Grow your career with a growing organization Whether they’re helping people reach their long-term financial goals or providing personal wealth management strategies, every associate contributes to changing the lives of those we serve for the better. When it comes to job satisfaction, that’s hard to beat. And from a personal satisfaction perspective, you’ll enjoy the freedom to support causes that matter to you and experience a truly inclusive work environment. Your future starts now. Opportunity: Welcome to the blue team! As a core member of our growing security team, you will take the lead for our cloud security initiatives. You will work with our cutting edge technological platform in a Cloud-first, DevOps, and CI/CD type environment. Boredom will not join us on this journey! Candidate: You are passionate, curious and self-driven. You enjoy solving complex challenges with incomplete information in creative and innovative ways with your teammates. You don’t know everything but, given a new problem you have strong enough foundations to untangle, self-learn and identify creative ways to solve it. What you will do: You will work with the team to build our cloud security stack, security automations, partner with DevOps teams on architectural reviews, and set “secure by default” standards across our cloud environments: Drive forward our existing cloud security stack & security automation stack - including maintenance of existing environment, developing new solutions architectures and implementing them to improve our capabilities Consult and advise our engineering teams to influence secure design, deployment, maintenance of our cloud-based non-security applications and workloads Research & develop proof of concepts on new security technologies relevant to us Define and implement secure standards for relevant cloud services What you will bring: Unimpeachable integrity, character, courage and honesty Engineering mindset to develop & troubleshoot issues with an empirical & methodical approach Self-starter mentality that defaults to action and thinks creatively on how to overcome challenges Effective communication skills to interface with both internal and external teams on complex issues and enthusiastic timelines Bachelor’s degree or higher in Computer Science or a related field Approximately five (5) years of experience in security and/or mixed with SRE (site reliability engineering) or cloud engineering experience Strong understanding of relevant AWS technologies: AWS Core - Organizations, Cloudformation AWS Networking - VPC, NACL & Peering AWS Security - IAM, Config, KMS, Cloudtrail, Cloudwatch, GuardDuty AWS Data - Redshift, Aurora, S3 & EBS Ability to develop simple scripts & automation in Python (spaces, no tabs) Ability to interact with IaaS (AWS / boto) and SaaS cloud systems via API calls Familiarity with SaaS cloud security (e.g., CASB, SCIM, SAML, OIDC) Familiarity with Linux systems security Familiarity with infrastructure as code and immutable infrastructure concepts What will set you apart: Familiarity with Kubernetes generally and Kubernetes security specifically (e.g.: ingress controllers, rbac privileges design, etc.) AWS Certifications Familiarity with CI/CD pipelines (notably Jenkins) Familiarity with systems configuration orchestration (notably Chef) Ability to use appropriate memes in team chat room Please note that this role is being posted by Personal Capital, an Empower company. Personal Capital roles are cross-posted to the Empower web site and are also available at https://www.personalcapital.com/company/jobs. For more information about Personal Capital, please visit www.personalcapital.com What we offer you We offer an array of diverse and inclusive benefits regardless of where you are in your career. We believe that providing our employees with the means to lead healthy balanced lives results in the best possible work performance. Medical, dental, vision and life insurance Retirement savings – 401(k) plan with generous company matching contributions (up to 6%), financial advisory services, potential company discretionary contribution, and a broad investment lineup Tuition reimbursement up to $5,250/year Business-casual environment that includes the option to wear jeans Generous paid time off upon hire – including a paid time off program plus ten paid company holidays and three floating holidays each calendar year Paid volunteer time — 16 hours per calendar year Leave of absence programs – including paid parental leave, paid short- and long-term disability, and Family and Medical Leave (FMLA) Business Resource Groups (BRGs) - internal networks that rally around common interest, experiences and identities such as race, ethnicity, gender, ability, military status and sexual orientation. BRGs play a vital role in educating and engaging our people and advancing our business priorities. The salary range below describes the minimum to maximum base salary range for this position in the location listed. Non-sales positions have the opportunity to participate in a bonus program. Sales positions are eligible for sales incentives, and in some instances a bonus plan, whereby total compensation may far exceed base salary depending on individual performance. Actual compensation offered may vary from posted hiring range based upon geographic location, work experience, education, licensure requirements and/or skill level and will be finalized at the time of offer. Base Salary Range $ 104,600.00-147,725.00 Location CO Remote We are an equal opportunity employer with a commitment to diversity. All individuals, regardless of personal characteristics, are encouraged to apply. All qualified applicants will receive consideration for employment without regard to age (40 and over), race, color, national origin, ancestry, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, religion, physical or mental disability, military or veteran status, genetic information, or any other status protected by applicable state or local law. Joining our talent community will allow you to stay connected via email and receive news and updates. Empower has built a culture around the words we live by: Doing the right thing includes giving back through our ACT (Associates. Communities. Together.) Program in personal ways that matter most to our associates. And Empower supports their passion to help through a dollar-for-dollar charitable donation match and two paid volunteer days annually. Being inclusive means celebrating our differences, which is driven by our diverse mix of Business Resource Groups (BRGs) and the activities and events they sponsor. Continued growth is achieved through partnerships with professional football and soccer teams as well as PGA and LPGA Tour professional golfers. These relationships that further reinforce and promote our brand are headlined by Empower Field at Mile High — our exclusive naming rights to the place the Denver Broncos call home. When you choose to work at Empower, you’ll experience a unique opportunity to take your career wherever you want it to go. Equal opportunity employer • Drug-free workplace For remote and hybrid positions you will be required, you will be required to provide reliable high-speed internet with a wired connection as well as a place in your home to work with limited disruption. Other necessary computer equipment, will be provided. You may be required to work in the office if you do not have an adequate home work environment and the required internet connection. Follow Empower Facebook, LinkedIn, Twitter, Instagram, & Glassdoor