Senior Systems Engineer (Cybersecurity)

Fidelity • Westlake, TX

7d • Hybrid

About The Position

Note: Fidelity will not provide immigration sponsorship for this position This role offers tremendous exposure to industry leading Cryptographic processes & practices, hands-on exposure to Hardware Security Modules, exposure to Blockchain/Digital Currencies, and leading systems monitoring tools & technologies. We are looking for a new team member who can make an immediate impact and who demonstrates curiosity to learn, is willing to step up and take ownership of their projects and thrive by sharing knowledge. You will be part of a highly talented Cybersecurity Dev/Ops team that designs, builds, and supports critical solutions for Fidelity cryptocurrency infrastructure. The Digital Asset Security Operations team within Fidelity Enterprise Cybersecurity (ECS) group provides cybersecurity security engineering and operational support for mission critical systems that provide cryptocurrency and blockchain related products and services. This role will interact with other members of the cybersecurity team as well as the Risk and Development team of our business partners.

Requirements

• Bachelor's degree in computer science or equivalent technology discipline
• 6+ years of experience in a distributed IT Engineering and/or support function
• 2+ years of experience with implementing and supporting APIs, Key management & Encryption products, and solutions.
• 2+ years of hands-on experience in Kubernetes and container orchestration.
• Self-starter, curious, collaborative, innovative, eager to learn.
• Understanding of Cryptography/encryption concepts, methods, and processes.
• Strong working knowledge of OS (Linux and Windows) from security point of view (configuration, hardening etc.).
• Knowledge of deploying and managing APIs, and automation/scripting (Python/Bash, PowerShell etc.).
• Hands-on experience in CI/CD and configuration management systems such as Github, Jenkins and Artifactory

Nice To Haves

• Working specifically with Amazon EKS in production a plus
• Hands on experience with Hardware Security Modules (HSM) for key management is highly desired.

Responsibilities

• Participate in on-call rotations, incident response, and root-cause analysis for production systems.
• Performing routine tasks of Incident, change and release management work in on-going operations support including source code control, build and deployment automation, configuration and change management, performing monitoring and log integration, server, and network security access control for cryptocurrency projects.
• Performing systems security engineering work including designing/recommending new controls implementations, executing proof of concepts, researching new solutions for emerging threats and developing process improvements to improve cybersecurity controls
• Defining, implementing, and supporting authentication, authorization, monitoring, policy enforcement, access control and other security controls at server, system, network, and process levels for the production systems in cryptocurrency environment
• Provision and manage Kubernetes namespaces, RBAC policies, service accounts.
• Deploy and maintain container workloads with high scalability and resiliency across multiple environments (dev/stage/prod)
• Enforce Kubernetes security best practices, including pod security standards, network policies, secrets management.
• Develop scripting and automation solutions to simplify EKS cluster maintenance and monitoring.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees