Cloud Network Security Engineer

2022-11-28 | po-021266

Company description

Leading Payments service with the mission to spread trust through society and to give people room to dream. Company offers instant, monthly-consolidated credit to consumers by removing hassles from payment and purchase experiences.

Responsibilities

Attend architecture review committees, focused on enabling the business to safely deploy new services and products quickly and efficiently leveraging standardization.
SME (Subject Manager Expert) and hands-on implementation of all AWS network and security services, third party SaaS solutions, and common on-premises network infrastructure.
Works directly with SOC (Security Operations Center) and BCM (Business Continuity Management) on testing the resiliency of our platform against network attacks. (e.g. DDoS)
Recommend strategic improvements across engineering teams that reduce operating costs while remaining highly available and secure.
Works with platform architectects and other service owners to accurately and consistently maintain network diagrams.
Assist platform architects with documenting network security requirements in policies, standards, and procedures.
Present clear, organized, and concise information to all audiences through a variety of media to enable effective business decisions.
Assist in vendor procurement, deployment, and configuration for new and modified systems.
Perform other duties as required to support changes in business strategy.

Requirements

Passion for security, and a sense of ownership.
Track record of solving ambiguous/undefined cloud networking problems.
Demonstrated experience in performing cost benefit analysis for recommending and implementing secure network infrastructure.
Expert understanding and hands-on experience deploying network solutions for on-premises and AWS cloud infrastructures.
Hands-on implementation of secure network security solutions (WAF, IDS/IPS, VLANs, etc.) leveraging common IaC (Infrastructure as Code) tooling such as Terraform.
Can expertly explain the pros and cons of all AWS networking and security services, and can quickly offer potential solutions to problems presented by stakeholders in a short period of time.
Demonstrated experience in responding to and recovering from WAF/IDS/IPS bypasses, DDoS, and other network based attacks.
Makes pull requests and actively participates in established change management processes for all network related changes.
Expert communication skills, both written and verbal, as we work remote and often rely on asynchronous communication.