Senior Security Engineer / Infrastructure Wasabi

At Wasabi, were a proven collection of pioneers, visionaries and disruptive doers. We see things differently than our competitors, and we make our mark in the industry by challenging the norm and delivering the unexpected and improbable. Were a fast-growing company taking the Cloud Storage industry by storm and recognized as one of the best places to work in Boston. Wasabi hot cloud storage is a new class and category of cloud storage, breaking all traditional barriers and boundaries of storage with a disruptive value proposition of being 1/5th the cost of AWS S3, faster than the competition, with no fees for egress or API request and delivered as a single-tier solution. Cloud storage has never been so simple, so fast and so inexpensive. Its all part of our vision to make cloud storage the next great global utility, just like electricity. Role Background: As a Senior Security Engineer at Wasabi Technologies, youll play a crucial role in safeguarding our cloud storage platform, enhancing our security practices from development through production across our global data centers. Your responsibilities will include evaluating, deploying, configuring, and maintaining components of our security infrastructure. Youll collaborate closely with our development and operations teams to ensure the security of our systems and deployment pipelines. At Wasabi, youll contribute to building and maintaining our entire infrastructure, from rack space and power to networking, Kubernetes clusters, and workloads. Your expertise in cloud security with AWS, Azure, or Google Cloud is highly valuable and will be essential in tackling new challenges ahead. Responsibilities: Managing and maintaining identity management solutions, which includes tasks such as group creation, batch user management, internal audits, and other administrative level tasks within an Enterprise class IAM system. Develop, implement, identify, integrate, and maintain security controls automation and security operations. Additionally, youll collaborate with business and technology partners to define the least privileged roles in applications and systems. Overseeing, maintaining, and enhancing vulnerability management systems using a mix of internal tools and third-party resources. Work closely with the security team to assess, prioritize, and address vulnerabilities in various internal ecosystems, i.e., networking, Docker images, Kubernetes, Linux, etc. It is a collaborative effort with other security professionals and DevOps engineers to develop and implement effective security strategies. Sustaining and elevating our SIEM platform for improved efficacy and efficiency. Staying abreast of emerging security threats and trends to ensure up-to-date knowledge. Requirements: 5 years of experience with security technologies and products such as firewalls, intrusion detection/prevention systems, endpoint protection, vulnerability scanners, Kubernetes security, and infrastructure security. Practical experience in Linux fundamentals, system administration, and package management. 5 Regulatory background preferred (FedRAMP, DoD, HIPAA). 3 years of hands-on experience managing and integrating with an identity provider (we use Okta) and HashiCorp Vault. Should be familiar with cornerstone Security principles such as Least Privilege. 5 years of implementing IAM systems, automating user privilege attestation and designing custom groups/roles to adhere to regulatory requirements. 5 years experience with cloud platforms such as AWS, GCP, or Azure. Relevant security certifications (CISSP, CKS, GIAC) are not required but would be strong positives. Nice to have: A functional knowledge of Kubernetes, Terraform, and Ansible. J-18808-Ljbffr