Sr Staff, InfoSec Engineer - InfraSec

About the Role

We are hiring a highly skilled and experienced Senior Infrastructure Security Engineer. In this role, you will be responsible for designing, implementing, and maintaining the security posture of our network and cloud infrastructure. You will play a key role in identifying and mitigating security risks, ensuring compliance with industry best practices and regulations, and driving continuous improvement in our security operations. You will be a subject matter expert, mentoring junior engineers, and collaborating with cross-functional teams to deliver secure and reliable infrastructure solutions.

What You'll Do

1. Provide infrastructure security design and implementation, delivering robust security controls for cloud (Azure, GCP, OCI), on-premises, and hybrid infrastructure environments.
2. Develop and maintain infrastructure security architecture diagrams and documentation.
3. Configure and manage security tools and technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), Network Access Controls (NAC), VPN & Zero Trust Network Access.
4. Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, NIST, SOC 2, PCI DSS). Participate in security audits and assessments.
5. Build strong relationships with product and engineering teams within Gap Inc to ensure security is integrated from the outset.
6. Develop, enforce, and maintain security policies and standards.
7. Assess and communicate potential security risks, making recommendations to stakeholders and leadership. Collaborate with other Infosec teams to incorporate feedback early in the product lifecycle.
8. Stay current with security trends, emerging threats, and develop deep industry expertise to keep the company's applications and data secure.

Who You Are

1. Experience: Senior Infrastructure Security Engineer with 5+ years of experience as a security engineer.
2. Strong technical knowledge of modern network and cloud security platforms such as Palo Alto NGF & PRISMA, ClearPass, VPN, SD-WAN, ZTNA, and cloud security technologies like Azure and GCP (AFW, AppGW, Cloud Armor).
3. Experience with modern compute architectures such as Docker/Kubernetes and Serverless.
4. Experience with security automation, orchestration, and infrastructure-as-code (IaC) tools like Terraform, ARM, and cloud IaaS/PaaS automation.
5. Skills: Excellent problem-solving skills, effective communication, ability to prioritize, and quick understanding of technical solutions and business processes. Strong negotiation skills for influencing decisions with architects and business leads.
6. Education: Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.