Cloud Security Network Senior Engineer

About Equinix

Equinix is the world’s digital infrastructure company, operating 210 data centers across the globe and providing interconnections to all the key clouds and networks. Businesses need one place to simplify and bring together fragmented, complex infrastructure that spans private and public cloud environments. Our global platform allows customers to place infrastructure wherever they need it and connect it to everything they need to succeed.

At Equinix, we help the world’s digital leaders scale with agility, speed the launch of digital services, deliver world-class experiences, and transform people’s lives. Our culture is based on collaboration and the growth and development of our teams. 

We hire hardworking people who thrive on solving challenging problems and give them opportunities to hone new skills, and try new approaches, as we grow our product portfolio with new software and network architecture solutions. We embrace diversity in thought and contribution and are committed to providing an equitable work environment. that is foundational to our core values as a company and is vital to our success

Job Description

As a Cloud Security Network Senior Engineer, you will specialize in providing security for cloud-based digital platforms and play an integral role in protecting the organization's data. This may involve analyzing existing cloud structures and creating new and enhanced security methods serving as part of a larger team dedicated to cloud-based management and security. The Cloud Security Network Engineer will creating cloud-based programs, performing threat simulations to detect possible risks, and providing security recommendations on topics like micro services design or the necessary security controls. Cloud security engineers would instruct other teams on proper mitigating requirements and investigate, create, and recommend innovative technologies or other methods that will enhance the security of cloud-based environments. The Cloud Security Network Engineer will ensure the security of the organization's information assets, designs, configuration baselines, and systems through a structured, proactive approach that balances risk with business requirements.

Responsibilities:

• Identify changes needed in global cloud infrastructure design and configurations necessary to achieve the technology organization goals.
• Actively participate in data center infrastructure strategy reviews and design sessions by performing applicable network, system, application, database, and security analysis.
• Analyzes global cloud network & IT system response and determines tuning recommendations to improve performance, adhere to capacity management expectations, and provide performance management reporting.
• Manage effective issue identification and resolution processes; Serve as a senior escalation point for all data center network and IT security operations issues with a degree of quality that results in absolute root-cause determination and drive vendor partners to provide quality assurances by requiring immediate bug fixes, software updates, etc.
• Perform advanced tier 3 support, to include but not limited to: troubleshooting, off-hour maintenance activities, problem resolution, and on-call rotation while ensuring all activities will adhere to the services change management policy.
• Perform capacity planning of all systems and environments; ensure that upgrades are completed on a standardized basis.
• Create and maintain documentation as it relates to cloud systems, design, configuration, support and processes.
• Create and maintain playbooks and remediation plans ensuring that these are tested and updated regularly.
• Conduct high-level and low-level designs for cloud infrastructure security projects and manage cloud infrastructure changes.

• Interact with partner organizations/departments to design network or system solutions for our data center infrastructure
• Design and develop solutions and cloud requirements based on business unit needs; make recommendations on investments in cloud services and security technologies
• Evaluate new technologies and recommend future strategy to Management.
• Interact with business partners to develop a strategy to implement perimeter and edge security.
• Experience in architecture and design of global enterprise and cloud security solutions.
• Follow industry standards, regulatory requirements and the potential impacts to policies / controls, standards, and procedures and assist in audit situations, regional compliance, and steering committees.

Requirements:

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent.
• Have at least 5 complete years of relevant working experience with implementation / deployment / securing global cloud and enterprise networks.
• Strong experience in the field of cyber security in LAN, WAN, IP & switching and information technology.
• Focus on detecting, monitoring and controlling network equipment and processes using:
  • Cloud Security (AWS/Azure/GCP)
  • Firewalls / Routers / Switches (e.g. Palo Alto, Juniper, Cisco)
  • VPN / IPSEC (e.g. Palo Alto)
  • Load Balancers (e.g. F5)
  • Network Access Controller
  • Application Software (e.g. Syslog / Trap)
  • Network Tools (e.g. Wireshark, TCP Dump, Iperf,)
  • Operations Support Systems (e.g.Nagios, Zabbix, PRTG, CMDB)
  • Business applications (e.g. Servicenow, Jira)
  • Configuration management (e.g. Linedancer)
  • Analysis Tools (e.g. Elasticseach, Kabana, Logstash)

• Experience and knowledge of traditional security controls and technologies, such as:
  • Security Information and Event Management (SIEM) systems
  • Intrusion Detection/Prevention systems (IDS/IPS)
  • Software Defined Network
  • Distributed Denial of Service
  • Privilege, ACL, vulnerability and threat management
  • Cloud Security tools (e.g. Prisma Cloud)

• In addition to newer offerings such as:
  • Web Application Firewall
  • Threat Intelligence Platforms
  • Security Automation and Orchestration
  • Web Filtering & Application Firewall Solutions
  • Virtual network security solutions

• Well-rounded knowledge of system and network security techniques and standards, NIST CSF, 800-53, 800-115.
• Extensive experience with BGP in a large network environment and experience with OSPF and EIGRP redistribution
• Experience with GRE overlays and configuring, troubleshooting and securing routers and routing protocols.
• Experience with carrier provided MPLS WAN and packet switching technologies.
• Understanding of authentication, authorization, accounting (AAA) & auditing for all network devices, (Tacas/Radius/AD).
• Demonstrates understanding of project management processes, including the planning of action items and resources, including RFI/RFP.
• Able to communicate developed technology solutions, expresses the importance of an effective implementation and develops implementation plans.
• Certifications in Information Security and IT disciplines such as CCIE, CCSP, PCNSE, CISSP, CEH, Network +, AWS Certifications
• Experience with system communications protocols (TCP/IP, UDP IP, HTTP, FTP, SFTP, BGP, OSPF, GRE, VLAN, RPKI).
• Experience in Python, Bash, PowerShell is preferred and C, C++, Visual C, Java, Java Script, SQL, a nice to have.
• Creative, independent with good problem-solving skills.
• Strong analytical, interpersonal, communication and writing skills.
• Willingness to travel on overseas assignment as the need arises.