Senior Technical Risk Engineer

Ford Motor Company is seeking a Technical Risk Engineer with strong technical acumen to design, prioritize, and enable risk-reducing technical solutions across complex cloud and enterprise environments. This role emphasizes solution engineering over process engineering, focusing on architecting practical, automatable, and scalable technical safeguards.

Responsibilities:

• Engineer technical risk solutions that reduce operational, cyber, and resilience risk through architecture, automation, and control design
• Translate risk requirements, policies, and standards into implementable technical patterns, guardrails, and reference architectures
• Prioritize and influence solution design decisions based on risk impact, blast radius, and recovery dependencies
• Partner with platform, cloud, security, and SRE teams to embed risk controls directly into infrastructure and pipelines
• Evaluate control effectiveness using technical signals and evidence, not just procedural compliance
• Support initiatives such as secure cloud architecture, isolated recovery environments, identity and access hardening, and infrastructure resilience
• Provide technical guidance on risk tradeoffs, recovery sequencing, and dependency-aware system design
• Contribute to lightweight process definition where needed—but always in service of enabling better technical outcomes

Requirements:

• Requires a bachelor's or foreign equivalent degree in computer science, information technology or a technology related field
• 7+ years in IT operations & engineering, security engineering, platform engineering, SRE, or technical risk roles
• Backup, recovery, and resilience solution architecture implementations, especially IRE's
• Proven ability to design and influence technical solutions across teams
• Strong understanding of how risk manifests in distributed systems, cloud platforms, and automation
• Comfortable operating between engineering teams and risk stakeholders
• Ability to explain complex technical risk concepts to non-technical audiences without losing fidelity
• Cloud Platforms: Google Cloud Platform (GCP)
• Automation & API Development: Proficiency in Python or Java and Ansible for scripting, with hands-on experience in API development (RESTful)
• Infrastructure as Code: Terraform (required)
• Data & Analytics: GCP BigQuery, Power BI (or similar) to visualize risk posture & evidence
• Backup, recovery, and resilience solution architectures
• Isolated Recovery Environment (IRE) design and implementation in GCP
• Supporting Knowledge (nice to have):
• GRC and/or Security Domain expertise
• CI/CD pipelines and policy-as-code
• Cloud IAM, networking, and control planes
• Observability, logging, and evidence automation
• GRC Platforms: Archer, ServiceNow
• ITIL-based IT Service Management (ITSM)
• Familiarity with Agentic AI Frameworks