MORE ABOUT THIS JOB
Product Security Engineering within Core Engineering is responsible for providing an opinionated, standardized set of tools and services to enable building of secure applications at the firm. The hiring team is primarily responsible for designing and implementing core Secrets Management solutions for the firm’s internal and public cloud technology. We help secure the firm's systems and software by providing solutions that allow our software engineering teams to easily and reliably safeguard their applications.
Are you a systems engineer or security engineering specialist who is enthusiastic about secrets management and security, and providing reliable, highly available services, with a minimum of 3 years' engineering experience? You will be a good fit if you have…
RESPONSIBILITIES AND QUALIFICATIONS
How will you fulfill your potential?
Work with a global team of highly motivated platform engineers and software developers delivering solutions specializing in a range of technologies with a remit to define and build integrated architectures for secure, scalable infrastructure services serving a diverse set of internal and external use cases
Partner with colleagues from across technology and risk to ensure an outstanding, useable and unobtrusive experience for owners and users of secrets
Help to provide frictionless integration with the firm’s runtime, deployment and SDLC technologies
Manage integration, testing, release and demise of software products supporting secrets management
Help to communicate and promote best practices for security engineering
Engage in quality control in non-production and troubleshooting production environments
Basic Qualifications
A strong grounding in security concepts, including core cryptography, secure coding practices and principles of authentication and secrets management
A good understanding of X.509, key exchange protocols, and authentication protocols and identity management
Experience deploying and supporting software across the full Continuous Delivery life-cycle
Sound SDLC and practices and tooling experience - version control, CI/CD and configuration management tools
Ability to communicate technical concepts effectively, both written and orally, as well as interpersonal skills required to collaborate effectively with colleagues across diverse technology teams
Proficiency in Bash shell and scripting, RHEL administration and system
Experience meeting demands for highly availability and scalable system
Ability to reason about performance, security, and process interactions in complex distributed systems
Ability to understand and effectively debug both new and existing software
Experience monitoring, measuring, auditing and supporting software
Preferred Qualifications
Ability to report on trends, perform gap analysis, perform risk analysis and provide recommendations to continuously improve the environment
Experience using and/or supporting HashiCorp Vault and/or Consul in production
Experience with containerization - Kubernetes/Docker
Proficiency developing, testing and troubleshooting cross-platform software in one or more of golang, Java, C++; open to working with multiple languages
Experience with Open Policy Agent
Familiarity with OIDC Authentication
Experience using the following products would also be beneficial: GitLab, HAProxy, Terraform, Freemarker
