Staff, Systems And Infrastructure Engineer, Information Security

Walmart•Bentonville, AR

3d•$121,160 - $220,000•Onsite

About The Position

The Staff System & Infrastructure Engineer, Information Security will be responsible for various aspects of the information security infrastructure. This includes requirement and scoping analysis, architectural design, infrastructure design, coding, maintenance, issue resolution, technology solution automation, capacity management, and ensuring adherence to security policies and compliance norms. The role involves working with agile methodologies, designing modular and extensible systems, analyzing system performance, and implementing security features throughout the development lifecycle. Automation of repetitive tasks, CI/CD pipelines, and cloud platform integration are key aspects of this position. The engineer will also be involved in capacity planning and building the annual infrastructure growth plan.

Requirements

Bachelor's degree or the equivalent in computer science, information technology, engineering, or a related field plus 4 years of experience in systems and infrastructure engineering or related experience OR 6 years of experience in systems and infrastructure engineering or related experience.
Designing and implementing tools frameworks
Implementing infrastructure as Code (IaC) principles using tools like Terraform
Integrating REST APIs into the automation framework for programmatic communication
Next generation data center architectures
Data center transition and transformations
Datacenter migration planning (on premises and enterprise cloud), architecting targeted state and finalizing solution design using advanced technologies
Enforcing security policies using solutions like Symantec Data Loss Prevention (DLP) and Cisco Identity Services Engine (ISE)
Implementing CI/CD pipelines for automated testing and deployment of applications using tools Azure DevOps, Jenkin, GitHub
Configuring hardware (router, switch, firewalls) and software, Application Load balancer-F5 (LTM/GTM)
Performing audit/assessments of network and security
Security Assessment and Testing
Implementing integration with cloud platforms (such as AWS, Azure, GCP) for hybrid cloud
Datacenter migration planning (on premises and enterprise cloud), architecting target end state and finalizing solution
Processes and techniques for secured source code reviews
Programming languages like Python
Automating configuration management using Ansible for network and security devices
Analyzing and implementing the right set of tools for Infrastructure management, monitoring and reporting
Tools-Solar Wind, Cisco Prime, Splunk
Configuring dynamic routing protocols for efficient and adaptive Routing Protocol-EIGRP, OSPF, BGP, IGMP, PIM, MPLS, RSTP, HSRP, and VRRP IP services, LAN and WAN technologies
Cyber Security using Firewall/IPS/ Proxy Devices/ VPN/ Email and Web Security/Cloud security email protection, packet analysis, CASB, encryption

Responsibilities

Assess gaps/updates/modifications between customer/business expectations and existing product/solutions.
Classify requirements into applicable types (Functional/Non-Functional, Derived/Imposed/Emergent etc.).
Anticipate solution risks/issues during requirements gathering and recommend corrective steps.
Contribute to the creation of user stories for components/applications.
Assist in decomposing product architecture into components and modules, defining architectural specifications.
Create/Apply architectural patterns to achieve desired results.
Define architecture blueprints for product/solution components.
Analyze system performance for non-functional requirements like reliability, operability, performance efficiency, and security.
Create simple, modular, extensible, and functional designs for multiple systems within a domain.
Analyze system performance impacting the complete product for non-functional requirements.
Develop detailed design for an entire system within a domain.
Conduct reviews of platform/system design to ensure adherence to security and compliance norms.
Create/configure minimalistic code for components/applications, ensuring they meet business/technical requirements, non-functional requirements, low-maintainability, high-availability, and high-scalability needs.
Assist in selecting appropriate languages, development standards, and tools for coding/configuration.
Take initiative to learn fundamentals of different coding languages and frameworks.
Build scripts for automation of repetitive tasks in CI/CD, Testing, or other processes.
Implement telemetry features as required.
Ensure security policy requirements are applied to components/applications during code development/configuration.
Plan for infrastructure updates, expansions, and enhancements.
Investigate server errors based on past solutions.
Test the security system periodically by simulating internal intrusions.
Help resolve issues occurring in backup media.
Regularly audit firewall logs to identify suspicious activity.
Optimize device configurations by suggesting enhancements across server/security/database.
Monitor, evaluate, and assess the resolution of escalated issues.
Issue non-compliance in case of non-adherence to business rules and escalate.
Drive faster response to operational issues through technology solution automation.
Maintain up-to-date documentation on deployments, processes, and standard operating procedures/runbooks, aiming to minimize runbooks by automation.
Right-size IT resources to meet current and future business requirements cost-effectively across domains/pillars.
Allocate IT resource utilization.
Create a model of infrastructure performance to understand future resource needs.
Produce a capacity plan covering current use, forecasted needs, and support costs for new applications/releases.
Build the annual infrastructure growth plan with inputs from other teams.