Hiring and retaining the best security talent around, growing your team and the people on it, and helping guide the technical direction.
Lead the team developing distributed systems to deliver security controls at the network level in Salesforces public cloud. Such solutions cover but are not limited to network policy management, ACLs enforcement, DDoS and network protections.
Lead research and implementation of new networking security solutions and platforms for intra- and cross-cloud network flows
Advance and operate these security scanning platforms in a full DevOps model
Operate in an Agile development environment, including participating in daily scrums
Support the teams engineering excellence by performing code reviews and help setting best software development practices
Partners with other engineering teams and executives to develop short- and long-term security, product and service strategies.
Collaborate with other teams to solve security problems with minimal disruption to other business functions.
Continuous improvement of policies, procedures and technology.
Interact with industry experts, partners, internal staff and auditors.
Work effectively as part of a geographically distributed team.
REQUIRED SKILLS
Industry experience : 17+ years, including:
5+ years experience in SaaS, PaaS or IaaS software development
5+ years experience in a high-availability 24/7 environment
5+ years of experience in public cloud environments (e.g., AWS, GCP, Azure, etc.)
5+ years of experience in developing Network Security Technologies like - Micro-Segmentation, Zero-Trust, Network ACLs, L4/L7 Firewall, WAF, mTLS solutions
2+ years of experience with Service Mesh, Istio, Envoy development and deployment
Management experience. 10+ years of direct people management experience.
Network Security:
Industry-level expertise in L4/Layer 7 Firewall & WAF Development
Expertise in Network security platforms, including segmentation, ACLs, DPI, DDoS protection. Examples include iptables, IPSEC, VPN, IDS, firewall management platforms, ACL compilers and tooling
Network control planes and agents (Calico, Flannel, Contiv, Contrail, OVN)
OSI model and debugging network traffic
Networking protocols (TCP/UDP, BGP, DNS, DHCP)
Datacenter network architecture at software platform and hardware devices (NAT, VXLAN, overlay/underlay)
Network security architectures and implementations in public clouds (e.g., AWS, Azure, GCP)
Platform development. Proven track of developing and delivering large-scale PaaS or IaaS systems, especially for public cloud providers (e.g., AWS, Azure, GCP)
Programming. Proficiency in object-oriented and multi-threaded programming in at least one of the following languages: Golang, Java, C++, Python
Full-software ownership from idea to running in production: design, code, writing unit tests, performing integration tests, deploying to production, supporting the system in the production environments
Operating systems. Development and software management on Linux systems (e.g., CentOS, RHEL)
Security. Strong knowledge in security fundamentals: secure transport (e.g., SSL, TLS), identity management (e.g., certificates, PKI)
DevOps mindset and strong ownership over owned code (test, monitor, deploy, maintain)
Communication. Excellent oral and written communication skills
Team. Ability to value team success beyond personal contributions
Experience designing and operating network security technologies within public cloud environments.
Strong distributed systems and architecture knowledge.
Understanding of risks that can manifest in larger scale complex systems.
