Sr. Systems Engineer – Cloud Security

Job Number

Job Category Information Technology

Location Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States

Schedule Full-Time

Located Remotely? Y

Relocation? N

Position Type Management

Job Summary

The Sr. Systems Engineer ensures that stability, integrity, and efficient security operations that support core customer and enterprise facing products and platforms, reporting to the Director of Infrastructure, Cloud and DevSecOps Security & Compliance. The role will be accountable for partnering with Global Information Security and teams across the public and private cloud, on-premises, and hotel properties to remediate security vulnerabilities and develop risk treatment plans. The candidate will identify gaps in server and cloud environments and develop strategies for remediations at scale to reduce risk exposure. Serves as a subject matter expert in remediating security issues and risks that may arise working closely with other Cloud Operations, Cloud Engineering, Application, Network, and Security Architecture to converge cloud footprints into an enterprise-grade public cloud for applications.

Candidate Profile

Education and Experience

Required:

• Undergraduate degree in an engineering or computer science discipline and/or equivalent experience/certification
• 7+ years experience in information technology with technical skills:
• 5+ years Linux/windows experience
• 5+ years experience in Cloud technologies including Iaas/Paas/Saas deployments on Public Cloud
• 5+ years experience in OS scripting and automation
• 3+ years professional experience in Infrastructure as a Service (IaaS) modeling including infrastructure as code development (Terraform or similar) or infrastructure engineering at enterprise scale
• 3+ years professional experience in automated configuration management (Chef, Puppet, Ansible)
• 3+ years professional experience with cloud computing technology and its concepts (AWS, Azure, GCP) and/or virtualized (VMWare, OpenStack)
• 2+ years professional experience in container operations (Docker, OpenShift Enterprise, GKE, ECS) and orchestration (Docker Swarm, Kubernetes)
• 5+ years Linux and Windows system administration
• Experience operating in an agile scrum environment.
• Delivery focused with experience to deliver incrementally at a fast pace in 2-week sprints

Additional Preferred Experiences:

• DevOps Engineer developing pipelines, administering Kubernetes, and creating and hardening containers using Dockerfile
• Experience with Security Protocols (SSL, SAML, SAMP, LDAP etc.) and controls (container scanning, log aggregation, network scanning, CVE)
• Experience in one or more of the following: C, C++, Java, Python, Go, Perl, or Ruby
• Experience in designing, analyzing, and engineering large-scale distributed systems
• Experience in the design, implementation and operational support of mission critical solutions
• Demonstrated experience delivering technology solutions in a fast-paced, deadline driven enterprise environment
• Demonstrated experience learning and applying new technologies to solve business needs
• Excellent problem-solving skills working independently and through leading outcomes for cross functional teams
• Excellent understanding of change management, testing requirements, techniques, and tools to ensure high availability of systems
• Strong attention to detail with an ability to operate effectively across multiple priorities
• Experience across many of the following platforms:
• Container platforms (Examples: OpenShift, Docker, Kubernetes, GKE)
• Operating Systems: Red Hat Enterprise Linux, Oracle Linux, Windows, CentOS
• Storage: Block Storage, Object Storage, Lifecycle Management and Data Replication, Backup & Recovery Best Practices
• Network Virtualization: Akamai Global Traffic Management and Edge & Delivery Networks, Elastic Load Balancing Services,
• Domain Name Services and Registration
• Security: Compliance, Information Assurance, Data Protection using industry-best practices and tooling (Crowdstrike Falcon, , Splunk, HashiCorp Vault signers, PKI and Certificate Management)
• Applications Frameworks: Java Spring, , NginX, JavaEE, HTML5
• Cloud security patterns: Rehydration, landing zone, ingress/egress traffic management
• Database: Relational (Oracle, MySQL/MariaDB, PostgreSQL, MSSQL Server), non-relational (Cassandra, Couchbase, MongoDB)
• Requirement gathering, validation, fulfillment and change management
• Infrastructure operations experience including self-healing autonomy
• Provide functional, technical, and/or process leadership, or Project Management experience
• Strong knowledge of emerging tools, software, applications, and systems for attaining best-in-class IT technology across the enterprise
• Experience in researching emerging technologies and trends, standards, and products
• Experience in developing technology roadmaps and strategies
• Excellent verbal and written communication skills for a wide range of audiences including executives, business stakeholders and IT teams
• Understanding of automated ITCM/ITRM best practices
• Experience operating in Scaled Agile Framework

