Principal Security Engineer

We are looking for a Senior-level Automation / Integration Engineer that can come in to take ownership of day-to-day operations. This role will be responsible for pioneering innovative automations to support a cybersecurity ecosystem. This will require thinking outside of the box, looking at existing gaps, manual processes, and inefficiencies to come up with automation solutions.
 

You will partner with additional teams within Navy Federal Credit Union to protect the Navy Federal brand, data, and IT assets from cyber-based threats by deploying, configuring, managing, and maintaining technologies/infrastructure in support Advanced Cybersecurity Initiatives (ACI) and its associated programs. 
You will support the business strategy by enabling process integration between CyberSecurity applications, as well as other business applications as needed. You will serve as technical interface to customers (analysts) for tools in the Navy Federal Cyber Defense product suite, articulating technology, and product positioning to both business and technical users.
 

Successful candidates will work independently; must be self-starting self-motivated individual, be accountable and timely in their production and status reporting and communicate effectively both in writing and when speaking to groups. You will be expected to work to build and maintain relationships within and outside of the ACI and all team members share that duty. This position will require a high level of attention to detail to the work performed on maintenance/deployments, following process, and updating/creating associated team/tool documentation. 
 

• Support NFCU in the deployment and maintenance of IT and IT Security tools and systems 
• Advanced scripting: Ansible, Python, Bash, Powershell, Ruby, and/or others for automation of tasks, integrations, and service response
  • Creating Advanced automations for manual processes
  • Designing/Implementing AI supported/driven response actions
  • Implementing API integrations to enrich data across cybersecurity ecosystem
• Experience upgrading and troubleshooting Linux and Windows based OS, packages, and apps 
  • Deploying and maintaining COTS Cybersecurity related applications and appliances 
  • Remediate vulnerabilities on Windows and Linux systems, ensure the stability and sustainability of supported platforms by monitoring, maintaining, patching, and administering all aspects of those systems 
  • Renewing and updating certificates
  • Responding to audit and enterprise hardening requests
  •  On call and after-hours support
• Experience Deploying and maintaining high availability database technologies to include PostgreSQL
• Updating of Subtasks, stories, and epic’s for work in flight 
• Contribute to and maintain internal engineering documentation (e.g., tool documentation, lessons learned, procedures, status updates, etc.) 
• Work with other Analyst and Engineering teams to Build/Optimize/Streamline new and existing processes 
• Translate customer issues/opportunities into technical solution/business requirements 

• 10+ years advanced scripting Python, Bash, PowerShell, Ruby, etc to automate routine tasks 
• 10+ years of hands- on experience writing Chef Cookbooks/Ansible Playbooks fully automating tool deployment
• 10+ years of database/datastore experience (Deployment of database technologies via automation such as NoSQL/PostgreSQL/MongoDB/MsSQL)
• 10+ years of extensive experience in Agile specifically Kanban workflow 
• 10+ years of experience as a System Admin, or similar role required 
• 10+ years of cybersecurity experience (Understanding of enterprise best practices for security and hardening with a focus on PCI-DSS) 
• 10+ years of experience with code repositories such as Git
• 10+ years of experience supporting IT infrastructure in a financial institution
• 10+ years of experience patching, upgrading, and troubleshooting Linux and Windows based operating systems, packages, and applications 
• 7+ years of extensive experience with Test Driven Development
• 7+ years of extensive experience with binary repositories such as jFrog / Nexus
• 5+ years advanced hands- on experience with AKS, Kubernetes, Docker, and/or equivalent containerization technologies.
• Familiarization with cybersecurity principles as they apply to hardening enterprise-based systems 
• Experience with large enterprise processes and working a silo’d environment where tickets/coordination/detailed change management and control processes are required 
• Experience using/integrating SIEM technologies 
• Strong knowledge of network, firewall, routing, switching, load balancing, and proxy principles and troubleshooting related issues from a server depl