Senior Network Security & Services Architect - CTO Office

Details

The CTO Network Platform and Architecture team develops and evolves a robust, scalable, secure, visible, and programmable network supporting multiple lines of business across the Bloomberg platform. The network encompasses Internet access, private and hybrid clouds, metro and wide area networks, customer premises, and the Bloomberg enterprise.

The team conducts research and development in software-defined networking (SDN), secure application connectivity, network infrastructure, network function softwarization, network security, automation, and network insights.

This role focuses on network security and services, including defining the network security architecture and platform, underlying technologies, management, control, visibility, and automation. The role involves exploring new technologies, developing proofs of concept, and partnering with application and engineering teams to select and implement production solutions across data centers, private cloud, WAN, public cloud, and the Bloomberg Enterprise.

Responsibilities

• Collaborate with network security engineering teams and CSOC to assess the technology stack and proactively identify and address gaps in the network security posture based on known and emerging threats, trends, and the evolving AI landscape.
• Evolve a zero-trust network security architecture for applications and users.
• Develop a scalable, agile, visible, and robust network edge security architecture protecting infrastructure, data, services, and customers.
• Leverage best-of-breed network security products and services and system-level architectures for network services and functions.
• Define and develop managed network security products in collaboration with engineering teams, such as proxy-as-a-service solutions for application teams.
• Research network security technologies and solutions, develop proofs of concept, and drive solutions into production.
• Develop and implement strategy and roadmaps.

Requirements

• Bachelor's degree in Computer Science, Electrical Engineering, Cybersecurity, or a related field; a graduate degree is preferred.
• 7+ years of experience at a Tier 1 carrier, large enterprise, cloud provider, hyperscaler, and/or content provider working with network perimeter security and services.
• Experience with global load balancing, DNS, east-west network security, frontend and backend load balancing, and proxies in Kubernetes and OpenStack environments.
• Knowledge of industry best practices and security frameworks.
• Working knowledge of:
  • Physical and virtual, or softwarized, L3/L4-L7 load balancers and proxies, including F5, HAProxy, NGINX, and Envoy.
  • DDoS detection and mitigation.
  • L3/L4-L7 firewalls, WAF, IDS/IPS, and network DLP.
  • Threat detection and mitigation.
  • DNS, DNSSEC, and service discovery.
  • Network function virtualization and softwarization.
  • OpenStack and Kubernetes, with a focus on SDN and associated network security.
  • Identity-based authentication and authorization.
  • Zero-trust networking.
  • BGP routing and familiarity with L3 BGP/MPLS VPNs.
• Solid understanding and working experience with modern, large-scale, resilient software and system architectures applied to network functions within the scope of the role.
• Strong communication skills and a collaborative attitude.

Preferred Qualifications

• Knowledge of and ability to drive data modeling, automation, and control for services within the role's scope.
• Product management and leadership experience.
• Public cloud networking and network security knowledge or experience.
• Experience with IP address management frameworks and tools.
• Experience with modern AI-empowered SIEM and SOAR.
• Experience with Terraform and Ansible.

Benefits

The salary range is $240,000-$330,000 USD annually, plus benefits and bonus. Benefits may include merit increases, incentive compensation for exempt roles, paid holidays, paid time off, medical, dental, vision, short- and long-term disability benefits, 401(k) matching, life insurance, and wellness programs. Actual compensation may vary based on geographic location, work experience, market conditions, education, training, and skill level.