Senior Systems Engineer - Network And Cyber Security

WELLINGTON MANAGEMENT

Wellington Management offers comprehensive investment management capabilities that span nearly all segments of the global capital markets. Our investment solutions, tailored to the unique return and risk objectives of institutional clients in more than 60 countries, draw on a robust body of proprietary research and a collaborative culture that encourages independent thought and healthy debate. As a private partnership, we believe our ownership structure fosters a long-term view that aligns our perspectives with those of our clients.

We are transitioning to a hybrid work environment where both remote work and the office play a critical role. Our vision is a future where all employees are empowered to work flexibly to drive the best outcomes for our clients. Flexible work is a mindset and a core value. Our employees are encouraged to work remotely two days a week as a standard practice and will have flexibility in terms of working hours.

At Wellington Management our appetite for technology is insatiable. We recognize that the world is full of fascinating questions that will impact the future of companies, economies, financial markets, and entire industries. We want you to help us find answers to these questions by building and evolving our innovative, industry leading, technology platform. We are seeking qualified candidates to join our expanding technology team. Together, you will not only dream up solutions to today's investment challenges, but you will build them to see real-life results. Technology needs are advancing, and this level of complexity requires a highly sophisticated well-managed technology platform that is built by people like you. This is your chance to build something incredible. We want you to think big, to solve challenges, and positively impact our clients.

Job Overview
Our global Infrastructure and Security team is looking for a talented Senior Systems Engineer to engineer, troubleshoot and monitor global Wellington infrastructure, with a strong focus on cyber security, transforming business requirements in viable and secure technical solutions. We operate in a true global, follow-the-sun, fashion - with the strong cross-functional collaboration. In our fast-paced environment, we tend to experiment with different technologies, products and services, always aiming for excellence. We value intellectual curiosity, willingness to speak up and to experiment with new ways of doing things. In this role, you will be encouraged to be creative and to come forward with the new ideas. This role is highly cross-functional and connects Network Security together with Cyber Engineering initiatives.

Responsibilities

• Manage plethora of cyber security products and services in a true multi-vendor and open-source environment.
• Engineer and maintain global scale infrastructure, with a great focus on cyber security aspects.
• Drive regional and global projects initiatives, strongly collaborating with different functional groups.
• Deliver smooth and effective day-to-day security operations.
• Resolve L3 incidents with no to minimal supervision and guidance.
• Closely work with Cyber Defense Team by providing technical expertise with various products, tools and services.
• Automate various IT infrastructure workflows, create re-usable automation tools and solutions.
• Assist with enterprise network and network related security incidents, problems, changes and projects.
• Plan and execute infrastructure security changes with proper anticipation of risk, outage and impact.
• Communicate impact of production issues to other IT teams as well as with other stake holders.
• Produce neat, accurate and well-organized documentation, playbooks, reports and similar documents.
• Available for out of standard working hours activities and calls and weekend shift support.

Non-technical Qualifications

• MSc or BS degree and/or equivalent 7-10 years of work experience in networking and cyber security or IT infrastructure space.
• Strong analytical and investigative skills.
• Ability to self-motivate, often operating independently from co-workers.
• Ability to work with global teams effectively in an energetic and fast-paced environment.
• Excellent written and verbal communication skills, ability to influence senior technical peers and managers.
• Strong intellectual curiosity, aptitude to provide innovative solutions to problems.
• Attentive to detail and self-disciplined.
• Willingness to step out of the comfort zone and constantly improve technical and soft competencies.
• Great sense for emergency and ownership with a customer service mind-set.

Technical Qualifications and skills

• Extensive firewall management (Palo Alto, Algosec) and URL Filtering (Zscaler, BlueCoat).
• Endpoint protection (MS Defender) and EDR (Carbon Black).
• Splunk - ability to analyses logs, write SPL queries, reports and dashboards.
• Strong understanding of WAF and CDN solutions such are Akamai, Cloudflare...
• Strong fundamental knowledge of TCP/IP stack, application protocols (DNS, HTTP, SSL, SNMP, NTP...)
• Multi-Factor Authentication (MFA) technologies.
• Password/secrets management with Cyber Ark, HashiCorp Vault...
• Network Access Control - Clear Pass, Cisco ISE...
• Ability to deeply analyze network traffic using tools like ExtraHop, StealthWatch, Wireshark and similar.
• Understanding of PKI and digital certificate management.
• Experience with enterprise networking vendors such are: Arista, Cisco, Aruba, Infoblox, Viptela... (CCNP to CCIE level).
• Knowledge of SD-WAN and enterprise routing protocols and connectivity concepts.
• User Behavior Analytics skills are desired (Exabeam).
• Understanding of remote-VPN technologies and vendors - F5, AnyConnect, Citrix...
• Exposure to public cloud providers such are AWS and Microsoft Azure.
• Ideally ability to write automation scripts in languages and tools like Python, Bash, PowerShell, Ansible, GIT, Docker, Cloud automation tools...
• Certification from cyber security, cloud and network vendors are desirable: Cisco (CCIE, CCNP Security), Palo Alto (PCSNE), Azure/AWS, SANS/GIAC, Offensive Security...

Not sure you meet 100% of our qualifications? That's ok. If you believe that you could excel in this role, we encourage you to apply and welcome a chance to review your background. We are dedicated to building and maintaining a diversified workforce and considering a broad array of candidates with a variety of skill, workplace experiences, and backgrounds.

As an equal opportunity employer, Wellington Management ensures that all qualified applicants will receive equal consideration for employment without regard to race, color, sex, sexual orientation, gender identity, gender expression, religion, creed, national origin, age, ancestry, disability (physical or mental), medical condition, citizenship, marital status, pregnancy, veteran or military status, genetic information or any other characteristic protected by applicable law . If you are a candidate with a disability, or are assisting a candidate with a disability, and require an accommodation to apply for one of our jobs, please email us at GMCANINQ@wellington.com .