Senior/Lead Cloud EngineerSalesforce has one of the best Information Security teams in the world and growing this piece of the business is a top priority! Trust and security are Salesforce’s number one value as a company. As a result, we have built a large-scale security monitoring infrastructure that collects, stores, and analyzes terabytes of data every day. The Security Systems Engineer will ensure the 24x7 availability of this infrastructure, supporting the rest of the team in their mission to detect and respond to security incidents. We are the ‘tip of the spear’ and the last line of defense protecting company and customer data from our adversaries.
We are looking for an individual contributor that wants to leverage their existing network security, system administration, operations, and scripting/development skills and take it to the next level in a world-class security environment. Salesforce collects, stores, and analyzes vast troves of security related data to support our incident response, security analytics, and threat intelligence teams. You will help us to do this better than ever.
Responsibilities:
- Deploying large scale distributed systems in the public cloud including multi region and multi cloud deployments.
- Design, Installation, operation, monitoring, and troubleshooting of our security monitoring infrastructure.
- Rapid response to security monitoring infrastructure outages or degradation of service.
- Troubleshoot network, hardware, operating system issues/bottlenecks.
- Root-cause analysis across multiple systems in a highly distributed global environment.
- Build and improve our automation for deployment and maintenance.
- Monitor metrics and expand on areas of improvement.
Required skills:
- Experience with Public Cloud and supporting systems deployment, configuration management and application installations within the AWS (EKS, S3, VPC, IAM, EC2, SQS ), GCP and/or Azure core services
- 3 or more years in Linux systems engineering/operations in a DevOps environment
- Experience scripting/coding skills (i.e. Go, Python, Ruby, Shell scripting) for automation
- Network devices configuration management. From Switches, firewalls and Routers to Public Cloud networking (Security Groups, ELB, VPC, VPC Flow Logs, Route53)
- Experience Configuration Management tools like Puppet, Helm, Ansible or Chef
- Knowledge of infrastructure as code tools like Terraform, Cloud formation or Pulumi
- CI/CD pipelines setup and tune up
- Expert in deploying and troubleshooting modern Linux operating systems
- Proficient in network troubleshooting
- Ability to work as part of a globally distributed team
- Must have strong verbal and written communication skills, especially for documentation purposes
Desired skills:
- Ability to deliver Agile projects and understanding of SCRUM ceremonies/practices
- DevOps experience with skill sets in containers, microservices, Kubernetes, and cloud-native apps
- Large scale systems management experience
- Network Packet Broker configuration
- Familiarity with log analysis tools (i.e. Splunk or Kibana)
- Up-to-date on the latest industry trends; able to articulate trends and potential clearly and confidently
- Knowledge in network packet analysis with experience using tools such as Suricata and Zeek (Bro)
