Principal Cloud Security Engineer The Principal Cloud Security Engineer is responsible for architecting, implementing, and maintaining the security measures necessary to safeguard the cloud-based systems and data within Comerica's cloud environment. The expertise this individual provides in cloud security services and industry best practices will drive the development and execution of strategies to protect Comerica's infrastructure from potential threats and vulnerabilities. The engineer works closely with architects, cloud security providers and the security team to build and maintain best practices, security rules, logging, controls, and threat detection. This role demonstrates a blend of technical expertise, hands-on experience, and leadership skills. This role demands a deep understanding of cloud security practices within the context of cloud services and a proactive approach to mitigating risks and protecting sensitive data. CISSP and AWS certifications preferred. Position Responsibilities: Design & Methodology Design and implement robust security architecture for cloud infrastructure, ensuring compliance with industry standards and regulatory requirements while maintaining high availability and scalability. Develop and deploy advanced threat detection mechanisms, intrusion detection systems, and security monitoring tools to proactively identify and mitigate security risks. Establish secure access controls and identity management solutions, implementing strong authentication and authorization mechanisms to safeguard data and resources. Work closely with Business Units, Application teams, infrastructure areas & Vendors to identity, review & evaluate the solution requirements. Investigate & propose strategic opportunities for enhanced cloud security controls and platforms through knowledge and research of industry trends. Review & provide recommendations and input as applicable on new technologies, roadmap, presentations, and Vendor product offerings specific to cloud and cloud security products. Review & identify outsourcing opportunities (e.g., ASP, IAAS, SAAS). Evaluate & align strategic fit solutions across infrastructure platforms & solutions specific to "System" hardware & software technologies. Technical Consulting Serve as a key technical cloud security partner for all enterprise technology and business teams. Provide consultation and works closely with other functional infrastructure areas/departments on multiple initiatives to meet common organizational / business goals and objectives. Participate in and provides consulting to project teams on architectural, design development, integration opportunities, planning of highly complex systems and assures it is aligned to our established strategies, guiding principles, rationales, and practices. Planning and Organizing Identify and evaluate projects/programs/initiatives and design processes that enhance and rationalize existing and upcoming solutions. Map requirements into standard services solution, identity opportunities for integrating to existing or reuse technology and provide cost effective solutions for moderate to large highly complex project/programs/initiatives. Review, identify and manage requirements for moderate to complex solutions and do a cost value, feasibility, and risk analysis. Risk Management Review, participate, develop, and update architectural standards, guiding principles, rationales and strategies. Evaluate, review, and approve highly complex design solutions for business and Infrastructure project or programs or initiatives.

Position Qualifications: Bachelor's degree in computer science, engineering or in a technology related field or equivalent through a combination of education and/or technology experience or 12 years of technology experience 7 years in identifying technical solutions for complex business p