Senior Manager, Network Security Engineering (Cloud Operations Resilience Engineering)

Senior Manager, Network Security Engineering (Cloud Operations Resilience Engineering)

Capital One is looking for a Cyber Security professional who will support enterprise network security devices in our enterprise network infrastructure, regional hubs and cloud environments. This individual will be responsible for designing and implementing network security solutions used to segregate and secure  our network and help guide the team on best practices regarding network security methodologies. The ideal candidate for this role will have a deep understanding of Network Security with large scale enterprise experience securing network based traffic, production operations experience with emphasis on resilience, reliability, standard procedures and under the hood software automation and deployment best practices. Responsibilities include enforcement of cyber security standards, automation of security services, and deployment of security solutions.

The Connectivity Security Engineering team is committed to providing Capital One secure enterprise boundaries for all product teams. We partner with internal stakeholders to ensure the Network Security  products integrated within Capital One architecture are secure and compliant. As part of Capital One's journey towards a well-managed environment, our team looks to transform our manual management and monitoring processes into a highly secure, scalable, and cost-efficient automation.

The Cloud Operations Resilience Engineering (CORE) Technology division is responsible for enabling and evolving Capital One’s foundational cloud infrastructure layer, including observability, connectivity, resilience and availability.
 

Responsibilities: 

• Lead development and implementation of security engineering solutions for a distributed hybrid cloud and datacenter environment.  This includes:

  • Collaboration with Architecture teams on developing standards for internal and cloud hosted services as well as third party access and control to Capital One systems.

  • Ensuring adherence to defined network engineering processes and driving platform strategic direction in alignment with business drivers and industry best practices.

  • Driving deployment of new platforms, technologies, code versions, and features to meet lifecycle management and business requirements.

  • Close engagement with Operations teams on making sure designs and changes are implemented in a supportable, resilient and scalable manner.

  • Partnership with the cyber organization on assessing security exposure, identifying mitigation plans and ensuring compliance with all relevant security configuration standards.

  • Engagement with teams across the company to understand current needs, strategic direction, and upcoming requirements in order to support line of business initiatives as well as proactively evolve the infrastructure.

• Leadership of key initiatives, design reviews and process improvements spanning across network technologies and teams.

Basic Qualifications:

• Bachelor’s degree or military experience

• At least 5 years of experience with Network Security products (Firewall, Proxy, WAF, NAC VPN)

• At least 5 years experience with network design and routing protocols 

• At least 4 years of experience in people management

Preferred Qualifications:

• 5+ years of experience leading teams following Agile methodologies using tools such as JIRA or Version One

• 2 + years of experience scripting and automation (Python, Ruby, BASH, Powershell) 

• 2+ years of experience with leading migration of technologies and supporting implementations in a hybrid or public cloud environment

• 6+ years of experience with network security (Firewall, Proxy, VPN, and/or WAF technologies)

• 6+ years of experience with network services implementations in public cloud (AWS, Azure, GCP)

• 3+ years of experience with network hardware

• 2+ years of experience in  Service Now, Infoblox and Snowflake

• 1+ year of experience with SDWAN and Fabric technologies 

• Relevant certifications: Palo Alto (PCNSE or PCCSE or PCSAE), CISSP, AWS, CCSE, CNSA or CSAE  

At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (i.e. H1B, F-1 OP