Cloud Support Engineer

About the role

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide. Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance.

This role is based in Pittsburgh, PA or Lake Mary, FL. Archer is collaborating with BNY to connect them with exceptional professionals for this position.

Responsibilities

• Operate and optimize cloud infrastructure in accordance with FedRAMP High controls, including monitoring, incident response, configuration management, backups, and patching to maintain continuous compliance.
• Support privacy impact activities and ensure data flows adhere to BNY’s data handling and protection standards within approved Azure boundaries.
• Manage identity, access, and authorization mechanisms such as Microsoft Entra ID (Azure AD), Active Directory, MFA, role-based access control, and Just-in-Time access to enforce least privilege and maintain access hygiene.
• Monitor Azure logs and alerts, triage and escalate incidents, participate in incident response testing and post-incident reviews, and enable relevant Azure security services.
• Coordinate oversight of third-party service providers interacting with BNY data or services, ensuring compliance with policies and supporting independent reviews.
• Define and enforce acceptable use restrictions for mobile code and communications technologies, and maintain clear, concise documentation and cross-team coordination.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Typically 6–10 years of experience.
• Proven experience managing and securing FedRAMP High compliant environments, with strong hands-on skills in Azure identity, access, logging, incident handling, and configuration management.
• Expertise in Microsoft Entra ID/Azure AD, Active Directory, MFA (security keys/smartcards), Just-in-Time access, RBAC, and AAA concepts.
• Experience with Azure security alerts, audit log review, log analytics, alert triage, and incident response practices.
• Ability to build and maintain data and asset inventories, implement and track baseline configurations, and protect configuration plans.
• Strong technical writing and coordination skills to produce clear oversight documentation, runbooks, and reports.
• Experience collaborating with security, engineering, compliance, and vendor teams to drive outcomes in production environments.

Preferred qualifications

• Hands-on experience operating Azure in enterprise or regulated environments.
• Familiarity with security control frameworks and continuous monitoring.
• Experience with Microsoft Defender for Cloud or similar tools.
• Knowledge of least-privilege design patterns and privileged access management.

Benefits

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and a pay-for-performance philosophy. Benefits include access to flexible global resources and tools for your life’s journey, a focus on health and personal resilience, support for financial goals, generous paid leaves (including paid volunteer time), and programs that support you and your family through moments that matter.