Leads cloud security architecture and implementation, focusing on data privacy, GDPR compliance, Kubernetes security, mTLS, RBAC, zero-trust networking, audit logging, threat modeling, and vulnerability assessments. Collaborates across teams, mentors junior engineers, documents security practices, monitors industry trends, and drives resilient, compliant cloud infrastructure.
This role is pivotal in shaping our cloud security strategy and safeguarding data privacy. As our Principal Security Engineer - Cloud, you will be a key leader in our cloud security journey, working closely with the Kubernetes security team. Your expertise in mTLS, RBAC, and zero-trust networking will be instrumental in designing and implementing secure cloud solutions. You will play a vital role in maintaining data privacy, ensuring GDPR compliance, and mentoring junior engineers to create a knowledge-sharing culture. Your leadership will be crucial in driving our cloud security vision and keeping our systems resilient and future-ready.
Responsibilities- Lead the design and implementation of secure cloud architectures, prioritizing data privacy and GDPR compliance.
- Collaborate with the Kubernetes team to enhance security primitives and strengthen cloud infrastructure.
- Implement and manage mTLS, RBAC, and zero-trust networking principles for robust and reliable security.
- Develop and maintain audit logging practices for operator-grade compliance, ensuring a proactive and responsive security posture.
- Conduct regular security assessments (red-team/ penetration-testing) and audits to identify and address potential risks and vulnerabilities/CVE proactively.
- Develop detailed threat models and defend security architecture
- Stay abreast of cloud security trends, drive innovation, and share insights with the team to foster continuous improvement.
- Mentor and guide junior engineers, providing technical expertise and creating a collaborative and inclusive work environment.
- Engage with cross-functional teams to align cloud security strategies with business objectives and ensure seamless integration.
- Document and communicate security best practices, ensuring consistency, clarity, and effectiveness across the organization.
- Foster a culture of continuous learning and knowledge sharing, promoting a proactive and collaborative security mindset.
- Extensive experience in cloud security engineering, with a proven track record of designing and implementing secure cloud solutions.
- In-depth understanding and practical expertise in mTLS, RBAC, and zero-trust networking principles, particularly in cloud environments.
- Proficiency in Kubernetes security primitives, including NetworkPolicy, PodSecurity, and OPA/Gatekeeper, is essential.
- Strong knowledge of data privacy regulations, especially GDPR, and the ability to implement prompt privacy measures and ensure compliance.
- Must be hands on with various public cloud technologies and managed services
- Must be familiar with on-prem equivalent technologies to cloud managed services
- Experience with audit logging and compliance practices for operator-grade environments, with a focus on maintaining robust security.
- Leadership skills to mentor, guide, and inspire a team, creating a collaborative, innovative, and inclusive work culture.
- Excellent communication and interpersonal skills for effective collaboration with cross-functional teams and stakeholders.
- Analytical mindset, problem-solving abilities, and a passion for staying updated with the latest security trends and best practices.
- Bachelor's degree in Computer Science, Information Security, or a related field; an advanced degree is highly preferred.
- A proactive and solution-oriented approach to security challenges, with a track record of successful security implementations.
Advancing connectivity to secure a brighter world.
Nokia is a global leader in connectivity for the AI era. With expertise across fixed, mobile and transport networks, powered by the innovation of Nokia Bell Labs, we’re advancing connectivity to secure a brighter world.
Learn more about life at Nokia.
Our recruitment process
We act inclusively and respect the uniqueness of people. Our employment decisions are made regardless of race, color, national or ethnic origin, religion, gender, sexual orientation, gender identity or expression, age, marital status, disability, protected veteran status or other characteristics protected by law. We are committed to a culture of inclusion built upon our core value of respect.
If you’re interested in this role but don’t meet every listed requirement, we still encourage you to apply. Unique backgrounds, perspectives, and experiences enrich our teams, and you may be just the right candidate for this or another opportunity.
The length of the recruitment process may vary depending on the specific role's requirements. We strive to ensure a smooth and inclusive experience for all candidates. Discover more about the recruitment process at Nokia.
Some of our benefits in US:
- Corporate Retirement Savings Plan
- Health and dental benefits
- Short-term disability, and long-term disability
- Life insurance, and AD&D – Company paid 2x base pay
- Optional or Supplemental life and AD&D insurance (Employee/Spouse/Child)
- Paid time off for holidays and Vacation
- Employee Stock Purchase Plan
- Tuition Assistance Plan
- Adoption assistance
- Employee Assistance Program/Work Life Resource Program
The above benefits exclude students.
Disclaimer for US/Canada
Nokia Maintains broad annual base salary ranges for its roles in order to account for variations in knowledge, skills, experience and market conditions, and with consideration to internal peer equity. Check the salary ranges in the job info section for this role.
All North America job posts will post for a minimum of 7 calendar days and up to 180 days or until candidate/s identified.
Similar Jobs
Artificial Intelligence • Consumer Web • Digital Media • Information Technology • Social Impact • Software
Lead a small, hands-on engineering team responsible for analytics infrastructure and member growth. Own technical strategy for ClickHouse-powered analytics, data visualizations, and LLM-enabled data experiences, while guiding onboarding and activation roadmaps. Write and review code, design experiments, partner with product and design, make architectural decisions, and hire, mentor, and develop engineers. The role requires strong web application experience, product judgment, communication skills, and expertise across Ruby on Rails, databases, ReactJS, and TypeScript.
Top Skills:
A/B TestingClickhouseLlmsMySQLPostgresReactRuby On RailsStripeTypescript
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Serve as the senior technical authority for security engineering in Canada's regulated environment. Engineer and operate security controls across on-premises, cloud, and isolated infrastructure; build automation and infrastructure-as-code; support identity, vulnerability, logging, and cloud security tooling; drive remediation against CIS and NIST baselines; and produce operational and executive security posture reporting.
Top Skills:
AclsAnsibleApparmorAuditdAWSAzureBeyondtrustCi/CdCisContainersCribl StreamCspmCvssCyberarkDnsDspmEpssFirewallsForgerockGCPGitGlidescriptItilItsmJavaScriptKspmLdapLinuxLoad BalancersNistNtpPingfederatePkiProxiesPuppetPythonSailpoint IiqSelinuxServicenowShellSplunkStigTenable IoTenable ScTerraformWiz
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Engineer and operate enterprise security controls across on-premises, cloud, and isolated environments. Build security automation and infrastructure-as-code, partner with infrastructure and application teams on remediation and CIS/NIST compliance, support identity, vulnerability, logging, and cloud security tooling, and produce executive security posture reporting. The role requires Canadian residency or citizenship/permanent residency and Government of Canada Reliability Status screening.
Top Skills:
AclsActive DirectoryAnsibleApparmorAuditdAWSAzureBashBeyondtrustCi/CdCisCribl StreamCspmCvssCyberarkDnsDspmEpssFirewallsForgerockGCPGitGlidescriptItsmJavaScriptKspmKubernetesLdapLinuxNistPamPingfederatePkiPowershellProxiesPuppetPythonSailpoint IiqSelinuxServicenowSplunkStigTenable ScTenable.IoTerraformWindowsWiz
What you need to know about the Chicago Tech Scene
With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory
