Jobs for People with MS: National MS Society

Introduction

The IBM Automation Network Management team are building Hybrid Cloud solutions that are safe, efficient, and capable of handling the most complex security challenges. We’re looking for a passionate Software Engineer with expertise in Zero Trust Networking to join our dynamic team.

We are looking for an experienced and proactive Software Engineer who is well-versed in Zero Trust principles, DNS, and modern security practices. You will work closely with our engineering teams to design, implement, and maintain systems that provide secure access to critical applications and services, eliminating traditional network security models in favor of a Zero Trust approach.

Your role and responsibilities

As part of our team, you will:

• Design & Develop: Architect and develop software solutions integrating HashiCorp Boundary into new software products focused on Zero Trust principles, ensuring secure, identity-based access to sensitive resources.

• Collaborate: Work cross-functionally with other software engineers, DevOps, and security teams to build security-centric DNS solutions.

• Enhance Security: Develop and maintain features that protect sensitive data and ensure compliance with industry standards and regulations.

• Monitor & Improve: Identify areas of improvement in existing infrastructure and develop strategies to enhance the security posture of our applications, infrastructure, and services.

• Research & Innovation: Stay current with the latest trends in Zero Trust networking, access management, and cloud security, and apply new methodologies and tools to improve the architecture and design of our systems.

Required technical and professional expertise

• Strong knowledge of secure access protocols such as mTLS, TCP, SSH, and RDP.

• Knowledge of DNS protocol

• Familiarity with network security, including encryption (TLS, SSL), VPNs, proxies, and firewall configurations.

• Solid understanding of Zero Trust networking principles, including identity-based access control, least-privilege access, and continuous monitoring.

• Experience with IAM (Identity and Access Management), authentication protocols (OAuth2, OpenID Connect, SAML), and integration of these into security models.

• Familiarity with dynamic secrets management and certificate management.

• 3 years programming in Go and/or Python

• 3 years experience with docker and micro service orchestration

• Experience designing and operating distributed systems

• Strong communication skills and the ability to work collaboratively across cross-functional teams.

• Willingness to participate in on-call rotation

Preferred technical and professional experience

• Strong experience with HashiCorp Boundary and its implementation in a production environment.

• Experience with HashiCorp Vault, Consul, or Terraform.

• Knowledge of Kubernetes, Docker, and containerized environments.

• Familiarity with SOC 2, GDPR, or other industry security standards and compliance frameworks.