Principal Infrastructure Security Architect - Demandbase San Francisco, CA, USA Bookmark Share Print 222 0 4

Listing Description

Demandbase, a leading SaaS-based B2B marketing technology company and San Francisco Business Times #5 Best Places to Work, is looking for more inspired and driven people to join us in our downtown San Francisco office. With a roster of dedicated, blue-chip customers that’s growing every day, we’re in a phase of tremendous growth and establishing the team that will take us to the next level. As a company, we’re as committed to growing careers as we are to building world-class B2B marketing technology, all while enjoying an unparalleled work-life balance.

We are looking for a developer who, at some point along the way, became interested in security and infrastructure? If continuous integration and deployment jazz you, and you are obsessive about eliminating security risks within environments, then you may be a good fit for this new exciting role!

Here at Demandbase, we are sitting on arguably the largest business dataset in the word. We run a variety of applications (Ruby, Python, NodeJS, and Java/Scala) and data pipelines across multiple public clouds using a mix of Chef for configuration management, Docker for containers while leveraging Rancher and Kubernetes for container orchestration, and Hadoop/EMR/Qubole for data pipelines. So the question yet to be answered and your task to figure out is, how do we make this the most flexible yet secure platform available for our customers?

The technical skillset we’re looking for:

* 3-5 years’ of architecture, security, and design experience, preferably at an Advertising or Marketing SaaS company, with a focus on:

- AWS services such as IAM, Config, Cloudwatch, CloudTrail, GuardDuty, Inspector, EC2, S3, EBS, VPC and KMS

- Google Cloud Platform services such IAM, GKE, GCE, BigQuery, VPC and Network Security, Stackdriver, BigTable, and

Storage

* DevOps or Infrastructure-as-Code model (12 Factor App model) leveraging CI/CD tools such as Jenkins, CloudFormation, DockerHub, AWS ECR as well as container orchestration and automation deployment tools (Rancher, Kubernetes, ECS, EKS, Chef, Ansible)

* Security frameworks – CIS or NIST

* Servers and Containers (Containers, Linux, Windows)

* Networking (OSI Model, TCP/IP, DNS, Security Groups, Firewalls, VPC, VPN)

Other experience that we consider key to success:

* 3+ years of demonstrated security experience in a combination of technical engineering, architect, leads, or enterprise cloud roles

* 2 + years' of demonstrated experience in cloud security (experience with AWS or GCP IaaS cloud desired)

* Proven experience with deploying and managing various security technologies

* Hands on experience with Linux/UNIX and Windows operating systems

* Experience with security standards such as CIS and/or NIST

* Experience with compliance requirements such as SSAE16 SOC2, ISO27001/2, ISO27017/18

* Knowledge of GDPR

* Proven experience with creation of technical diagrams and documentation

* Ability to establish priorities, work independently and proceed with objectives

* Strong motivation and desire to learn

* Strong communication skills to work with both collaborative cross-functional team of peers and departments within the company

Working closely with engineers to identify and mitigate risks, perform security reviews, design top tier security practices, and deliver strategic, innovative cloud-based security offerings

Performing deep analysis and develop metrics that measure the cloud risks

Integrating complex design elements and customer requirements into modern technical architectures

Documenting secure architecture and infrastructure design strategies for cloud solutions

Understanding client requirements and presenting appropriate architectural options