The Security Engineer will design and maintain cloud security controls across AWS and hybrid environments focusing on automation identity security and compliance with best practices and frameworks.

Location Designation: Hybrid - 3 days per quarter
The Security Engineer is responsible for designing and maintaining NYL's cloud security controls mainly in AWS and hybrid environments with Azure and GCP also included. This hands-on role focuses on secure cloud platform development through automation monitoring and configuration. Key duties include operationalizing CIEM and CWPP tools integrating detections and guardrails and automating ongoing security improvements.
This role will also be key in strengthening NYL's identity and access architecture in the cloud-ensuring that IAM frameworks authentication models and permissions management are consistent automated and aligned with Zero Trust principles. In addition this person will play a role in aligning our Agentic AI architecture and security patterns with the Identity design elements. The ideal candidate will combine deep technical expertise in AWS security with experience in identity engineering and automation to help NYL reduce Identity risks across our cloud and hybrid environments.
What You'll Do:
• Engineer configure and maintain cloud security and identity controls across AWS and hybrid environments.
• Design and implement secure cloud architectures leveraging AWS-native services (e.g. IAM Organizations CloudFormation GuardDuty Security Hub).
• Engineer and maintain CIEM and CSPM capabilities including tuning and extending Wiz detections and queries for AWS-native services (EC2 Lambda S3 EKS RDS IAM CloudFormation).
• Develop scripts and APIs to integrate our cloud identity and other security controls.
• Collaborate with AI and Data teams on Agentic AI Identity architecture patterns and designs
• Continuously assess AWS configurations against CIS AWS Benchmarks CSA NIST 800-53 and NYDFS 500 standards; correlate Wiz findings with CloudTrail IAM Access Analyzer and Config data to identify systemic risks.
• Build pipelines and IaC modules (Terraform CloudFormation) to onboard new AWS accounts and resources into Wiz with secure-by-default baselines and consistent tagging.
• Integrate cloud identity and access controls with enterprise IAM platforms (SailPoint CyberArk Ping).
• Collaborate with Cloud Engineering DevOps and Application teams to design AWS architectures that meet posture requirements and embed IAM and security controls in CI/CD pipelines.
• Document and evangelize AWS security best practices secure configuration standards and Wiz integration playbooks.
What You'll Bring:
• Bachelor's degree in Computer Science Information Systems or equivalent experience.
• 10+ years of experience in cloud security engineering or related cybersecurity disciplines.
• Proven ability to design integrate and operationalize security controls in AWS environments.
• Hands-on experience with AWS IAM KMS CloudTrail Config GuardDuty Security Hub and Organizations.
• Experience tuning and automating CSPM tools such as Wiz for detection remediation and data integration.
• Deep understanding of authentication and authorization protocols (SAML OIDC OAuth2 SPIFFE DCR PKCE).
• Strong scripting and automation skills (Python PowerShell Terraform) for cloud security orchestration and integration.
• Understanding of Agentic AI identity principles.
• Familiarity with Zero Trust principles least-privilege access and cloud identity lifecycle management.
• Understanding of compliance frameworks (NYS DFS NIST CIS ISO 27001) and how they apply to IAM and cloud environments.
#LI-CD2
Pay Transparency
Salary Range: $147500-$211000
Overtime eligible: Exempt
Discretionary bonus eligible: Yes
Sales bonus eligible: No
Actual base salary will be determined based on several factors but not limited to individual's experience skills qualifications and job location. Additionally employees are eligible for an annual discretionary bonus. In addition to base salary employees may also be eligible to participate in an incentive program.
Company Overview
At New York Life our 180-year legacy of purpose and integrity fuels our future. As we evolve into a more technology- data- and AI-enabled organization we remain grounded in the values that drive lasting impact.
Our diverse business portfolio creates opportunities to make a difference across industries and communities-inviting bold thinking collaborative problem-solving and purpose-driven innovation. Here you'll find the rare balance of long-standing stability and forward momentum supported by an inclusive team that honors tradition while embracing progress.
As a Fortune 100 mutual company we offer a place to grow your skills contribute to meaningful work and deliver solutions that matter. Your ideas drive what's next and your growth powers it.
Our Benefits
We provide a full package of benefits for employees - and have unique offerings for a modern workforce including leave programs adoption assistance and student loan repayment programs. Based on feedback from our employees we continue to refine and add benefits to our offering so that you can flourish both inside and outside of work.Click hereto discover more about our comprehensive benefit options or visit our NYL Benefits Site.
Our Commitment to Inclusion
At New York Life fostering an inclusive workplace is fundamental to who we are and how we serve our communities. We have a longstanding commitment to creating an environment where individuals can contribute their best and succeed together. This foundation is rooted in our core values of humanity and integrity ensuring that every employee feels valued and supported. By embracing a broad range of perspectives and experiences we achieve greater success and fulfill our promise of providing financial security and peace of mind to families across all communities. Click here to learn more about New York Life's leadership in this space.
Recognized as one of Fortune's World's Most Admired Companies New York Life is committed to improving local communities through a culture of employee giving and volunteerism supported by the Foundation. We're proud that due to our mutuality we operate in the best interests of our policy owners. To learn more about career opportunities at New York Life please visit the Careers page of www.NewYorkLife.com.
Visit our LinkedIn to see how our employees and agents are leading the industry and impacting communities.
Visit our Newsroom to learn more about how our company is constantly evolving to meet our clients' and employees' needs.
Job Requisition ID: 93299