Site Reliability Engineer

Description:

This role is part of the global Chief Security Office (CSO) team based in Cary, North Carolina. You will be responsible for the management and engineering of network security solutions delivered by the CSO Chief Technology Office (CTO). CTO Network Security Engineering works in partnership with Network Services for the deployment of new and enhanced network security tools and technologies. In this role, you’ll responsible manage on-perm vendor appliance product like Guardicore, L3 Service level support, automation of operation toils using bank automation platform, manage and own automation of host-based agent deployment on large scale of 25K+ hosts. This includes the development and implementation of security policies, procedures, and controls, the evaluation and selection of security products and services, You will work closely with key stakeholders across networks, operations, architecture, and production support functions.

What We Offer You

• A diverse and inclusive environment that embraces change, innovation, and collaboration

• A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days

• Employee Resource Groups support an inclusive workplace for everyone and promote community engagement

• Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits

• Educational resources, matching gift, and volunteer programs

What You’ll Do

• Manage vendor appliance product Guardicore hosted on-perm, liaison with centralized support team, platform engineering team and other infra team on stability of the platform

• Design, build and manage automation deployment capability of Guardicore Agents across various applications infrastructure. Providing L3 support for Guardicore production working closely with L2 level centralized support team in follow the sun model

• Automation of operation toils using bank automation platform on various operational use cases like proactive monitoring, auto healing, auto scaling capabilities etc. Endpoint security agent packaging, testing, deployment, and troubleshooting in partnership with platform engineering and vendor product team. Working collaboratively with vendor partners as well with Deutsche Bank internal and external team members across geographies

• Report and escalate product issues to vendor elite support and product management for immediate resolution. Work with, manage and analyze large datasets to design micro-segmentation policy based on network flows and security requirements. Large-scale deployment planning and rollout support for micro-segmentation use cases

• Testing and implementation of application security policy, Ensure critical key performance indicator (KPI), Service Level Agreements (SLA) and deliverables are met on a periodic basis for the micro-segmentation program

Skills You’ll Need

• Strong automation framework implementation experience using Ansible with other programming and scripting language like Python, Go, Bash, BladeLogic. Strong experience with databases like Oracle, PostgreSQL, Mongo, Prometheus

• Prior L3 application support experience for Network Security products supporting globally. DevOps technical expertise. Strong Linux sysadmin experience and monitoring tools for system health and alerting, UNIX/RHEL Administration

• Understanding of networking principles and protocols for troubleshooting and optimizing system performance, Preferred Guardicore Certified Segmentation Administrator & Engineer (GCSA / GCSE), Added advantage having past work experience in micro-segmentation vendor products like Guardicore, Illumio

• A highly proactive, self-starter with strong work ethics, high level of professionalism with problem solving skills, Experienced in working with multi-cultural/global teams and enterprise level projects

• Exceptional level of communication and leadership skills to lead triages for production incidents, Ability to work under pressure with tight deadlines, maintaining attention to detail. ITIL process awareness and working knowledge of change/incident/problem management. Experience with business tools including Jira, Confluence, Share point, and Microsoft 365