Engineering Division - Cloud Controls Engineering - Associate - Bengaluru

What We Do

At Goldman Sachs, Engineers build massively scalable software and systems, architect low-latency infrastructure solutions, proactively guard against cyber threats, and leverage machine learning alongside financial engineering to turn data into action.

Cloud Controls Engineering

As part of Core Engineering at Goldman Sachs, the Cloud Controls Engineering team is responsible for ensuring the safe, secure, and compliant use of public cloud services across the firm.

The role works as part of a multi-disciplinary team designing, implementing, and managing cloud governance frameworks, security controls, and compliance automation. The team is modernizing cloud control mechanisms around cloud-native principles and builds platforms that programmatically enforce safety, security, and compliance while enabling engineers to innovate faster.

The organization is seeking collaborative, creative, and intellectually curious engineers who are passionate about cloud security, governance, and compliance automation. The ideal candidate thrives in a DevOps culture, contributes to customer-centric product development, and works closely with cross-functional teams in a fast-paced global environment.

• Design, develop, and manage cloud security controls and governance frameworks in public cloud environments.
• Build and maintain automated compliance monitoring and enforcement mechanisms.
• Develop policy-as-code solutions to programmatically enforce security and compliance standards.
• Write technical specifications, work with several teams, manage technical dependencies, and drive design meetings with stakeholders for consensus.
• Collaborate with security, risk, and compliance teams to translate regulatory requirements into technical controls.
• Engage with the larger Core Engineering organization to create and deliver usable, safe cloud-native engineering patterns with associated guardrails and operational practices.
• Create, communicate, and promote best practices for cloud security and compliance across the firm.
• Partner with cloud providers such as Amazon Web Services, Google Cloud Platform, and Microsoft Azure to implement and optimize cloud-native security services.

• Strong technical ability, willingness to learn, and ability to evolve skills with advances in technology.
• Bachelor's or Master's degree in Computer Science or a related field with at least 2 years of relevant professional experience.
• Proficiency in designing, developing, and testing software in one or more of Java, JavaScript, or Python; open to using and learning multiple languages.
• Expertise with Linux, containers, system security, and automation with scripting languages.
• Experience architecting, designing, administering, or developing applications in Amazon Web Services.
• Understanding of cloud security principles, identity and access management, and compliance frameworks.
• Ability to communicate technical concepts effectively, both written and orally.
• Interpersonal skills required to collaborate effectively with colleagues across diverse technology teams.
• Ability to reason about performance, security, and process interactions in complex distributed systems.
• Ability to understand and effectively debug both new and existing solutions.

• Bachelor's or advanced degree in Computer Science or related field.
• 2+ years of work experience with TypeScript, Java, Python, and AWS.
• Knowledge and experience of software development lifecycle and infrastructure-as-code tooling, such as CloudFormation, Terraform, CDK, or Kubernetes.
• Experience with policy-as-code frameworks such as Open Policy Agent, AWS Config Rules, or similar tools.
• Familiarity with cloud security services including AWS IAM, Security Hub, GuardDuty, Config, and CloudTrail.
• Experience with security, isolation, and multi-tenant design of distributed cloud services.
• Understanding of compliance frameworks relevant to financial services, such as SOC 2 and PCI-DSS.
• Familiarity with software artifact and container image lifecycle management and governance.
• Understanding of RESTful API design best practices and experience developing them.
• Familiarity with cloud network architectures and integration with hybrid cloud networking.
• Experience with serverless platforms such as AWS Lambda and Google Cloud Functions.

• Healthcare and medical services.
• Training and development opportunities, firmwide networks, wellness and personal finance offerings, and mindfulness programs.
• Competitive vacation policies based on employee level and office location, with a minimum of three weeks expected vacation usage each year.
• Financial wellness and retirement support, including retirement planning, financial support for higher education, and financial education.
• Medical advocacy service, Employee Assistance Program counseling and referral services, Global Medical, Security and Travel Assistance, and Workplace Ergonomics Program.
• On-site health centers in certain offices.
• Fitness support, including on-site fitness centers in some offices and typical reimbursement for eligible employees for fitness club membership or activity fees up to a pre-approved amount.
• Childcare and family support, including on-site child care centers, emergency back-up care, mother and baby rooms, homework rooms, counseling services, expectant parent resources, transitional programs for parents returning from parental leave, and adoption, surrogacy, egg donation, and egg retrieval stipends.