Principal Security Engineer

Description

The Principal Security Engineer is a senior level individual contributor role that will primarily perform governance and security functions related to cloud connectivity, design, technical configuration, and access control in the enterprise IT infrastructure.

Responsibilities will include (but will not be limited to):

• Performing governance over connectivity designs, configuration proposals, and access and policy requests
• Consulting with project teams to identify security technical requirements, evaluate compliance, and provide recommendations. 
• Collaborating with team members across functional areas (e.g., cloud, API, infrastructure, product) to engineer solutions that support both business and security requirements.
• Evaluating, deploying, and managing a variety of cloud-centric security platforms, to include policy enforcement, sensor, and orchestration technologies.
• Staying current with a broad range of new technical areas, role-specific security technologies, and the general threat landscape to ensure the chosen candidate can effectively maintain and drive an overall direction that evaluates and mitigates new and emerging threats.

After-hours maintenance windows and on-call coverage are required.

Experience and Skills:

• Proven experience with cloud solutions such as AWS, Azure, GCP, and other IaaS/PaaS/SaaS/CDN environments
• Strong engineering experience working across multiple cloud vendors with proven understanding of routing/flows, security policies, access controls, and visibility tools
• Experience with DevSecOps flows leveraging technologies such as Git, Jenkins, Docker containers, Kubernetes, EKS and AKS
• Experience with scripting languages (e.g., Terraform, Ansible, Python, Bash, Powershell) 
• Ability to troubleshoot via analysis of traffic flows, logs, system events, etc. and identify functional interrelationships
• Familiarity with network technologies (e.g., IDS, firewall, proxy, packet capture, network visibility/aggregation) and software defined network constructs like ISTIO/Name Spaces
• Familiarity with core networking concepts (e.g., TCP/IP, DNS, HTTP)
• Experience managing Linux and Windows operating systems a plus
• Ability to interact with both technical and non-technical staff at all levels, tailoring communication based on the audience, and articulate technical details in business terms
• 5 years of experience working in a large, matrix-driven corporate environment desired
• 10 years of experience in IT, preferably at least 2 years in cloud

Education and Certifications:

• Bachelor’s Degree or equivalent combination of education, training, and experience required, along with a high technical competency to perform the needed responsibilities.

Hours & Work Schedule 

Hours per Week: 40

Work Schedule: Monday – Friday. Work outside of normal business hours may be required.

Pay Transparency

The salary range for this position is $127,000 - $170,000 per year, plus an opportunity to earn an annual discretionary bonus. Actual pay is based on various factors including but not limited to the work location, and relevant skills and experience. 

We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens’ paid time off policy exceeds the mandatory, paid sick or paid time-away policy of very local and state jurisdiction in the United States. For an overview of our benefits, visit https://jobs.citizensbank.com/benefits.

#LI-Citizens1

Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance.

Equal Employment Opportunity

At Citizens we value diversity, equity and inclusion, and treat everyone with respect and professionalism. Employment decisions are based solely on experience, performance, and ability. Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression (including transgender individuals who are transitioning, have transitioned, or are perceived to be transitioning to the gender with which they identify), genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws.

Equal Employment and Opportunity Employer

Citizens is a brand name of Citizens Bank, N.A. and each of its respective affiliates.