Senior Systems Engineer (Cybersecurity)

Note: Fidelity will not provide immigration sponsorship for this position

This role offers tremendous exposure to industry leading Cryptographic processes & practices, hands-on exposure to Hardware Security Modules, exposure to Blockchain/Digital Currencies, and leading systems monitoring tools & technologies.

We are looking for a new team member who can make an immediate impact and who demonstrates curiosity to learn, is willing to step up and take ownership of their projects and thrive by sharing knowledge. You will be part of a highly talented Cybersecurity Dev/Ops team that designs, builds, and supports critical solutions for Fidelity cryptocurrency infrastructure.

The Expertise You Have and The Skills You Bring

• Bachelor's degree in computer science or equivalent technology discipline

• 6+ years of experience in a distributed IT Engineering and/or support function

• 2+ years of experience with implementing and supporting APIs, Key management & Encryption products, and solutions.

• 2+ years of hands-on experience in Kubernetes and container orchestration.

• Working specifically with Amazon EKS in production a plus

• Self-starter, curious, collaborative, innovative, eager to learn.

• Understanding of Cryptography/encryption concepts, methods, and processes.

• Provision and manage Kubernetes namespaces, RBAC policies, service accounts.

• Deploy and maintain container workloads with high scalability and resiliency across multiple environments (dev/stage/prod)

• Enforce Kubernetes security best practices, including pod security standards, network policies, secrets management.

• Develop scripting and automation solutions to simplify EKS cluster maintenance and monitoring.

• Strong working knowledge of OS (Linux and Windows) from security point of view (configuration, hardening etc.).

• Knowledge of deploying and managing APIs, and automation/scripting (Python/Bash, PowerShell etc.).

• Hands-on experience in CI/CD and configuration management systems such as Github, Jenkins and Artifactory

• Hands on experience with Hardware Security Modules (HSM) for key management is highly desired.

• Participate in on-call rotations, incident response, and root-cause analysis for production systems.

• Performing routine tasks of Incident, change and release management work in on-going operations support including source code control, build and deployment automation, configuration and change management, performing monitoring and log integration, server, and network security access control for cryptocurrency projects.

• Performing systems security engineering work including designing/recommending new controls implementations, executing proof of concepts, researching new solutions for emerging threats and developing process improvements to improve cybersecurity controls

• Defining, implementing, and supporting authentication, authorization, monitoring, policy enforcement, access control and other security controls at server, system, network, and process levels for the production systems in cryptocurrency environment

The Team

The Digital Asset Security Operations team within Fidelity Enterprise Cybersecurity (ECS) group provides cybersecurity security engineering and operational support for mission critical systems that provide cryptocurrency and blockchain related products and services. This role will interact with other members of the cybersecurity team as well as the Risk and Development team of our business partners.

Most roles at Fidelity are Hybrid, requiring associates to work onsite every other week (all business days, M-F) in a Fidelity office. This does not apply to Remote or fully Onsite roles.

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.