Senior Network and Cloud Engineer

State Street

State Street provides investment servicing, investment management, investment research and trading services to institutional investors worldwide.

The Network team is looking to add a seasoned Network Security Engineer to our team. Your goal is to be one of the contributors to the global network team and develop the strategy to support the transformation to cloud services and a Zero Trust security framework. This is a tremendous opportunity to join a global organization and participate in the development of the next generation security architecture. Ideal candidates will have well-rounded knowledge of network perimeter security, network segmentation, zero trust network access and cloud security.

What you will be responsible for:

• Responsible for engineering and supporting all network security technologies
• Evaluate new security technologies to better improve efficiencies, security posture and meet business objectives
• Collaborate with team to create and implement security controls, defenses, and countermeasures to intercept and prevent internal and/or external attacks
• Experience with cloud security solutions including cloud segmentation, perimeter security and CASBs
• Has thorough knowledge of infrastructure technology interdependencies
• Responsible for providing technical leadership across the IT organization in support of the network security initiatives
• Develop and support the network segmentation and zero trust strategy across the global organization
• Provide training and new technology overview to engineering colleagues
• Develop, document and update standards documentation
• Final technical escalation point of contact for network security technologies

Education & Preferred Qualifications:

• 10 + years’ experience in the network security field
• Technical knowledge required in the following areas:
  • Next Gen Firewalls (Palo Alto/Illumio preferred)
  • Network Intrusion Detection and Prevention Systems
  • Routing and Switching foundational knowledge
  • Security Information and Event Management (SIEM)
  • Packet decoding and traffic flow analysis
  • Zero Trust Network Access Solutions (Zscaler preferred)
  • SSL VPN Solutions
  • Load Balancing foundational knowledge (F5 LTM, GTM, ASM preferred)
  • Web Application Firewalls and data loss prevention technologies
• Foundational automation/IaC knowledge (Terraform/Python experience preferred)
• High-level certification in a major technology area preferred (CCIE, CISSP, Certified Ethical Hacker (CEH) etc)
• Skilled in analyzing and monitoring network security solutions
• Demonstrated ability to work under intense pressure when resolving complex issues with strict deadlines
• Excellent written, communication and presentation skills
• Ability to communicate and collaborate effectively with the team members and superiors
• Ability to lead and execute large, complex projects related to new technology integration