Senior Cloud Security Engineer
NEW YORK-10008, NY, US
10/11/2019
-
Required Skills
Company
Infinity Consulting Solutions, Inc
Experience
-
Job Description
Responsibilities:
Extensive experience with Cloud Deployments
AWS/Azure security and hardening
AWS/Azure networking
Identity Management
Threat detection tools e.g. Redlock
Vulnerability management and scanning tools
Knowledge of SSL/TLS traffic handling and encrypt/decrypt policies.
Knowledge of Windows and Linux operation systems
Understanding of core principles of how modern infrastructure technologies operate (such as virtualization of computing and networking, containers, cloud computing, SaaS, PaaS etc) security aspects of these technologies;
Solid understanding of the operation of LAN/WAN IP-based networks (TCP/IP, routing/switching, VLANs,
NAT, DNS, DHCP);
Understanding of principles of applied cryptography - symmetric/asymmetric encryption, hashing,
SSL/TLS, SSH, PKI, IPSec, site-to-site/remote access VPN, disk encryption, HSM;
Understanding of attack vectors against modern enterprises: phishing, ransomware, malware, DoS/DDoS, drive-by, MITM, various type of injection (i.e. SQL), cross-site scripting, etc.; methods of defense from these attacks;
Knowledge of common security principles, concepts, and methods (authentication, authorization, single sign-on, network segregation, DMZ, Zero Trust, defense-in-depth, penetration testing, sandboxing etc);
Ability and desire to code, script and automate in order to improve own and team's operational efficiency;
Understanding of aspects of application delivery in principle and firewalling/load balancing in particular;
Understanding of HTTP operation and associated concepts (its methods, cookies, sessions, caching, CDNs, HTTP-based applications and protocols etc);
Understanding of principles of operation of NextGen/L7 firewalls and experience with one of the market-leading vendors;
Basic understanding of DevOps and CI/CD
Palo Alto Networks
Deploying Palo Alto Transit Hubs in AWS and Azure
L7 Protections
Anti-Virus/WildFire/Anti-Spyware/(IPS) Intrusion Prevention System
URL Filtering
IPSec/GlobalProtect VPN
High Availability Deployments
Managing Firewalls via Panorama
Deploying Security Policy global across regions
Security Architect
Information Technology
No Preference
FullTime Job
Other
1
Candidate Requirements
-
Bachelors
Walkin Information
-
10/2/2019
-
Recruiter Details
Doug Klares
1350 Broadway, Suite 2205,
NEW YORK-10018, NY
-