Infrastructure Engineer - Security & Compliance

Details

The Global Corporate Technology Group designs, deploys, and supports Bloomberg’s enterprise IT systems, including its global corporate network, hardware, software, and enterprise applications. The Corporate Technology – Finance team designs, implements, and operates security, data protection, and compliance controls for sensitive financial and employee data in a highly regulated enterprise environment.

This engineering-focused role owns the finance secure environment and supports security and compliance requirements, including SOX and PII obligations.

Responsibilities

• Automate security application and system platform lifecycles, including provisioning, configuration, observability, testing, troubleshooting, and capacity planning.
• Write software using orchestration systems to automate tasks and interact with other systems.
• Implement innovative technologies and automate workflows.
• Create CI/CD automation pipelines.
• Design and operate system integrity, configuration, and operational controls using identity and access management and network segmentation.
• Monitor user data access and behavior to detect and report misuse or risk.
• Support secure file-transfer and collaboration solutions with Digital Rights Management.
• Manage Data Loss Prevention integrations with proxies, email gateways, and endpoints.

Requirements

• 4+ years of experience supporting enterprise security, compliance, or data protection platforms.
• Degree in Computer Science, Engineering, Mathematics, or a similar field, or equivalent work experience.
• Experience operating controls in regulated compliance or audit-driven environments.
• Working knowledge of GitHub, PowerShell, or Python automation, administration, and security.
• Working knowledge of monitoring and logging tools such as Grafana, Humio, and Sumo Logic.
• Experience with Entra ID, MFA, SSO, SAML, and Ping Federation.
• Experience administering and operating Windows and Linux systems.
• Understanding of security fundamentals and standard control frameworks, including NIST CSF, ISO/IEC 27001, SOC 2, and/or CIS Controls.
• Clear communication and an ownership mindset.

Preferred Qualifications

• Familiarity with security applications such as Forcepoint, Varonis, and Tripwire.
• Familiarity with messaging and file-sharing applications and systems such as Proofpoint, Blackberry Workspaces, MDM Boxer, and Globalscape.
• Experience implementing network protocols, network administration, and network security.
• Familiarity with Infrastructure as Code tools such as Ansible, Chef, or Salt.
• Familiarity with Zero Trust architecture and conditional access models.
• Excellent written and verbal communication skills and the ability to work independently.

Benefits

Benefits may include merit increases, incentive compensation for exempt roles, paid holidays, paid time off, medical, dental, vision, short- and long-term disability benefits, 401(k) matching, life insurance, and wellness programs.