Logo
Kansas Action for Children, Inc

Sr. Systems Engineer - Cloud Security

Kansas Action for Children, Inc, Bethesda, Maryland, us, 20811


at Marriott in Topeka, Kansas, United StatesJob Description

Job Number

24062106Job Category

Information TechnologySchedule

Full-TimeLocated Remotely?

YRelocation?

NPosition Type

ManagementJob SummaryThe Sr. Systems Engineer ensures stability, integrity, and efficient security operations that support core customer and enterprise facing products and platforms, reporting to the Director of Infrastructure, Cloud and DevSecOps Security & Compliance. The role will be accountable for partnering with Global Information Security and teams across the public and private cloud, on-premises, and hotel properties to remediate security vulnerabilities and develop risk treatment plans. The candidate will identify gaps in server and cloud environments and develop strategies for remediations at scale to reduce risk exposure. Serves as a subject matter expert in remediating security issues and risks that may arise working closely with other Cloud Operations, Cloud Engineering, Application, Network, and Security Architecture to converge cloud footprints into an enterprise-grade public cloud for applications.Candidate ProfileEducation and ExperienceRequired:Undergraduate degree in an engineering or computer science discipline and/or equivalent experience/certification7+ years experience in information technology with technical skills:5+ years Linux/windows experience5+ years experience in Cloud technologies including IaaS/PaaS/SaaS deployments on Public Cloud5+ years experience in OS scripting and automation3+ years professional experience in Infrastructure as a Service (IaaS) modeling including infrastructure as code development (Terraform or similar) or infrastructure engineering at enterprise scale3+ years professional experience in automated configuration management (Chef, Puppet, Ansible)3+ years professional experience with cloud computing technology and its concepts (AWS, Azure, GCP) and/or virtualized (VMWare, OpenStack)2+ years professional experience in container operations (Docker, OpenShift Enterprise, GKE, ECS) and orchestration (Docker Swarm, Kubernetes)5+ years Linux and Windows system administrationExperience operating in an agile scrum environment.Delivery focused with experience to deliver incrementally at a fast pace in 2-week sprintsAdditional Preferred Experiences:DevOps Engineer developing pipelines, administering Kubernetes, and creating and hardening containers using DockerfileExperience with Security Protocols (SSL, SAML, SAMP, LDAP etc.) and controls (container scanning, log aggregation, network scanning, CVE)Experience in one or more of the following: C, C++, Java, Python, Go, Perl, or RubyExperience in designing, analyzing, and engineering large-scale distributed systemsExperience in the design, implementation and operational support of mission critical solutionsDemonstrated experience delivering technology solutions in a fast-paced, deadline driven enterprise environmentDemonstrated experience learning and applying new technologies to solve business needsExcellent problem-solving skills working independently and through leading outcomes for cross functional teamsExcellent understanding of change management, testing requirements, techniques, and tools to ensure high availability of systemsStrong attention to detail with an ability to operate effectively across multiple prioritiesExperience across many of the following platforms:Storage: Block Storage, Object Storage, Lifecycle Management and Data Replication, Backup & Recovery Best PracticesNetwork Virtualization: Akamai Global Traffic Management and Edge & Delivery Networks, Elastic Load Balancing ServicesDomain Name Services and RegistrationSecurity: Compliance, Information Assurance, Data Protection using industry-best practices and tooling (Crowdstrike Falcon, Tenable.io, Splunk, HashiCorp Vault signers, PKI and Certificate Management)Applications Frameworks: Java Spring, node.js, NginX, JavaEE, HTML5Cloud security patterns: Rehydration, landing zone, ingress/egress traffic managementRequirement gathering, validation, fulfillment and change managementInfrastructure operations experience including self-healing autonomyProvide functional, technical, and/or process leadership, or Project Management experienceStrong knowledge of emerging tools, software, applications, and systems for attaining best-in-class IT technology across the enterpriseExperience in researching emerging technologies and trends, standards, and productsExperience in developing technology roadmaps and strategiesExcellent verbal and written communication skills for a wide range of audiences including executives, business stakeholders and IT teamsUnderstanding of automated ITCM / ITRM best practicesExperience operating in Scaled Agile FrameworkCORE WORK ACTIVITIESProvides technical leadership, oversight, governance and direction for services related to Marriott solution deliveryProvides technical expertise to project team for successful project and change implementationsDetermines customer requirements and works with sourced resources to develop solutionsLeads analysis of current environment for deficiencies and provides solutionsProvides input into lifecycle, improvement, and standardization strategiesUtilize capacity data to model future state planning with overall strategy and goalsProvides and presents status, analysis and reporting to internal stakeholders, Executive Management and Senior LeadershipTrains and/or mentors other team members, and peers as appropriateIdentifies opportunities to enhance the service delivery, operations and continual service improvement processesDevelop implementation plans, test plans, and timelines for projects and tasksResponsible for project inception including requirements gathering and architecting, costs and chargeback modeling, infrastructure-as-code development and configuration managementWork with Enterprise Architecture to provide technology and cloud native service governance for technology steering committees, with cost and support directivesPromote Marriott International Cloud Platform capabilities including Cloud Native Services for cost effective solutions against architecturePromote Containers-as-a-Service Kubernetes methodologies for orchestrated scheduling of portable containers across global cloud platformsMonitor and drive industry best practice Continuous Delivery principals for improvement of application and feature deployment velocity with minimal downtimeWork with MI Security for governance and application of Tier0/1 Security tooling across the entire fleet of cloud virtual machines including automated OS, access, log, DDOS and code monitoring and auditingOwn relationships with tooling and Cloud vendors including Red Hat, Docker, Amazon, Microsoft, Ali CloudCoordination between onshore/offshore engineering and operations teams; handover and acceptance of L1/2 shared services OpsDelivering TechnologyCreate and enhance administrative, operational and technical policies and procedures, adopting best practice guidelines, standards and procedures for employees, contractors and vendor engagementsMaintains a proper balance between business and operational riskInterfaces with stakeholders to establish req

#J-18808-Ljbffr