Director, Infrastructure Security Engineer - Remote Access

Job Classification:

Technology - Engineering & Cloud

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability, and efficiency? The Global Technology team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you will unlock an exciting and impactful career – all while growing your skills and advancing your profession at one of the world’s leading financial services institutions.

Your Team

As a Director on the Security Service Data Protection team, you will partner with product owners, tech leads, designers, engineers, and delivery professionals to improve Prudential’s capabilities.  You will provide guidance on technical strategy, design the overall technology architecture as you implement capabilities to solve sophisticated business problems, deploy innovative products, services, and improve experiences. In addition to deep technical expertise and experience, you will bring excellent problem solving, communication and teamwork skills, along with agile ways of working, strong business insight, an inclusive leadership attitude and a continuous learning focus to all that you do.

• Drive the Data Protection vision, designing the overall technological architecture of the End Point Protection Service solutions portfolio (Remote Access/ VPN, ZTNA, SASE, SSE)

• Responsible for technical design and infrastructure / environments strategy, including deployments, ensuring that services are in-line with a Minimum Viable Product (MVP) mentality of ‘emerging architecture.’

• Collaborate with product owners and the Tech Lead in aligning the roadmap accounting for strengths and opportunities within the technical stack, bringing forward business acuity and knowledge to influence decisions.

• Mentor and coach the technical team, including support with design reviews, domain knowledge and bring a deep understanding of relevant and emerging technologies, embedding learning and innovation in the day-to-day efforts.

• Identify and remove complex technical impediments that may arise within the team.

• Help the Agile team to develop solutions and solve all surfacing problems at hand, constantly look for innovative ways of solving technical problems and crafting the solution, not afraid of challenging the status quo.

• Serve as a technical liaison with adjacent areas to integrate applications and implement Network Security engineering best practices for increased security posture quality.

The Skills & Expertise You Bring

• Bachelor of Computer Science or Engineering or experience in related fields

• Lead and effectively leverage diverse ideas, experiences, thoughts and perspectives to the benefit of the organization. 

• Experience with agile development methodologies and Test-Driven Development (TDD)

• Ability to learn new skills and knowledge on an on-going basis through self-initiative and tackling challenges.

• Strong executive presence with an ability to translate and communicate sophisticated technical solutions in understandable terms to a broad range of audiences.

• Excellent problem solving and collaboration skills.

Critical Qualifications:

Significant experience and/or subject matter expertise (SME) knowledge with the following:

• Deployment and management of Remote Access VPN Solutions

• SME level knowledge of Ivanti / Pulse Remote Access infrastructure

• ZTNA (Zero Trust Network Access)

• Vendor Solution / Product evaluation

  • Evaluating Road Map / RFE (Request for Enhancement) to existing product

  • Solution / Product Gap Analysis

  • Vendor RFP (Request for Proposal) Creation and Assessment

  • POC (Proof of Concept) testing and evaluation

• Experience deploying and operating VPN services in large enterprise environment.

• IdP experience (ADFS, AD, SAML, Entra Id, Ping, RSA)

• Zero-trust concepts (posture, profiling, certificate management)

• RBAC (Role Base Access Control) best practices and strategies (least privilege, MFA)

• Managing incident triage and troubleshooting (packet capture, analyzing logs, debug         events).

• Telemetry and service dashboard creation (Splunk, etc.)

• XML / configuration file creation and update

Additional qualifications:

• SASE (Secure Access Service Edge / SSE (Security Service Edge)

• Migrating services from VPN to ZTNA

• Z Scaler