Senior manager - Cloud Security and Dev ops

Overview The next great shift in consumer behavior driven by technological disruption is underway, and it’s happening in the food & beverage industry.    As other sectors have shifted to eCommerce-first business models in recent years, food & beverage has continued to rely predominantly on traditional brick & mortar models, but this is changing rapidly. New technologies are transforming every aspect of reaching consumers, from the rise of digital marketing and online grocery platforms to the creation of supply chain tools that enable speedy at-home delivery. According to the Food Marketing Institute, 70% of U.S. consumers will shop online for groceries by 2024, with an estimated annual spend of $100 billion.    To deepen our efforts to seize this opportunity and lead the food & beverage industry into its remarkable next chapter, PepsiCo – a global company with powerhouse brands including Frito-Lay, Gatorade, Pepsi-Cola, Quaker, and Tropicana – is expanding its Global eCommerce Team. We’re looking for the greatest minds in data & analytics, software development, machine learning optimization, and next-generation supply chain. Given PepsiCo’s incredible reach – our foods and beverages are enjoyed more than one billion times a day in more than 200 countries and territories, and our value chain involves diverse partners ranging from farmers and food scientists to retailers and logistics specialists – the challenges we’re addressing are complex and the solutions will be deeply impactful.    Although PepsiCo is a large multinational, the PepsiCo Global eCommerce Team prides itself on having the entrepreneurial, action-oriented culture of an exciting startup business. Our group includes startup founders, Silicon Valley veterans, food & beverage experts, and seasoned executives from digital transformation leaders such as Amazon and Walmart. Our goal is to build the technological products and capabilities that will reinvent our industry and make us the #1 food & beverage business in eCommerce for decades to come    Over the past year we have built a very talented team of data engineers and developed a scalable data platform in AWS using Airflow, Python, and Kubernetes.  We use the data vault methodology for data storage, to allow point in time reconstruction of data sets for complete auditability. Basic data validation and monitoring / alerts are in place. There is still much to be done both at the platform level, as well as developing data pipelines for use in machine learning, analytics, and for our business applications. We are looking for a seasoned cloud security engineer to ensure our infrastructure posture and applications are able to meeting the highest possible security standards. PepsiCo eCommerce has an opportunity for a Cloud Infrastructure security or DevSecOps engineer focused on our applications running in Azure and AWS. You will be part of the DevOps and cloud infrastructure team that is responsible for Cloud security, infrastructure provisioning, maintaining existing platforms and provides our partner teams with guidance for building, maintain and optimizing integration and deployment pipelines as code for deploying our applications to run in AWS & Azure. This role offers many exciting challenges and opportunities, some of the major duties are: Work with engineering teams to develop and improve our CI / CD pipelines that enforce proper versioning and branching practices using technologies like Github, Github Actions, ArgoCD, Kubernetes, Docker and Terraform. Create, deploy & maintain Kubernetes based platforms for a variety of different workloads in AWS and Azure. Responsibilities Implement and manage threat detection protocols, processes and systems. Conduct regular vulnerability assessments and ensure timely remediation of flagged incidents. Ensure compliance with internal security policies and external regulations like PCI. Lead the integration of security tools such as Wiz, Snyk, DataDog and others within the Pepsico infrastructure. Automate security processes using tools like Cloud Custodian, Kubernetes, and Terraform. Monitor security alerts and incidents, ensuring timely resolution. Work closely with IT, development, and compliance teams to implement and uphold security measures. Coordinate with PepsiCo's broader security teams to align Digital Commerce security practices with corporate standards. Provide security expertise and support to various teams within the organization. Advocate and enforce security best practices, such as RBAC and the principle of least privilege. Educate and train staff on security protocols and practices. Continuously review, improve and document security policies and procedures. Qualifications 10- 12 years of IT industtry Experience 4+ years of experience deploying secure infrastructure to Azure platforms, AWS platforms, and GCP, using tooling like AWS security HUB and/or Azure Cloud Security Posture Management. 2+ years of experience in automating infrastructure and security processes using Terraform, Cloud Custodian, or Kubernetes 3+ years of experience with threat detection systems and conducting vulnerability assessments (eg Splunk, Tenable Nessus, Qualys) 2+ years of experience in developing and maintaining incident response protocols (eg JIRA (for incident tracking), PagerDuty, Sumo Logic) 3+ years of experience in ensuring compliance with internal security policies and external regulations (eg AWS Cloud Compliance, Azure Policy, GCP Compliance Center, Cloud Custodian, OPA) 2+ years of experience integrating and managing security tools within high uptime environment. (eg Wiz, Snyk, DataDog) 3+ years of experience with Python or similar programming languages 3+ years of experience with Git, Gitlab or GitHub. Current skills in following technologies: Kubernetes Terraform AWS or Azure (Azure Preferred). GitHub Actions or Gitlab workflow. DataDog SIEM or Splunk. Cloud Custodian or OPA (or equivalent) SAST software (Snyk, WIZ preferred) AWS IAM, Azure AD, Okta 1+ year of Kubernetes, ideally running workloads in a production environment. Good understanding of software development lifecycle. CISSP, CCSP, CISM, CDP certs are a plus