ROLE SUMMARY

At the heart of Pfizer’s Digital hosting and application development strategy sits the Cloud and Network Security Services (CNSS) organization. Enabling all manner of digital infrastructure and cloud development capabilities, these services and products permeate across Pfizer influencing business outcomes and providing value to our business, shareholders, and patients every day. Pfizer is currently on a journey to deepen and extend our use of Cloud Security in AWS, Azure, and GCP. The Cloud Security Engineer Lead role will collaborate with a team of security cloud engineers, developers, and product specialists with the goal of building security capabilities for all of Pfizer to consume.

The Cloud Security Engineer Lead role provides entry level technical and design experience and will be key in safeguarding Pfizer Systems and Data. The role will have ownership in setting up a secure, compliant, productive, and innovative cloud hosting environment. The role will bring entry level experience in designing robust security protocols, security guard rails and responding to security incidents. This role will work directly with Pfizer Cloud Engineering, Global Information Security and Pfizer Digital consumers in delivering Industrial best practices for Cloud Security. The role will directly affect how infrastructure is designed, qualified, built, and made available to Pfizer customers.

The ideal candidate will have proven experience working within a multi-cloud environment, developing security guardrails and infrastructure controls.

ROLE RESPONSIBILITIES

• Clarify product vision and roadmap for Cloud Security Products, focusing on customer documentation for security visibility.

• Lead and manage engineers in designing, developing, and maintaining cloud-native security solutions for enhancements and new services to protect Pfizer Cloud Infrastructure.

• Develop and implement cloud security platforms (e.g., Wiz), integrate security tools into DevOps, and create security-focused IaC patterns.

• Collaborate with Digital CoE and Global Information Security teams for a unified security approach.

• Oversee development, deployment, and configuration of cloud security controls and maintain security posture for AWS, Azure, and GCP environments.

• Contribute to the security roadmap and communicate cybersecurity vision to senior management and technical departments.

• Drive technology adoption to enhance cloud infrastructure and application development processes.

• Provide technical leadership, mentorship, and expertise in securing cloud infrastructure and Security as Code best practices.

• Develop KPIs and reports for managing cloud projects, security initiatives, risks, and remediations.

• Demonstrated experience in agile environments with a collaborative, adaptable, and proactive problem-solving mindset.

BASIC QUALIFICATIONS:

• Bachelor's Degree in Information Technology, Computer Science, Computer Engineering, or a similar discipline

• 5+ years of experience developing and/or maintaining cloud security controls.

• Proven hands-on technical leadership, with experience managing technical teams.

• Strong knowledge of public and private cloud platforms (AWS, Azure, or Google Cloud).

• Proficiency in at least one programming language, such as Python, Rego, GO, or Terraform

• Demonstrated the ability to changes in how security remediations is delivered.

• Excellent problem-solving skills, strategic thinking, and strong business acumen.

• Excellent communication skills, both written and verbal, with the ability to present complex technical information in a clear and concise manner.

NICE TO HAVE:

• Master's degree in Computer Science, Engineering, or a related field.

• Certifications in AWS, Azure, or GCP, such as Solutions Architect, DevOps Engineer, or Cloud Engineer.

• Experience with containerization and orchestration technologies, such as Docker and Kubernetes.

• Familiarity with CI/CD tools and processes, such as Jenkins, GitLab CI, or GitHub Actions.

• Knowledge of security best practices for cloud infrastructure and application development.

• Understanding of regulatory compliance and security standards in the pharmaceutical industry.

• Experience in the pharmaceutical or biotechnology industry.

• Prior experience in leading or mentoring a team of software engineers.

Work Location Assignment: Hybrid

The closing deadline for applications is May 2nd 2025.