Cloud Security Engineer

Description

Experience GuideStone!

We are an innovative organization that invests in the spiritual, relational, financial, physical and professional development of our employees. We have a culture that values excellence, teamwork, humility, integrity, compassion and stewardship.

 

What We Offer You!

We offer employees a generous benefits package, flexible work schedules, the opportunity to be involved in community outreach and tuition reimbursement.

 

 

Job Summary

Supports the Information Technology needs of GuideStone and end-users by providing a secure and robust network infrastructure to support the daily operations and development of our enterprise systems, telephony and applications in GuideStone’s cloud and on-premise environments.  This position is critical to building and maintaining a stable and secure computing environment for our various lines of business and systems designed to interact with employees and our participants.

 

What You'll Do

• Lead the architecture and implementation of physical and cloud enterprise network and security projects.

• Identify physical and cloud network and security gaps and set standards for desired state configuration.

• Work closely with DevOps platform as well as IT Infrastructure and Development teams to engineer and orchestrate cloud security controls with a focus on DevSecOps.

• Develop business-driven security strategies integrated into continuous delivery workflows.

• Implement a tools driven and automated approach to deliver network and security management processes.

• Develop pro-active cyber security capabilities (threat/attack modeling and assessment, vulnerability assessment and penetration testing).

• Maintain, monitor and document all physical and cloud enterprise network devices, services and security configurations including firewalls, load balancers, routers, switches, wireless and VPN.

• Maintain and monitor secure and functional user device and systems access to all internal, external and cloud-based enterprise network resources.

• Respond to and, where appropriate, resolve escalated security incidents.

• Maintain and document current disaster recovery solutions.

• General support duties (scripting, automation, 3rd level support on client/server issues).

 

What You'll Need

• Bachelor’s Degree in Information Systems, Computer Science, or related field preferred.

• Professional certifications in CCNP, JNCIP, SANS GIAC (GPPA, GCIA), MCSA, or MCSE are highly desirable.

• 5+ years of experience in Microsoft Windows Server and Client Operating Systems, TCP/IP, LAN/WAN, WLAN, and network/routing protocols, including BGP, OSPF, VLANs, DHCP, DNS, and firewalls.

• Proven expertise in cloud infrastructure, software-defined networking (IaaS, PaaS, SDN), and virtualization technologies, with practical experience in PowerShell, Bicep, Python, Ansible, or similar scripting/automation tools.

• Strong knowledge in cybersecurity, including intrusion detection/prevention systems, PKI/SSL certificate management, firewall configuration, DDoS protection, and compliance with SEC/HIPAA regulations.

• Experience with load balancing technologies (Azure, F5, A10), Single Sign-On (SSO) implementation, Kubernetes, Docker, and Linux command line operations.