Apply on Employer Site

Walmart Canada · 1 month ago

Principal, Systems and Infrastructure Engineer, Information Security

Bentonville, AR

Full-time

Onsite

Senior Level, Lead/Staff

$110K/yr - $220K/yr

5+ years exp

Walmart Canada is dedicated to innovation and data security, focusing on maintaining a secure operating environment. The Principal, Systems and Infrastructure Engineer, Information Security will design and develop solutions to secure IoT/OT systems, while collaborating with teams to ensure compliance and security across various systems and devices.

DeliveryRetailShopping

Responsibilities

Research, design, test, and document IoT/OT solution patterns to integrate with current and future solutions sets

Implement security controls and best practices for IoT/OT systems and devices, such as encryption, authentication, authorization, logging, patching, etc

Collaborate with vulnerability assessment and penetration testing teams to identify risks, findings, and remediations across the IoT/OT landscape

Collaborate with other teams and stakeholders to ensure the security and compliance of IoT/OT systems/devices, and provide training and awareness as needed

Stay updated on the latest trends and developments in IoT/OT security and evaluate and recommend new technologies and solutions

Perform protocol aware traffic analysis (Modbus, DNP3, OPC UA, FOX)

Qualification

IoT/OT securityIoT/OT protocolsSecurity certificationsOT environmentsSecurity toolsCloud technologiesComputer languagesArchitecture designAnalytical skillsProblem-solving skillsCommunication skillsTeamworkAdaptability

Required

Bachelor's degree in Computer Science, Engineering, or related field, or equivalent work experience

Relevant certifications such as IEC 62443, CISSP, GICSP, etc…

10+ years of experience in IoT/OT security, system operations, or related field

Experience with IoT/OT protocols such as Modbus, Bacnet, FOX, MQTT, CoAP, OPC UA, Azure IoT, etc

Experience with IoT/OT devices, sensors, and hardware, such as IoT single-board computers, PLCs, RTUs, etc

Experience with OT environments including ICS and SCADA systems (GE, ABB, Siemens, Schneider Electric, Honeywell, Emerson, etc…)

Experience with security tools and frameworks, such as Wireshark, Nmap, Metasploit, Burp Suite, OWASP, etc

Experience with computer languages and configurations, such as Python, Powershell, Bash, Terraform, YAML, SQL, etc

Experience deploying, tuning, and integrating OT IDS tools (Armis, Claroty, Dragos, Nozomi, Defender for IoT, etc)

Familiar with using artificial intelligence for scripting and code development

Familiar with CI/CD pipeline to maintain solutions and integrations

Familiar with OT/IoT architecture security design and review for OT/IoT systems

Experience with cloud and network technologies, such as GCP, BigQuery, Kubernetes, Azure, TCP/IP, VPN, etc

Background & experience with security regulations and standards, such as IEC 62443, NIST 800-82, NERC-CIP, TSA Security Directives, ISO, HIPPA, PCI, etc

Strong analytical, problem-solving, and communication skills

Architecture & Solution pattern development skillsets in complex environments

Ability to work independently and as part of a team

Ability to learn new technologies and skills quickly

Familiar with OT/IoT threat actors and their techniques

Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 5 years' experience in systems and infrastructure engineering or related area at a technology, retail, or data-driven company

Option 2: 7 years' experience in systems and infrastructure engineering or related area at a technology, retail, or data-driven company

Preferred

Certification in Security+, GISF, CISSP, CCSP, or GSEC

Master's degree in computer science, information technology, engineering, information systems, cybersecurity or related area and 3 years' experience leading information security or cybersecurity projects

Background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly

Knowledge of accessibility best practices