Sr. Systems Engineer - Cloud Security

at Marriott in Topeka, Kansas, United States

Job Description

Job Number 24062106

Job Category Information Technology

Schedule Full-Time

Located Remotely? Y

Relocation? N

Position Type Management

Job Summary

The Sr. Systems Engineer ensures stability, integrity, and efficient security operations that support core customer and enterprise facing products and platforms, reporting to the Director of Infrastructure, Cloud and DevSecOps Security & Compliance. The role will be accountable for partnering with Global Information Security and teams across the public and private cloud, on-premises, and hotel properties to remediate security vulnerabilities and develop risk treatment plans. The candidate will identify gaps in server and cloud environments and develop strategies for remediations at scale to reduce risk exposure. Serves as a subject matter expert in remediating security issues and risks that may arise working closely with other Cloud Operations, Cloud Engineering, Application, Network, and Security Architecture to converge cloud footprints into an enterprise-grade public cloud for applications.

Candidate Profile

Education and Experience

Required:

1. Undergraduate degree in an engineering or computer science discipline and/or equivalent experience/certification
2. 7+ years experience in information technology with technical skills:
3. 5+ years Linux/windows experience
4. 5+ years experience in Cloud technologies including IaaS/PaaS/SaaS deployments on Public Cloud
5. 5+ years experience in OS scripting and automation
6. 3+ years professional experience in Infrastructure as a Service (IaaS) modeling including infrastructure as code development (Terraform or similar) or infrastructure engineering at enterprise scale
7. 3+ years professional experience in automated configuration management (Chef, Puppet, Ansible)
8. 3+ years professional experience with cloud computing technology and its concepts (AWS, Azure, GCP) and/or virtualized (VMWare, OpenStack)
9. 2+ years professional experience in container operations (Docker, OpenShift Enterprise, GKE, ECS) and orchestration (Docker Swarm, Kubernetes)
10. 5+ years Linux and Windows system administration
11. Experience operating in an agile scrum environment.
12. Delivery focused with experience to deliver incrementally at a fast pace in 2-week sprints

Additional Preferred Experiences:

1. DevOps Engineer developing pipelines, administering Kubernetes, and creating and hardening containers using Dockerfile
2. Experience with Security Protocols (SSL, SAML, SAMP, LDAP etc.) and controls (container scanning, log aggregation, network scanning, CVE)
3. Experience in one or more of the following: C, C++, Java, Python, Go, Perl, or Ruby
4. Experience in designing, analyzing, and engineering large-scale distributed systems
5. Experience in the design, implementation and operational support of mission critical solutions
6. Demonstrated experience delivering technology solutions in a fast-paced, deadline driven enterprise environment
7. Demonstrated experience learning and applying new technologies to solve business needs
8. Excellent problem-solving skills working independently and through leading outcomes for cross functional teams
9. Excellent understanding of change management, testing requirements, techniques, and tools to ensure high availability of systems
10. Strong attention to detail with an ability to operate effectively across multiple priorities
11. Experience across many of the following platforms:
12. Storage: Block Storage, Object Storage, Lifecycle Management and Data Replication, Backup & Recovery Best Practices
13. Network Virtualization: Akamai Global Traffic Management and Edge & Delivery Networks, Elastic Load Balancing Services
14. Domain Name Services and Registration
15. Security: Compliance, Information Assurance, Data Protection using industry-best practices and tooling (Crowdstrike Falcon, Tenable.io, Splunk, HashiCorp Vault signers, PKI and Certificate Management)
16. Applications Frameworks: Java Spring, node.js, NginX, JavaEE, HTML5
17. Cloud security patterns: Rehydration, landing zone, ingress/egress traffic management
18. Requirement gathering, validation, fulfillment and change management
19. Infrastructure operations experience including self-healing autonomy
20. Provide functional, technical, and/or process leadership, or Project Management experience
21. Strong knowledge of emerging tools, software, applications, and systems for attaining best-in-class IT technology across the enterprise
22. Experience in researching emerging technologies and trends, standards, and products
23. Experience in developing technology roadmaps and strategies
24. Excellent verbal and written communication skills for a wide range of audiences including executives, business stakeholders and IT teams
25. Understanding of automated ITCM / ITRM best practices
26. Experience operating in Scaled Agile Framework

CORE WORK ACTIVITIES

1. Provides technical leadership, oversight, governance and direction for services related to Marriott solution delivery
2. Provides technical expertise to project team for successful project and change implementations
3. Determines customer requirements and works with sourced resources to develop solutions
4. Leads analysis of current environment for deficiencies and provides solutions
5. Provides input into lifecycle, improvement, and standardization strategies
6. Utilize capacity data to model future state planning with overall strategy and goals
7. Provides and presents status, analysis and reporting to internal stakeholders, Executive Management and Senior Leadership
8. Trains and/or mentors other team members, and peers as appropriate
9. Identifies opportunities to enhance the service delivery, operations and continual service improvement processes
10. Develop implementation plans, test plans, and timelines for projects and tasks
11. Responsible for project inception including requirements gathering and architecting, costs and chargeback modeling, infrastructure-as-code development and configuration management
12. Work with Enterprise Architecture to provide technology and cloud native service governance for technology steering committees, with cost and support directives
13. Promote Marriott International Cloud Platform capabilities including Cloud Native Services for cost effective solutions against architecture
14. Promote Containers-as-a-Service Kubernetes methodologies for orchestrated scheduling of portable containers across global cloud platforms
15. Monitor and drive industry best practice Continuous Delivery principals for improvement of application and feature deployment velocity with minimal downtime
16. Work with MI Security for governance and application of Tier0/1 Security tooling across the entire fleet of cloud virtual machines including automated OS, access, log, DDOS and code monitoring and auditing
17. Own relationships with tooling and Cloud vendors including Red Hat, Docker, Amazon, Microsoft, Ali Cloud
18. Coordination between onshore/offshore engineering and operations teams; handover and acceptance of L1/2 shared services Ops

Delivering Technology

1. Create and enhance administrative, operational and technical policies and procedures, adopting best practice guidelines, standards and procedures for employees, contractors and vendor engagements
2. Maintains a proper balance between business and operational risk
3. Interfaces with stakeholders to establish req