Senior Platform Engineer - Network Security (Cloud Operations Resilience Engineering)

Senior Platform Engineer - Network Security (Cloud Operations Resilience Engineering)

Do you love building and pioneering in the technology space? Do you enjoy solving complex technical problems in a fast-paced, collaborative, inclusive, and iterative delivery environment? At Capital One, you'll be part of a big group of makers, breakers, doers and disruptors, who love to solve real problems and meet real customer needs. We are seeking an experienced Platform Engineer with expertise in network security technologies cloud, enterprise, and data center to join our team!  This is an opportunity to design, deploy, and manage VPN technologies that drive the enhancement and evolution of our network security infrastructure. As a Platform Engineer, you’ll have the opportunity to be on the forefront of driving a major transformation within Capital One. You will be working with the engineering team to integrate and manage new technologies into the existing production environment; gathering requirements, developing designs to meet documented requirements, and implementing those designs. The Platform Engineer will also function as a mentor and escalation resource for the operations team; developing/presenting training curriculums, mentoring less experienced engineers, and providing on-call incident support.  

You will collaborate and innovate with smart and passionate people within Capital One to deliver results that have a direct impact on the company’s bottom line while challenging yourself by learning new technologies and seeking opportunities to advance and improve our enterprise infrastructure.

The Cloud Operations Resilience Engineering (CORE) Technology division is responsible for enabling and evolving Capital One’s foundational cloud infrastructure layer, including observability, connectivity, resilience and availability.

The VPN Engineering team provides secure Virtual Private Network (VPN) connectivity at the Enterprise level that allows associates to access Capital One’s network remotely via home based networks, public Wi-Fi networks and smartphone hot spots. 

General Responsibilities:

• Help in designing, implementing, and maintaining high quality VPN infrastructure solutions.

• Support enterprise network security infrastructure, regional hubs, and cloud environments.

• Enforce cyber security standards, automation of security services, and deployment of security solutions.

• Work collaboratively across teams and LOBs spanning multiple time zones.

• Consult with various technology support groups as part of network security design and development efforts. 

• Identify gaps in current design and research/propose appropriate solutions based on technical and business drivers.

• Lead/contribute to security solutions development, optimizations, network and cyber security standards, and technology refresh efforts. The 

• Provide input to design standards and maintain network security topology diagrams and technical design documents.

• Participate in technology integration efforts with other engineering and support teams.

• Provide direct support of audit and ad hoc consulting engagements.

• Ensure compliance with departmental and enterprise security configuration standards.

• Engage with all internal and external parties as necessary to drive and complete work.

• Represent the team and share technical information to a variety of individuals, peers, and stakeholders.

• Solve problems in a complex and ever changing environment. 

• Update and contribute to living engineering documentation.

• Work flexible hours and adjust to changing environments.

• Lifting, moving, racking, installing and carrying equipment of up to 50lbs.

Basic Qualifications:

• High School Diploma, GED, or equivalent certification

• At least 3 years of experience implementing and troubleshooting network security platforms and VPN technologies (Cisco, f5, Palo Alto)

• At least 2 years of experience leveraging network security management tools and performing packet analysis during incident/problem resolution. 

• At least 2 years of experience with IPSec tunnels and encryption (VRF, TCP/IP, OSI model, IPv6, cloud based network security architecture, VPN deployment strategies & migrations, data traffic manipulation, Proxy, Load Balancers, DNS / Rou