Systems Infrastructure & Network Security Operations Engineer
Role details
Job location
Tech stack
Job description
Your expertise in securely provisioning and managing systems and networking within centralized compute deployments will be critical to success in this role. You will influence quality and security while contributing to business growth. This position requires a strong blend of secure network provisioning, systems automation, and resilient infrastructure design to enhance product quality, security posture, and scalability.
As part of a small, agile team, you will own end-to-end processes-from architecture and Infrastructure-as-Code (IaC) to continuous delivery and incident response-while maintaining accountability and driving innovation.
Core Responsibilities:
Zero-Trust System Design
- Draft, review, and maintain zero-trust SOPs across identity, device, data, and infrastructure.
- Produce reusable reference models mapped to HP's enterprise architecture and expressed as policy-as-code. Impact: Ensures consistent security across environments and enables automated policy enforcement.
Infrastructure-as-Code & Automation
- Extend Net-Sec-Ops pipelines with IaC (Ansible) for firewalls, switches, SD-WAN, and edge fabric.
- Deliver automated, version-controlled playbooks with unit, integration, and compliance tests in CI. Impact: Enables repeatable, auditable, and rapid deployments while reducing manual errors.
Systems Resilience & Disaster Recovery
- Architect and automate backup, failover, and DR workflows for all network devices.
- Conduct recovery drills, validate RTO/RPO against SLA targets, and produce post-mortem runbooks. Impact: Guarantees service availability and protects against catastrophic loss.
Security & Compliance Orchestration
- Integrate vulnerability scanners (Nessus, Qualys), threat-intel feeds, and policy-as-code into CI/CD pipelines.
- Automate remediation playbooks and generate compliance dashboards for SOC/DevSecOps. Impact: Maintains HP's high-security standards across all infrastructure layers.
Network Configuration & Lifecycle Management
- Operate configuration managers to centralize topology, inventory, and device state.
- Enforce change-control gates, audit drift, and maintain traceability from design to production. Impact: Provides a single source of truth and ensures configuration integrity.
Cross-Functional Architecture Governance
- Collaborate with platform, edge, security, and product teams to embed network security into CI/CD and DevOps pipelines.
- Present architecture reviews and maintain traceability matrices. Impact: Aligns infrastructure decisions with business strategy and compliance requirements.
Capacity & Performance Modeling
- Model traffic and compute link utilization; forecast capacity needs using historical data and predictive analytics.
- Deliver capacity-planning reports to product, finance, and data-center stakeholders. Impact: Enables proactive scaling and prevents performance bottlenecks.
Continuous Process & Tool Improvement
- Evaluate emerging trends (intent-based networking, programmable data planes, network observability).
- Propose tool/process changes to reduce manual effort and improve security posture. Impact: Keeps HP's infrastructure world-class and future-proof.
Prototyping & Customer Validation
- Rapidly spin up proof-of-concept environments to test complex customer requests.
- Translate business requirements into secure, performant, and automatable designs. Impact: Aligns customer expectations with technical feasibility and security constraints.
Requirements
Networking:
- 6+ years configuring firewalls, switches, VPNs, VLANs, and traffic load balancing.
- Deep knowledge of L2/L3 protocols (OSPF, BGP, MPLS, VXLAN).
Systems & Infrastructure Engineering:
- Architecture governance (TOGAF/ArchiMate).
- Design documentation, lifecycle management, and change control.
- Infrastructure-as-Code expertise.
Automation & DevOps:
- Proficiency in Python, Ansible, Terraform, Git, Jenkins/GitLab CI.
- Proven CI/CD for network assets, automated testing, and policy-as-code pipelines.
Security & Compliance:
- Vulnerability management, policy-as-code, zero-trust design.
- Certifications such as CISSP, CCSP, or equivalent preferred.
Tools & Platforms:
- VMware vSphere, Proxmox, Linux, Windows, F5, InfoBlox.
- Experience with cloud networking (AWS VPC, Azure VNets).
Soft Skills:
- Strong attention to detail and documentation.
- Excellent stakeholder communication.
- Proactive, self-directed learning mindset.
Education & Credentials:
- Bachelor's degree in Computer Science, Information Technology, or related discipline OR equivalent professional experience.
- Technical cybersecurity certification (SANS, ISACA, CompTIA, Cisco, etc.) preferred.
- Demonstrated hands-on experience with network automation, IaC, and infrastructure-as-code tools.
Benefits & conditions
The pay range for this role is $93,400 to $143,800 USD annually with additional opportunities for pay in the form of bonus and/or equity (applies to United States of America candidates only). Pay varies by work location, job-related knowledge, skills, and experience., HP offers a comprehensive benefits package for this position, including:
- Health insurance
- Dental insurance
- Vision insurance
- Long term/short term disability insurance
- Employee assistance program
- Flexible spending account
- Life insurance
- Generous time off policies, including;
- 4-12 weeks fully paid parental leave based on tenure
- 11 paid holidays
- Additional flexible paid vacation and sick leave (US benefits overview (https://hpbenefits.ce.alight.com/) )
The compensation and benefits information is accurate as of the date of this posting. The Company reserves the right to modify this information at any time, with or without notice, subject to applicable law.
