FLEX Cloud Infrastructure Security Automation Engineer

Job description

This is a temporary position.

CLOUD INFRASTRUCTURE SECURITY AUTOMATION ENGINEER

· Experience in securing Windows and Linux through hardening components according to CIS benchmark or similar standards

· Demonstrable expertise in DevOps engineering, systems engineering, with a background in computer science and/or software development

· Demonstrable skill in DevOps automation, GitOps, and pipeline development using tools like Jenkins or Harness, Git, and Ansible

· Script development experience in Windows PowerShell and Linux Bash

· Demonstrable development skill in provisioning infrastructure to public clouds such as Amazon or Azure using Infrastructure as Code (Terraform, Python, or equivalent)

· Windows Active Directory and Group Policy knowledge as it pertains to security hardening

· Demonstrable expertise in cloud security and developing solutions to observe, query, govern, or apply best practices Identity and Access Management (IAM) principles at scale

JOB SUMMARY

The Cloud Infrastructure Security Automation Engineer represents a challenging opportunity to lead, design, and implement solutions critical to securing cloud infrastructure core to Marriott’s mission.

Apply to this position if you are regarded as a subject matter expert in areas of Cloud Security, DevOps, and Systems Engineering.

The blending of these disciplines will challenge even a seasoned developer used to wearing multiple hats.

The core responsibility is to lead the technical development of enterprise server image hardening efforts across the global enterprise.

In this role you will use your subject matter expertise to design, engineer, and deliver operating system hardening and image creation automation for Windows and Linux environments within the public cloud and on-premises virtual environments.

You will evaluate and lead re-engineering efforts to improve these practices.

The Cloud Infrastructure Security & Compliance team is where the rubber meets the road as to translating information security policy into enterprise standards, practices, and automations.

You will use Cloud and DevOps SME skills to participate as a leading contributor to designing, implementing, arbitrating, and influencing security best practices across a complex organization.

CANDIDATE PROFILE

Required

· 5+ years’ experience in information technology application development, DevOps automation, or systems engineering

· Undergraduate degree in computer science or related field or equivalent education, certifications, and experience

· 5+ years’ experience with Linux and Windows systems administration and implementation of CIS or related hardening standards

· 5+ years’ experience in engineering solutions in public cloud environments, preferably AWS

· 5+ years’ experience in script development using Ansible, Terraform or related tools.

· 5+ years’ experience in script development utilizing python, PowerShell, bash or similar experience

Preferred

· Computer Science and/or software development background

· Experience managing and/or actively participating in PCI, SOX, SOC or equivalent audits

· Experience in AWS, Azure, and AliCloud public cloud environments

· Experience in Identity and Access Management (IAM) concepts and implementation, especially in relation to Cloud

· Experience evaluating and developing cloud IAM policy

· Excellent understanding of AWS or other public cloud security concepts with working experience

· Management VMWare ESXi, vCenter and related portfolio of tools and systems

· Experience developing images Microsoft Deployment Tool (MDT), SmartDeploy, Amazon Machine Images, HashiCorp Packer or similar

· Experience in the design, implementation, and operations support of mission critical solutions

· Embraces DevOps/SRE methodologies

· Experience with containerization, docker, and/or Kubernetes

· Experience in a security-centric role

· Very good understanding of network technologies (layer 2-3, IP stack, CIDR routing)

· Demonstrated experience delivering technology solutions in a fast-paced, deadline-driven environment

· Excellent problem-solving skills working both independently and within cross-functional teams within a complex organizational structure

· Excellent understanding of concepts including change management, testing, and patterns and tools used to ensure high system availability

· Experience supporting triage and troubleshooting in production environments

· Strong attention to detail, ability to perceive second order effects, and effectively manage demanding schedules and competing requirements

· Excellent written and verbal communication skills for a wide range of audiences including executives, business stakeholders, auditors and IT teams

THIS IS A LOCAL ROLE with the expectations of at least two days per week working in the Bethesda HQ location (Strongly Preferred)

The pay range for this position is $52.06 to $88.99 per hour.

FLEX opportunities offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave, 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts.

Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others.

 Marriott HQ is committed to a hybrid work environment that enables associates to Be connected.

Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD.

At Marriott International, we are dedicated to being an equal opportunity employer, welcoming all and providing access to opportunity.

We actively foster an environment where the unique backgrounds of our associates are valued and celebrated.

Our greatest strength lies in the rich blend of culture, talent, and experiences of our associates.

We are committed to non-discrimination on any protected basis, including disability, veteran status, or other basis protected by applicable law.

Required Skill Profession

Computer Occupations