Senior Technical Risk Engineer

Job Description

We are seeking a Senior Technical Risk Engineer with strong technical acumen to design, prioritize, and enable risk-reducing technical solutions across complex cloud and enterprise environments. This role emphasizes solution engineering over process engineering—using risk frameworks, policies, and controls as inputs to architect practical, automatable, and scalable technical safeguards.

The ideal candidate thinks like an engineer first and a risk professional second: someone who understands how systems fail, how controls can be enforced through code and architecture, and how risk intent is translated into resilient technical designs.

Key Responsibilities

• Engineer technical risk solutions that reduce operational, cyber, and resilience risk through architecture, automation, and control design.
• Translate risk requirements, policies, and standards into implementable technical patterns, guardrails, and reference architectures.
• Prioritize and influence solution design decisions based on risk impact, blast radius, and recovery dependencies.
• Partner with platform, cloud, security, and SRE teams to embed risk controls directly into infrastructure and pipelines.
• Evaluate control effectiveness using technical signals and evidence, not just procedural compliance.
• Support initiatives such as secure cloud architecture, isolated recovery environments, identity and access hardening, and infrastructure resilience.
• Provide technical guidance on risk tradeoffs, recovery sequencing, and dependency-aware system design.
• Contribute to lightweight process definition where needed—but always in service of enabling better technical outcomes.

Preferred Technical Skills

• Cloud Platforms: Google Cloud Platform (GCP)
• Automation & API Development: Proficiency in Python or Java and Ansible for scripting, with hands-on experience in API development (RESTful)
• Infrastructure as Code: Terraform (required)
• Data & Analytics: GCP BigQuery, Power BI (or similar) to visualize risk posture & evidence.
• Backup, recovery, and resilience solution architectures
• Isolated Recovery Environment (IRE) design and implementation in GCP
• Supporting Knowledge (nice to have): GRC and/or Security Domain expertise
• CI/CD pipelines and policy-as-code
• Cloud IAM, networking, and control planes
• Observability, logging, and evidence automation
• GRC Platforms: Archer, ServiceNow
• ITIL-based IT Service Management (ITSM)
• Familiarity with Agentic AI Frameworks

Required Qualifications

• Requires a bachelor’s or foreign equivalent degree in computer science, information technology or a technology related field
• 7+ years in IT operations & engineering, security engineering, platform engineering, SRE, or technical risk roles
• Backup, recovery, and resilience solution architecture implementations, especially IRE’s.
• Proven ability to design and influence technical solutions across teams
• Strong understanding of how risk manifests in distributed systems, cloud platforms, and automation
• Comfortable operating between engineering teams and risk stakeholders
• Ability to explain complex technical risk concepts to non-technical audiences without losing fidelity

Key skills/competency

• Technical Risk Engineering
• Cloud Security
• Resilience Architecture
• Automation (Python, Java, Ansible)
• Infrastructure as Code (Terraform)
• Google Cloud Platform (GCP)
• Isolated Recovery Environments (IRE)
• Cyber Security Controls
• SRE Practices
• Risk Assessment