Sr Staff, InfoSec Engineer - InfraSec

About the Role

We are hiring a highly skilled and experienced Senior Infrastructure Security Engineer. In this role, you will be responsible for designing, implementing, and maintaining the security posture of our network and cloud infrastructure. You will play a key role in identifying and mitigating security risks, ensuring compliance with industry best practices and regulations, and driving continuous improvement in our security operations. You will be a subject matter expert, mentoring junior engineers, and collaborating with cross-functional teams to deliver secure and reliable infrastructure solutions

What You'll Do

Key Responsibilities: 

• Provide Infrastructure Security Design & Implementation, delivering robust security controls for cloud (Azure, GCP, OCI), on-premises, and hybrid infrastructure environments. 

• Develop and maintain infrastructure security architecture diagrams and documentation. 

• Configure and manage security tools and technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), Network Access Controls (NAC), VPN & Zero Trust Network Access 

• Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, NIST, SOC 2, PCI DSS) and. Participate in security audits and assessments 

• Develop and maintain deep relationships with the various teams delivering products within Gap Inc including product and engineering leaders to ensure security is built in from the start. 

• Build security policies and standards and enforce them. 

• Assess and communicate potential security risks and make recommendations to stakeholders and leadership. Collaborate and partner with other Infosec teams to incorporate feedback early in the product lifecycle as well as influence processes in other parts of Infosec. 

• Stay current with the latest security trends, threats and develop and maintain deep industry expertise to incorporate it into your work to ensure the company's applications and data remain secure. 

Who You Are

Experience: 

• Senior Infrasec engineer with 5+ experience working as security engineer 

• Strong technical knowledge and understanding of modern network & cloud security platforms and services such as Palo Alto NGF & PRISMA, ClearPass, VPN, SD-WAN, ZTNA and cloud infrastructure security technologies such as Azure, GCP (AFW, AppGW, Cloud Armor) 

• Experience with modern compute architectures such as Docker/Kubernetes & Serverless 

• Experience with security automation & orchestration - infrastructure-as-code (IaC) tools (e.g., Terraform, ARM, cloud IaaS/PaaS automation). 

 

Skills: 

• Strong problem-solving skills and ability to perform technical analysis at both a high and low level of detail. Ability to assess relatively complex situations and analyze data to make independent judgments and recommend solutions.  

• Effective written and verbal communication skills with the ability to collaborate and interact across teams and at varying levels of management. Ability to communicate difficult concepts in a simple manner. 

• Ability to filter, prioritize, and organize work appropriately to meet and exceed goals. 

• Aptitude to understand technical solutions and business processes quickly. 

• Strong negotiation skills to influence decisions while working with senior technical architects and business leads. 

Education: 

• Bachelor's degree in computer science, Information Security, or related field (or equivalent experience).