AVP, Cloud Security Automation Engineer (L10)

Job Description: **Role Title: AVP, Cloud Security Automation Engineer (L10)** **Company Overview:** Synchrony (NYSE: SYF) is a premier consumer financial services company delivering one of the industry’s most complete digitally enabled product suites. Our experience, expertise and scale encompass a broad spectrum of industries including digital, health and wellness, retail, telecommunications, home, auto, outdoors, pet and more. - We have recently been ranked #2 among India’s Best Companies to Work for by Great Place to Work. We were among the Top 50 India’s Best Workplaces in Building a Culture of Innovation by All by GPTW and Top 25 among Best Workplaces in BFSI by GPTW. We have also been recognized by AmbitionBox Employee Choice Awards among the Top 20 Mid-Sized Companies, ranked #3 among Top Rated Companies for Women, and Top-Rated Financial Services Companies. - We provide best-in-class employee benefits and programs that cater to work-life integration and overall well-being. - We provide career advancement and upskilling opportunities, focusing to take up leadership roles. **Organizational Overview:** Synchrony’s Information Security (InfoSec) program protects the company’s information assets, technology environments, and customer data by managing security risk, establishing security standards, and enabling secure business operations. InfoSec partners with business and technology teams to integrate security into processes, products, and platforms while meeting regulatory, legal, and contractual obligations. The organization provides governance, oversight, and security services that reduce the likelihood and impact of cyber threats and strengthen enterprise resilience. This role is part of Information Security Engineering and reports to the Perimeter Defense Engineering Manager. **Role Summary/Purpose:** We are seeking an experienced Cloud Security Automation Engineer to build and operate cloud security automation using Infrastructure-as-Code (IaC) and CI/CD tooling, including Terraform, AWS CloudFormation, Ansible, and Jenkins. This role will strengthen and scale security governance by automating compliance enforcement, enhancing security controls through continuous detection and automated remediation, and embedding secure-by-design and secure-by-default principles across cloud platforms. The engineer will partner closely with DevOps and Application teams to consult, guide, and enable them to design, deploy, and maintain secure cloud infrastructure and services through repeatable, policy-driven automation. **Key Responsibilities:** - Build and maintain cloud security automation using IaC and CI/CD tooling (e.g., Terraform, CloudFormation, Ansible, Jenkins), embedding security controls into modules and pipelines for secure-by-design deployments. - Automate AWS security compliance enforcement aligned to organizational and regulatory requirements, including policy checks/guardrails, drift detection, and vulnerability analysis. - Implement automated detection and remediation for cloud misconfigurations and security control gaps; continuously tune rules to reduce false positives and expand coverage as services evolve. - Develop and standardize reusable security templates, patterns, and automation frameworks to improve consistency and repeatability across cloud environments. - Partner with DevOps and application teams to review architecture early, provide hands-on security guidance/enablement, and document standards and runbooks for operational readiness. **Required Skills/Knowledge:** - Bachelor’s degree with 3+ years of experience in Expert-level Infrastructure as Code (IaC) skills (CloudFormation, Terraform, Ansible) to build and manage cloud infrastructure and security group policies at scale OR in lieu of degree minimum 5+ years of experience. - 3 to 5 years of experience in strong CI/CD automation and orchestration experience (Jenkins, CloudBees, or equivalent), including automating security guardrails and policy enfor…