Latham & Watkins, a global law firm consistently ranked among the top firms in the world, is currently seeking a Cloud Security Engineer to join our winning team, located in our Global Services Office in downtown Los Angeles. The success of our firm is largely determined by our commitment to hire and develop the very best and brightest, creating a team that provides our clients with the highest quality of work and service. We are driven by our core values: respect, innovation and collaboration.

As the global outbreak of COVID-19 continues to unfold, Latham has taken precautions to help protect our people, clients, and the communities where we live and work. This includes a temporary shift to remote working for the majority of our lawyers and staff. This role will likely start remotely while the firm continues to evaluate the situation.

The Cloud Security Engineer will receive a generous total compensation package. Bonuses are awarded in recognition of individual and firm performance. Eligible employees can participate in Latham's comprehensive benefit program including healthcare, life and disability insurance, flexible spending accounts, a 401k plan, and more! In addition, employees receive 10 paid holidays per year, and a PTO program that accrues 23 days during the first year of employment and grows with tenure. As a Cloud Security Engineer at Latham, you will advise on cloud security best practices and configure, review, and maintain the Azure security environment for the Firm. You will make recommendations regarding policy and exceptions for the cloud security environment. Additionally, you will be responsible for researching, implementing, and operating security solutions and related tools to aid the security efforts of the Firm both in the cloud and on-premises. As part of the Enterprise Security team, you will work to protect the confidentiality of firm and client data by accomplishing the following tasks:

• Researching and advising the department regarding appropriate security controls for the Cloud environment as a subject matter expert for Azure security.
• Monitoring technical developments in Azure and adapting recommendations to reflect the changing architecture.
• Collaborating with members of the Enterprise Security Team to ensure other security tools are appropriately configured to include logs, reporting, alerts and other relevant data from Azure or other Cloud systems.
• Collaborating with Global Technology personnel as needed to ensure application and development tools within Azure are appropriately configured to meet the firm’s security standard.
• Providing advice as needed and researching additional compensating controls to ensure business objectives are met.
• Designing and implementing security solutions that enforce best practices for cloud operations
• Completing projects on various issues when needed.
• Identifying, prioritizing, and implementing security-related requirements, and enabling project teams to deliver secure IT solutions through effective risk management and threat-modeling

As a Cloud Security Engineer, you will be expected to apply your organizational and communication skills while displaying a positive, high-energy attitude. The successful Cloud Security Engineer must have experience with and knowledge of Azure Services such as Compute, Storage, Networking, Database, Management Tools, Security, Identity and Compliance, as well as experience with Azure Portal, Azure Powershell, Azure CLI, Azure Event Hub, and/or Azure Identity Governance. The ideal candidate will also have a knowledge of information security best practices, and a good understanding of OS concepts, process management, and resource scheduling in Windows and Linux environments. The Engineer must have an understanding of the components in the Hadoop ecosystem (e.g., Apache NiFi, Apache Storm and Apache Kafka), expertise implementing security solutions in public cloud IaaS/PaaS, and familiarity with systems integration, SOAR products, and data log formatting. We are looking for proficiency in several security technologies including data loss prevention, encryption, cloud access security brokers, identity and access management, micro-segmentation, multi-factor authentication, endpoint protection, SIEM, and perimeter defenses. Hands-on experience in working with Hadoop distribution platforms like Hortonworks, Cloudera, MapR, and others is a plus, and the successful candidate will learn and stay ahead in finding security issues in cloud and big data platforms and implement solutions to keep applications and data secured at all times.

A Bachelor’s Degree in Computer Science, Information and Technology and Computer Engineering, or a related engineering/computer field is preferred, and a current Microsoft Certified Professional is a plus. A Microsoft Azure certification is required for this role. Successful candidates will be willing to obtain additional security-related degrees as deemed helpful by the firm.

A minimum of five (5) years of experience in an engineering role using service and hosting solutions such as private/public cloud IaaS, PaaS, and SaaS platforms, and a minimum of ten (10) years of related professional experience are required. Strong experience with Azure and security policies, and experience in setting up enterprise level account structure and security models in Azure, are desired.  Experience with Azure Active Directory, RBAC and policies is required.

Qualified candidates are encouraged to apply by clicking the ‘Apply Now’ link.

Latham & Watkins is an Equal Opportunity Employer. Our commitment to diversity, equal opportunity and sustainability enables Latham & Watkins to draw from a remarkable wealth of talent to create one of the world's leading law firms.

Latham & Watkins LLP will consider qualified applicants with criminal histories in a manner consistent with the City of Los Angeles Fair Chance Initiative for Hiring Ordinance (FCIHO)​.  Please click the link below to review the Ordinance.

Please click here to review your rights under U.S. employment laws.

Required Skills Required Experience

Electrical Design experience of Power Generation and Naval Switchboard Control systems.

Able to design and understand detailed electrical schematics

Knowledge of Control Systems a Plus

Knowledge of PLC systems and programming language a plus

Current DoD Secret Security Clearance a Plus

25% travel