Note: The job is a remote job and is open to candidates in USA. Kraken is a mission-focused company rooted in crypto values, seeking to accelerate global adoption of crypto. The Network Engineer role within Core Infrastructure Engineering is critical for managing the network infrastructure of one of the leading cryptocurrency exchanges, requiring a dynamic and innovative self-starter to solve complex problems sustainably.

Responsibilities

• Implement and evolve enterprise network access controls
• Manage and deploy "infrastructure as code" at scale
• Contribute to the design, implementation, management, and defense of a “zero trust”, defense-in-depth network
• Write good quality policies, procedures, and technical documentation
• Coordinate with internal development teams and other stakeholders to ensure network security principles are "built-in" from the beginning
• Work with Engineering and IT Security teams to ensure that product features are securely deployed and monitored
• Monitor and maintain all physical infrastructure (network, security, and compute), cloud data center environments, remote office locations, and respond to critical network problems to maximize service uptime
• Mentor and evangelize security practices through cross-functional work with internal stakeholders and teams

Skills

• 4+ years of network engineering background including offensive/defensive security
• Deep experience in public (AWS or Azure or Google), private and/or hybrid cloud infrastructure
• Experience of network automation tools (e.g. Nornir, Napalm, Terraform, Ansible)
• Experience in managing and deploying Infrastructure as Code
• Experience with network security management tools and techniques
• Familiarity with security testing tools (performance and threat-based)
• Proficient in network and security design, implementation, and administration leveraging industry standard platforms from vendors such as: Palo Alto Networks, Cisco, Juniper, and Aruba
• Experience with Switching (Capacity Planning & VLAN's), Routing (OSPF, EIGRP, BGP, ECMP, PBF), WAN Technologies (MPLS, VPLS, VPN), public cloud networking, and Security (IPS, RBAC, etc.)
• Previous experience monitoring and management of intrusion detection systems and firewall devices
• Demonstrated experience implementing defensive security systems that are used against internal and external attack vectors

Company Overview

Company H1B Sponsorship