Role Summary

At T. Rowe Price, we are committed to advancing our technology and safeguarding our business and clients. We are looking for a Senior Cloud DevSecOps Engineer with a strong development background and a passion for designing secure, scalable, and automated solutions. In this role, you will work closely with engineering and product teams throughout the organization to deliver secure platforms, establish guardrails, and drive security initiatives. You will have the autonomy to solve complex problems, clarify technical challenges, and shape our engineering culture by promoting secure development practices.

Responsibilities

• Lead the development and implementation of security engineering solutions, focusing on infrastructure automation, cloud governance, and secure onboarding experiences for new workloads and teams.
• Design, maintain, and enhance security guardrails using Terraform, including reusable modules, policy-as-code solutions, and related automation.
• Participate in code reviews, offering constructive feedback to promote secure coding and improve design quality.
• Develop automation tools and security guardrails utilized by engineering teams to streamline developer workflows and minimize manual tasks, including Java and Python-based automations, and GitLab automations with Infrastructure as Code (IaC) gates.
• Collaborate with cloud engineering and application teams to embed automated security controls into their workflows, simplifying operational tasks and reducing friction for developers.
• Mentor engineers across teams on IaC best practices, cloud identity management, and principles of least privilege, including conducting AWS IAM reviews and configuring resource policies.

Qualifications

Required:

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical discipline, or equivalent practical experience and 5+ years of progressive engineering and/or security experience.
• Extensive experience with AWS, including developing guardrails and detective controls.
• Expertise in Infrastructure as Code, especially Terraform: authoring reusable modules, implementing policy-as-code (OPA or Trivy), and supporting multi-account deployment patterns.
• Experience automating AWS guardrails, baseline configurations, identity bindings, and logging/monitoring controls for new accounts or teams.
• Strong knowledge of AWS IAM (roles, permission boundaries, SCPs, and RCPs).
• Experience developing GitLab CI/CD pipelines and automating guardrail checks and deployment controls.
• Solid software engineering skills in Python, Go, or Java for automation tooling.
• Ability to write secure, maintainable, and testable code.
• Demonstrated ability to quickly learn new technologies and stay up-to-date with industry trends.
• Familiarity with architecture and cybersecurity frameworks.
• Strong organizational skills, able to prioritize tasks across competing requirements and balance security risks with delivery timelines.
• Proven ability to work independently.

Preferred:

• Experience in financial services or other highly regulated environments, with knowledge of risk management, audit, and compliance requirements.

WHAT TO EXPECT AFTER APPLYING

1. You will receive an email and text message to answer a few questions to verify your eligibility. If you apply for multiple jobs, you will receive separate invitations for each role and will need to respond to each. Estimated Time Commitment: 3-5 minutes

2. If you are eligible, you will be asked to record video responses to introductory questions with our vendor partner, HireVue. Take time to read all instructions carefully before responding. Some questions may require you to respond within a set time limit, or with limited retakes. You can use this opportunity to tell us more about your background and interest than we can learn from a resume alone. Estimated Time Commitment: 20-30 minutes

FINRA Requirements

FINRA licenses are not required and will not be supported for this role.

Work Flexibility

This role is eligible for hybrid work, with up to three days per week from home.

Base Salary Ranges

Please review the job posting for the location of this specific opportunity.

Placement within the range provided above is based on the individual’s relevant experience and skills for the role.  Base salary is only one component of our total compensation package.  Employees may be eligible for a discretionary bonus, which is determined upon company and individual performance.

Commitment to Diversity, Equity, and Inclusion

At T. Rowe Price, our associates are our greatest asset. We thrive because our company culture is built on inclusion and because we sustain a work environment where associates can bring their best selves to work every day. The backgrounds, talents, and experiences of our global associates allow us to embrace new ideas and perspectives that move our business priorities forward and enable us to deliver strong client outcomes. Here, you can expect equal opportunity and fair and consistent treatment for all. 

Benefits

T. Rowe Price is an equal opportunity employer and values diversity of thought, gender, and race. We believe our continued success depends upon the equal treatment of all associates and applicants for employment without discrimination on the basis of race, religion, creed, color, national origin, sex, gender, age, mental or physical disability, marital status, sexual orientation, gender identity or expression, citizenship status, military or veteran status, pregnancy, or any other classification protected by country, federal, state, or local law.