Senior Systems Design / Architecture Engineer

Want to be a part of our team?

The Security Engineer is responsible for administration and security of systems to support NTT’s Global IP Network.

Working at NTT

What will make you a good fit for the role?

The Security Engineer is responsible for administration and security of systems to support NTT’s Global IP Network. We seek a strong systems engineer that is security focused and will provide direction and support for the GIN operations and engineering teams. Develop and deploy tools, configuration, and policy in GIN Infrastructure environment and consult with Application Developers to provide a robust infosec approach.  Works with other security focused engineers across the organization from other disciplines to meet a holistic security posture.

In this role you will:

• Safeguard information systems by identifying and remediating potential and actual security issues.
• Implement security improvements by analyzing existing infrastructure, evaluating changes and controls, anticipating new requirements.
• Proactively identify technology gaps and develop and implement solutions collaboratively.
• Diagnose system problems; propose and rapidly develop high quality solutions.
• Work with developers and other internal teams to ensure stable operation of the servers and applications that support the NTT Global Backbone.
• Administer security-related systems including but not limited to: 
  • IDS/IPS/Network Security
  • Vulnerability management
  • Endpoint protection
  • Log management/SIEM
  • Privileged Access Management
• Monitor logs for unusual or suspicious activity and take appropriate action.
• Configure and tune Intrusion Systems (IDS/IPS/SIEM) to ensure that only authorized personnel have access to GIN systems and networks, and that only authorized activity is taking place on GIN systems and networks.
• Manage systems and applications that support the Global IP Network.
• Automate operations of systems and software to improve reliability and efficiency.
• Research, plan for, and implement new systems technology in the current operating environment.
• Introduce new information security issues and requirements to management.
• Identify current and emerging technology issues including security trends, vulnerabilities and threats.
• Act as a technical consultant on information security incidents and forensic investigations.
• Identify opportunities and drive the implementation of automation.
• Act as technical liaison between GIN and other NTT security teams.

Skills and Core Competencies:

• Excellent verbal and written communication skills, with a focus on translating technically complex issues into simple, easy to understand concepts.
• Results oriented, high energy, self-motivated.
• Collaboration - ability to exercise cross-team co-operation and influence.
• Exceptional attention to detail and takes pride in delivering demonstrated results.
• Ability to multi-task projects, assignments and daily workload while maintaining timely deliverables.
• Ability to operate in virtualized network and compute environments, in non-cloud settings.
• Ability to analyze security impact of policies, procedures, configurations, and behaviors.
• Understands Security Compliance and posture, and the practical application of this to a globally distributed environment.
• Familiarity with common attack patterns, exploitation, and remediation techniques.
• Hands-on knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques a plus.
• Ability to problem-solve and apply critical thinking.

Skills Summary

What will make you a good fit for the role?

This role is perfect for you, if you:

• Bachelor’s degree or equivalent in Information Technology, Computer Science or related preferred.
• Relevant certifications preferred.
• 3+ years of Security Engineering experience.
• 5+ years of experience with Linux system administration.
• 3+ years of experience with compute virtualization (storage and network virtualization is a plus).
• Experience administering remote, scalable, automated Linux-based virtual and physical platforms in on-prem datacenters, cloud, and remote points-of-presence worldwide.
• Experience administering VMware vSphere. Experience with VSAN, NSX, and/or automating VMware products is a plus. 
• Experience with Puppet or similar large-scale configuration management platforms.
• Solid understanding of and practical experience with IPv4 and IPv6 networking
• Experience with Splunk 
• Experience with virtualized networking and network