Information Security Engineer

Information Security Engineer - The role will be responsible for automating the delivery of network security in public cloud initiatives globally within American Express. This will be an integral role for the network security engineering and delivery for public cloud, including automation, scalability

Minimum Qualifications

• 7+ years of overall experience in datacentre, cloud and network

• 5+ years of hands-on experience in AWS and GCP cloud.

• 3+ years of experience in Containers, Kubernetes and micro services

• 3+ years of experience in Terraform

• 3+ years of experience in advance networking in public cloud

• Understanding of classical or cloud-native design patterns is required.

• Knowledge of security configuration management, container security, endpoint security and secrets management as they are applied to cloud applications.
• Knowledge of network architecture, proxy infrastructure, and programs to support network access and enablement. ·
• Experience with multiple Information Security domains, such as Infrastructure Vulnerability, Data Loss Prevention, End User Security, Network Security, Internet Security, Identity & Access Management, etc.

Preferred Qualifications

• Bachelor’s Degree in computer science, computer engineering, or related field; or equivalent experience is preferred.
• Terraform certification preferred
• Cloud Engineering or Security Certification preferred – AWS Certified Solutions Architect (professional), AWS Certified Advanced Networking Speciality, AWS Certified Security, GCP Cloud Architect, GCP Network Engineer, GCP Cloud Security Engineer or similar.

Note :

1. The candidate should showcase technical expertise with workflows.
2. Terraform Experience is a must
3. AWS or GCP is a must, AWS preferable.
4. Candidate should not be a frequent jumper.
5. Should have very good understanding on cloud networking concepts.
6. Should have very good understanding on VPC/VNET.

7. Amazon VPC (Virtual Private Cloud)

8. Subnets (Public & Private)
9. IP Addressing & Route Tables
10. Internet Gateway & NAT Gateway
11. VPC Peering & Transit Gateway
12. Elastic Load Balancers (ELB)
13. Security Groups & NACLs
14. Site-to-Site VPN & AWS Direct Connect
15. PrivateLink & VPC Endpoints
16. Monitoring (VPC Flow Logs, CloudWatch, CloudTrail)