Sr. Infrastructure Security Engineer

Job Number24062158Job CategoryInformation TechnologyLocationMarriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United StatesScheduleFull-TimeLocated Remotely?YRelocation?NPosition TypeManagementJOB SUMMARYThe Sr. Infrastructure Security Engineer ensures the stability, integrity and efficient operation of information systems and technologies across the global enterprise. This role serves as a key technical resource designing, engineering, and delivering system hardening and image creation automation for Windows and Linux environments within the public cloud and private VMWare environments. This role will also assist the team in vulnerability management, patch and compliance activities, and public cloud remediation efforts. They will work with systems, application, and enterprise/solution architects to develop requirements and test cases, implement, monitor, report, and tune applications, infrastructure, and services for Marriott's enterprise platforms.CANDIDATE PROFILEEducation and ExperienceRequired:Undergraduate degree in an engineering or computer science discipline and/or equivalent experience/certification7+ years' progressive experience in Information Technology including:Proven track record of engineering enterprise solutions for a large global company5+ years' experience in information technology application development or systems engineering5+ years Linux/windows experience5+ years Cloud technologies including IaaS/PaaS/SaaS deployments in Public Cloud5+ years in OS scripting and automation3+ years' experience with design and implementation of CIS/NIST hardening standards applied at an enterprise level3+ years' experience with design and implementation of a patch management solution3+ years professional experience in Infrastructure as a Service (IaaS) modeling including infrastructure as code development (Terraform or similar) or infrastructure engineering at enterprise scale3+ years experience implementing AWS Well-Architected security framework3+ years professional experience with cloud computing technology and its concepts (e.g. AWS, Azure, GCP) and virtualized (e.g. VMWare, OpenStack)3+ years' experience with server patch management systems (e.g. RedHat Satellite, BigFix)3+ years' experience in script development using automation and scripting languages such as python, ansible, packer, PowerShell, and/or bash2+ years professional experience in container operations (Docker, OpenShift Enterprise, GKE, ECS) and orchestration (Docker Swarm, Kubernetes)Knowledge of security controls frameworks, such as NIST 800-53, NIST CSF, COBIT, or CISKnowledge of vulnerability management, patching, and related management tools (e.g. BigFix, RedHat Satellite Server, Nessus)Preferred:Graduate Degree in Computer Science or Computer EngineeringDevOps Engineer developing pipelines, administering Kubernetes, and creating and hardening containers using DockerfileExperience in the design, implementation, and operational support of mission critical solutionsEmbraces DevOps/SRE mentality of automation firstPossesses base of experience within software development (programming)Very good understanding of network technologies (layer 2-3, IP stack, CIDR routing)Demonstrated experience delivering technology solutions in a fast-paced, deadline driven enterprise environmentDemonstrated experience learning and applying new technologies to solve business needsExcellent problem-solving skills working both independently and within cross-functional teams in a complex organizational structureExcellent understanding of change management, testing requirements, techniques, and tools to ensure high system availabilityStrong attention to detail with an ability to operate effectively across multiple prioritiesExcellent written and verbal communication skills for a wide range of audiences including executives, business stakeholders and IT teamsExperience in one or more of the following: C, C++, Java, Python, Go, Perl, or RubyExperience across many of the following platforms:Container platforms (Examples: OpenShift, Docker, Kubernetes, GKE)Operating Systems: Red Hat Enterprise Linux, Oracle Linux, Windows, CentOSStorage: Block Storage, Object Storage, Lifecycle Management and Data Replication, Backup & Recovery Best PracticesNetwork Virtualization: Akamai Global Traffic Management and Edge & Delivery Networks, Elastic Load Balancing Services,Domain Name Services and RegistrationSecurity: Compliance, Information Assurance, Data Protection using industry-best practices and tooling (Crowdstrike Falcon, Tenable.io, Splunk, HashiCorp Vault signers, PKI and Certificate Management)Applications Frameworks: Java Spring, node.js, NginX, JavaEE, HTML5Cloud security patterns: Rehydration, landing zone, ingress/egress traffic managementDatabase: Relational (Oracle, MySQL/MariaDB, PostgreSQL, MSSQL Server), non-relational (Cassandra, Couchbase, MongoDB)Experience in developing technology roadmaps and strategiesCORE WORK ACTIVITIESProvides technical leadership, oversight, governance, and direction for services related to Marriott solution delivery for enterprise image hardening, rehydration, and patch automationLeads analysis of current environment for deficiencies and provides solutionsLeads efforts to create hardening baseline and automation to Windows and Linux systems in cloud and VMWare environmentsProvides input into lifecycle, improvement, and standardization strategies in coordination with Enterprise Architecture and Global Information SecurityProvides and presents status, analysis and reporting to internal stakeholders, Executive Management and Senior LeadershipTrains and/or mentors other team members, and peers as appropriateIdentifies opportunities to enhance the service delivery, operations, and continual service improvement processesIdentifies best in class software and hardware products to meet the needs of a world class development teamDevelop implementation plans, test plans, and timelines for projects and tasksDevelop strategies for large scale vulnerability remediation across the enterpriseCommunicate with cross-functional teams to consult, direct, and track remediation activitiesPerforms other compliance-related functions as requiredDelivering TechnologyProvides technical expertise and leadership within own and other teamsProvides recommendations to improve the effectiveness of processes and programsUnderstands second order effects and global perspective in their work functionQuestions the status quo in a relentless effort to modernize and apply progressive technologies and techniquesMaintains currency with evolving and leading edge technologyDelivering on the Needs of Key StakeholdersUnderstands and meets the needs of key stakeholders.Communicates concepts in a clear and persuasive manner that is easy to understand.Demonstrates an understanding of business priorities.Supports achievement of performance goals, budget goals, team goals, etc.Providing Technical Support and ConsultationProvides technical expertise and technical leadership within own and other teams.Provides recommendations to improve the effectiveness of processes and programs.Demonstrates advanced knowledge of job-relevant issues, products, systems, and processes.Applies knowledge/judgment to achieve business goals.Foresees, identifies and resolves problems.Keeps up-to-date technically and applies new knowledge to job.Performs other reasonable duties as required for this position.California Applicants Only: The salary range for this position is $96,038.00 to $209,169.00 annually.Colorado Applicants Only: The salary range for this position is $96,038.00 to $190,154.00 annually.Hawaii Applicants Only: The salary range for this position is $116,205.00 to $209,169.00 annually.New York Applicants Only: The salary range for this position is $96,038.00 to $209,169.00 annually.Washington Applicants Only: The salary range for this position is $96,038.00 to $209,169.00 annually. In addition to the annual salary, the position will be eligible to receive an annual bonus. Employees will accrue 0.04616 PTO balance for every hour worked and eligible to receive minimum of 7 holidays annually.All locations offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave, educational assistance, 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts. Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others.Marriott HQ is committed to a hybrid work environment that enables associates to Be connected. Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD; candidates outside of commuting distance to Bethesda, MD will be considered for Remote positions.The application deadline for this position is 21 days after the date of this posting, 04/09/2024.Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.Marriott International is the world's largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed.Bewhere you can do your best work,?beginyour purpose,belongto an amazing global? team, andbecomethe best version of you.