openqareer

Infrastructure Security Engineer

LanceSoft Inc · Manila

# Infrastructure Security Engineer **LanceSoft Inc** · Manila · `On-site` 🕒 **Статус:** *Опубликовано: сегодня* · *Источник: Indeed* --- ### About the Role Role Name - Solution/Security/Infra Location: Manila/Cebu Full Time Shifting Scheudule Job description: Role Overview: We are seeking an Infrastructure & Security Solutions Specialist to design, secure, and maintain resilient, enterprise-grade cloud and hybrid IT environments. This role sits at the intersection of Infrastructure Architecture and Cybersecurity, ensuring that banking systems meet strict operational SLAs, regional banking regulations, and global security standards. You will be responsible for solutioning infrastructure deployments (Azure/AWS, virtualization, network, SASE) while enforcing Zero Trust architecture, identity management, and threat prevention controls across the global banking network. Key Responsibilities: 1. Infrastructure Solutioning & Engineering - Design and implement high-availability hybrid cloud architecture (Azure/AWS/Private Cloud) for critical banking applications. - Manage core infrastructure services including virtual server environments (VMware/Hyper-V), enterprise storage, OS platforms (RHEL/Windows Server), and database infrastructure. - Oversee network topology, SASE/SD-WAN implementations, load balancing, and secure connectivity across global branches. - Drive infrastructure automation using Infrastructure-as-Code (IaC) tools (e.g., Terraform, Ansible, PowerShell) to optimize provisioning and CI/CD pipelines. 2. Cybersecurity & Security Posture Architecture - Embed security controls (Zero Trust, IAM, encryption, micro-segmentation) into all new and existing infrastructure designs. - Implement and manage endpoint security (EDR/XDR), Secure Access Service Edge (Zscaler/SASE), and Cloud Access Security Brokers (CASB). - Conduct security posture assessments, vulnerability management, and infrastructure hardening according to CIS benchmarks. - Collaborate closely with the Global Security Operations Center (GSOC) to ensure proper logging, SIEM integration, and incident response readiness. 3. Compliance, Risk & Governance - Ensure all infrastructure and security designs comply with financial domain regulations (e.g., MAS, FCA, RBI, Federal Reserve, JFSA). - Execute risk assessments on infrastructure changes and support internal/external audit requirements. - Participate in Business Continuity Planning (BCP) and Disaster Recovery (DR) testing to guarantee zero data loss and minimal RTO/RPO. 4. Operations & Stakeholder Collaboration - Work with cross-functional groups (Front Office Technology, Corporate Services, and Global Operations) to architect resilient platform solutions. - Act as an escalation lead for critical Infrastructure and Security P1 incidents, conducting Root Cause Analysis (RCA). Required Qualifications & Skills: Technical Skills: - Cloud & Virtualization: Strong hands-on experience with Microsoft Azure / AWS, Azure Virtual Desktop (AVD), VMware ESXi, and Active Directory / Entra ID. - Network & Security Infrastructure: Deep understanding of Next-Gen Firewalls (Palo Alto/Fortinet), SASE (Zscaler), VPN, DNS/DHCP, TLS/SSL, and EDR solutions (CrowdStrike/Defender). - Automation: Proficiency with IaC (Terraform, Bicep), scripting (Python, PowerShell, Bash), and CI/CD automation tools. - Domain Experience: Background in Banking or Financial Services (BFSI) is required, with knowledge of payment systems, SWIFT networks, or trading infrastructure security. Soft Skills: - Exceptional problem-solving skills under high-pressure enterprise environments. - Strong technical documentation and solution architectural design skills. - Ability to present complex technical security risks to executive leadership and non-technical stakeholders. Benefits: - Health insurance - Life insurance Ability to commute/relocate: - Manila: Reliably commute or planning to relocate before starting work (Required) Experience: - Zscaler : 4 years (Required) - Terraform: 5 years (Required) - Azure: 6 years (Required) - IT infrastructure: 8 years (Required) - Banking: 4 years (Required) - ITIL: 8 years (Required) License/Certification: - Certified Information Systems Security Professional (CISSP) (Preferred) - Certified Cloud Security Professional (CCSP) (Preferred) - Zscaler Certification (Preferred) Location: - Manila (Required) Work Location: In person

Наблюдалась 2026-10-07, впервые 2026-10-06, источник — Indeed.

Открыть у работодателя