the CNAPP platform in order to accomplish cloud security goals Build security controls and respond to risks related to the security of client, company, and employee information across multi-cloud environments Review cyber risks and provide guidance regarding remediation of gaps to facilitate a hardened multi-cloud environment MINIMUM REQUIREMENTS – List the minimum requirements of skills, knowledge and the type and length of previous experience necessary for an individual to be considered for this position. 7 years of IT experience 5 years of security experience 4 years of hands-on cloud experience, with demonstrated expertise designing security architecture across multiple major cloud providers High-level, hands-on experience creating security architecture and guiding security improvements across all major clouds – specifically Google Cloud, Microsoft Azure, AWS, and Oracle Cloud Demonstrated coding experience and a proven track record of building cloud-native security solutions from the ground up 3 years of experience developing and running scripts and using one or more scripting/programming languages (e.g., Python, Go, PowerShell, Bash) 3 years of experience identifying and remediating security vulnerabilities in cloud environments Proven ability to conduct in-depth project planning and to document security improvements clearly for both technical and executive audiences Proven ability to work with and coordinate across different teams to drive projects to completion Ability to research new and emerging trends in cloud security and translate them into actionable proposals for leadership Excellent understanding of cloud networking, identity and access management, encryption fundamentals, and secure configuration standards Excellent written and verbal communication skills Ability to troubleshoot complex security problems independently Ability to accurately document security designs and major incident reports viewable by executive leaders Ability to properly handle confidential and sensitive information Ability to pass US federal government background investigation EDUCATION REQUIREMENTS – List the minimum requirements of education and/or certification for an individual to be considered for this position. Bachelor’s degree in information systems, computer science, or comparable experience CISSP certification preferred Cloud security certifications highly desired (e.g., Google Professional Cloud Security Engineer, Microsoft Azure Security Engineer Associate, AWS Certified Security – Specialty, Oracle Cloud Infrastructure Security) CEH, CHFI, SSCP, or Security a plus essential functions – List up to 5 to 8 brief statements which describe the major activities for which the position is accountable. Do not list all individual tasks or steps necessary to achieve the end results, but stress the end result itself. List in order of importance. Architect and guide security improvements across Google Cloud, Azure, AWS, and Oracle Cloud, ensuring infrastructure designs and configurations meet security standards Design and build cloud-native security solutions and automation tooling from scratch, leveraging coding and software engineering skills Manage the CNAPP platform and drive improvements to it in order to accomplish cloud security goals Lead in-depth project planning for security initiatives and maintain thorough documentation of architectural decisions and security improvements Collaborate with and coordinate across multiple teams to drive security projects from concept through completion Research emerging cloud security trends and present improvement proposals and strategic recommendations to leadership Make design change recommendations for improvements to the multi-cloud environments and associated services and configurations Participate in and contribute to setting and improving cloud security standards Serve as subject matter expert on platform and architecture security across cloud environments ADDITIONAL CHARACTERISTICS – List any additional skills, knowledge or characteristics that are preferred but not essential. Understanding of containerization and orchestration (Docker, Kubernetes, ECS, GKE, AKS, etc.) Experience with infrastructure-as-code and policy-as-code (Terraform, CloudFormation, OPA, etc.) Understanding of NIST, CIS Benchmarks, and ISO 27001 controls Understanding of business impact and critical needs for IT services Ability to manage tasks independently and escalate as necessary Ability to function in a dynamic environment and manage multiple priorities to meet deadlines Strong attention to detail Desire to learn security best practices and promote security throughout the organization Work Environment & Physical Requirements - The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Travel 0-5% Committed to diversity and inclusion At Manhattan, it’s about more than just the work. From cultural celebrations to interest groups to volunteer opportunities, your true self is always welcome here. Our team members’ backgrounds, experiences and perspectives add to us as a whole and make us unique. We are proudly an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a veteran. In the United States, Manhattan Associates participates in the Employment Eligibility Verification Program (E-Verify) operated by the Department of Homeland Security in partnership with the Social Security Administration. Participation in the E-Verify Program allows Manhattan to confirm the employment eligibility of all newly hired employees after the Employment Eligibility Verification Form (Form I-9) has been completed.

Requirements

Must-haves

We create possibilities that move life and commerce forward
Build cloud-native security solutions and tooling from scratch, applying hands-on software engineering and coding expertise to automate and scale security controls
Lead in-depth project planning and produce clear, comprehensive documentation of security improvements, designs, and architectural decisions
Partner and coordinate across multiple cross-functional teams to drive security projects through to completion
Research emerging trends in cloud security and proactively propose improvements and strategic recommendations to leadership
Manage the organization’s Cloud-Native Application Protection Platform (CNAPP) and drive improvements to the CNAPP platform in order to accomplish cloud security goals
Build security controls and respond to risks related to the security of client, company, and employee information across multi-cloud environments
Review cyber risks and provide guidance regarding remediation of gaps to facilitate a hardened multi-cloud environment
MINIMUM REQUIREMENTS – List the minimum requirements of skills, knowledge and the type and length of previous experience necessary for an individual to be considered for this position.
7 years of IT experience
5 years of security experience
4 years of hands-on cloud experience, with demonstrated expertise designing security architecture across multiple major cloud providers
High-level, hands-on experience creating security architecture and guiding security improvements across all major clouds – specifically Google Cloud, Microsoft Azure, AWS, and Oracle Cloud
Demonstrated coding experience and a proven track record of building cloud-native security solutions from the ground up
3 years of experience developing and running scripts and using one or more scripting/programming languages (e.g., Python, Go, PowerShell, Bash)
3 years of experience identifying and remediating security vulnerabilities in cloud environments
Proven ability to conduct in-depth project planning and to document security improvements clearly for both technical and executive audiences
Proven ability to work with and coordinate across different teams to drive projects to completion
Ability to research new and emerging trends in cloud security and translate them into actionable proposals for leadership
Excellent understanding of cloud networking, identity and access management, encryption fundamentals, and secure configuration standards
Excellent written and verbal communication skills

Nice-to-haves

CISSP certification preferred
CEH, CHFI, SSCP, or Security a plus
ADDITIONAL CHARACTERISTICS – List any additional skills, knowledge or characteristics that are preferred but not essential.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azureawspythongodockerkubernetes

Platform: workday
Effort: long