Apply on Employer Site

Fidelity Investments · 1 week ago

Senior Systems Engineer (Cybersecurity)

Roanoke, TX

Full-time

Hybrid

Senior Level

6+ years exp

Fidelity Investments is seeking a Senior Systems Engineer specializing in Cybersecurity to join their Digital Asset Security Operations team. The role involves designing, building, and supporting cybersecurity solutions for cryptocurrency infrastructure, with a focus on cryptographic processes and tools.

Asset ManagementFinanceFinancial ServicesRetirementWealth Management

Growth Opportunities

No H1B

Responsibilities

Make an immediate impact and demonstrate curiosity to learn

Take ownership of projects and thrive by sharing knowledge

Design, build, and support critical solutions for Fidelity cryptocurrency infrastructure

Implement and support APIs, Key management & Encryption products, and solutions

Manage Kubernetes namespaces, RBAC policies, service accounts

Deploy and maintain container workloads with high scalability and resiliency across multiple environments (dev/stage/prod)

Enforce Kubernetes security best practices, including pod security standards, network policies, secrets management

Develop scripting and automation solutions to simplify EKS cluster maintenance and monitoring

Participate in on-call rotations, incident response, and root-cause analysis for production systems

Perform routine tasks of Incident, change and release management work in ongoing operations support

Perform systems security engineering work including designing/recommending new controls implementations

Define, implement, and support authentication, authorization, monitoring, policy enforcement, access control and other security controls

Qualification

CryptographyKubernetesAPI ManagementHardware Security ModulesContainer OrchestrationCI/CDScripting AutomationCuriosityInnovative ThinkingCollaboration

Required

Bachelor's degree in computer science or equivalent technology discipline

6+ years of experience in a distributed IT Engineering and/or support function

2+ years of experience with implementing and supporting APIs, Key management & Encryption products, and solutions

2+ years of hands-on experience in Kubernetes and container orchestration

Self-starter, curious, collaborative, innovative, eager to learn

Understanding of Cryptography/encryption concepts, methods, and processes

Provision and manage Kubernetes namespaces, RBAC policies, service accounts

Deploy and maintain container workloads with high scalability and resiliency across multiple environments (dev/stage/prod)

Enforce Kubernetes security best practices, including pod security standards, network policies, secrets management

Develop scripting and automation solutions to simplify EKS cluster maintenance and monitoring

Strong working knowledge of OS (Linux and Windows) from security point of view (configuration, hardening etc.)

Knowledge of deploying and managing APIs, and automation/scripting (Python/Bash, PowerShell etc.)

Hands-on experience in CI/CD and configuration management systems such as Github, Jenkins and Artifactory

Participate in on-call rotations, incident response, and root-cause analysis for production systems

Performing routine tasks of Incident, change and release management work in on-going operations support including source code control, build and deployment automation, configuration and change management, performing monitoring and log integration, server, and network security access control for cryptocurrency projects

Performing systems security engineering work including designing/recommending new controls implementations, executing proof of concepts, researching new solutions for emerging threats and developing process improvements to improve cybersecurity controls

Defining, implementing, and supporting authentication, authorization, monitoring, policy enforcement, access control and other security controls at server, system, network, and process levels for the production systems in cryptocurrency environment