CORE WORK ACTIVITIES

• Provides technical leadership, oversight, governance and direction for services related to Marriott solution delivery
• Provides technical expertise to project team for successful project and change implementations
• Determines customer requirements and works with sourced resources to develop solutions
• Leads analysis of current environment for deficiencies and provides solutions
• Provides input into lifecycle, improvement, and standardization strategies
• Utilize capacity data to model future state planning with overall strategy and goals
• Provides and presents status, analysis and reporting to internal stakeholders, Executive Management and Senior Leadership
• Trains and/or mentors other team members, and peers as appropriate
• Identifies opportunities to enhance the service delivery, operations and continual service improvement processes
• Develop implementation plans, test plans, and timelines for projects and tasks
• Responsible for project inception including requirements gathering and architecting, costs and chargeback modeling, infrastructure-as-code development and configuration management
• Work with Enterprise Architecture to provide technology and cloud native service governance for technology steering committees, with cost and support directives
• Promote Marriott International Cloud Platform capabilities including Cloud Native Services for cost effective solutions against architecture
• Promote Containers-as-a-Service Kubernetes methodologies for orchestrated scheduling of portable containers across global cloud platforms
• Monitor and drive industry best practice Continuous Delivery principals for improvement of application and feature deployment velocity with minimal downtime
• Work with MI Security for governance and application of Tier0/1 Security tooling across the entire fleet of cloud virtual machines including automated OS, access, log, DDOS and code monitoring and auditing
• Own relationships with tooling and Cloud vendors including Red Hat, Docker, Amazon, Microsoft, Ali Cloud
• Coordination between onshore/offshore engineering and operations teams; handover and acceptance of L1/2 shared services Ops

Delivering Technology

• Create and enhance administrative, operational and technical policies and procedures, adopting best practice guidelines, standards and procedures for employees, contractors and vendor engagements
• Maintains a proper balance between business and operational risk
• Interfaces with stakeholders to establish requirements and formulate priorities for infrastructure projects
• Leads/assists in configuration management
• Works in a concerted effort with application development and engineering teams to resolve complex issues
• Provides oversight, collaboration, provisioning, management and maintenance of technology products and service alternatives that improve the production services environment
• Performs complex quantitative and qualitative analyses for operational availability to promote a zero-defect environment
• Facilitates achievement of expected deliverables and obligations of Services Providers
• Leads/assists operational teams in system updates & upgrades
• Provides consultation for routine and complex systems development

Managing Projects and Priorities

• Functions as a strategic senior technical expert within the department.
• Develops specific goals and plans to prioritize, organize, and accomplish work.
• Champions leaders' vision for product and service delivery.
• Makes and executes the necessary decisions to keep moving forward toward achievement of goals.
• Provides direction and assistance to other teams regarding projects.
• Determines priorities, schedules, plans and necessary resources to promote completion of any projects on schedule.
• Analyzes information and evaluates results to choose the best solution and solve problems.
• Reviews vendor proposals and selects appropriate vendor for services/technologies/hardware.
• Thinks creatively and practically to develop, execute and implement new project plans.
• Generates and provides accurate and timely results in the form of reports, presentations, etc.
• Plans, develops, implements, and evaluates the quality of operations.

Delivering on the Needs of Key Stakeholders

• Understands and meets the needs of key stakeholders.
• Communicates concepts in a clear and persuasive manner that is easy to understand.
• Demonstrates an understanding of business priorities.
• Supports achievement of performance goals, budget goals, team goals, etc.

Providing Technical Support and Consultation

• Provides technical expertise and technical leadership within own and other teams.
• Provides recommendations to improve the effectiveness of processes and programs.
• Demonstrates advanced knowledge of job-relevant issues, products, systems, and processes.
• Demonstrates advanced knowledge of function-specific procedures.
• Applies knowledge/judgment to achieve business goals.
• Foresees, identifies and resolves problems.
• Keeps up-to-date technically and applies new knowledge to job.
• Performs other reasonable duties as required for this position.

California Applicants Only: The salary range for this position is $96,038.00 to $209,169.00 annually.

Colorado Applicants Only: The salary range for this position is $96,038.00 to $190,154.00 annually.

Hawaii Applicants Only: The salary range for this position is $116,205.00 to $209,169.00 annually.

New York Applicants Only: The salary range for this position is $96,038.00 to $209,169.00 annually.

Washington Applicants Only: The salary range for this position is $96,038.00 to $209,169.00 annually. In addition to the annual salary, the position will be eligible to receive an annual bonus. Employees will accrue PTO balance for every hour worked and eligible to receive minimum of 7 holidays annually.

All locations offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave, educational assistance, 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts. Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others.

Marriott HQ is committed to a hybrid work environment that enables associates to Be connected. Headquarters-based positions are considered hybrid, for candidates within a commuting distance to Bethesda, MD; candidates outside of commuting distance to Bethesda, MD will be considered for Remote positions.

The application deadline for this position is 28 days after the date of this posting, 4/8/2024.

Marriott International is an equal opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.

Marriott International is the world's largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed. Be where you can do your best work,​ begin your purpose, belong to an amazing global​ team, and become the best version of you.