Systems Infrastructure & Network Security Operations Engineer

Core Responsibilities

• Draft, review, and maintain zero-trust SOPs across identity, device, data, and infrastructure.
• Produce reusable reference models mapped to HP’s enterprise architecture and expressed as policy-as-code.
• Extend Net-Sec-Ops pipelines with IaC (Ansible) for firewalls, switches, SD-WAN, and edge fabric.
• Deliver automated, version-controlled playbooks with unit, integration, and compliance tests in CI.
• Architect and automate backup, failover, and DR workflows for all network devices.
• Conduct recovery drills, validate RTO/RPO against SLA targets, and produce post-mortem runbooks.
• Integrate vulnerability scanners (Nessus, Qualys), threat-intel feeds, and policy-as-code into CI/CD pipelines.
• Automate remediation playbooks and generate compliance dashboards for SOC/DevSecOps.
• Operate configuration managers to centralize topology, inventory, and device state.
• Enforce change-control gates, audit drift, and maintain traceability from design to production.
• Evaluate emerging trends (intent-based networking, programmable data planes, network observability).
• Propose tool/process changes to reduce manual effort and improve security posture.
• Rapidly spin up proof-of-concept environments to test complex customer requests.
• Translate business requirements into secure, performant, and automatable designs.

Security & Compliance

• Deep knowledge of L2/L3 protocols (OSPF, BGP, MPLS, VXLAN).
• Systems & Infrastructure Engineering Architecture governance (TOGAF/ArchiMate).
• Design documentation, lifecycle management, and change control.
• Infrastructure-as-Code expertise.
• Automation & DevOps Proficiency in Python, Ansible, Terraform, Git, Jenkins/GitLab CI.
• Proven CI/CD for network assets, automated testing, and policy-as-code pipelines.
• Vulnerability management, policy-as-code, zero-trust design.

Networking Required Experience & Skills

• 6+ years configuring firewalls, switches, VPNs, VLANs, and traffic load balancing.
• Systems & Infrastructure Engineering Architecture governance (TOGAF/ArchiMate).
• Design documentation, lifecycle management, and change control.
• Infrastructure-as-Code expertise.
• Automation & DevOps Proficiency in Python, Ansible, Terraform, Git, Jenkins/GitLab CI.
• Proven CI/CD for network assets, automated testing, and policy-as-code pipelines.
• Vulnerability management, policy-as-code, zero-trust design.
• Certifications such as CISSP, CCSP, or equivalent preferred.
• Tools & Platforms VMware vSphere, Proxmox, Linux, Windows, F5, InfoBlox.
• Experience with cloud networking (AWS VPC, Azure VNets).

Soft Skills

• Strong attention to detail and documentation.
• Excellent stakeholder communication.
• Proactive, self-directed learning mindset.

Education & Credentials

• Bachelor’s degree in Computer Science, Information Technology, or related discipline OR equivalent professional experience.
• Technical cybersecurity certification (SANS, ISACA, CompTIA, Cisco, etc.) preferred.
• Demonstrated hands-on experience with network automation, IaC, and infrastructure-as-code tools.

Disclaimer

This job description outlines the general nature and level of work performed in this role. It is not intended to be an exhaustive list of all duties, skills, responsibilities, or knowledge. Additional functions may be assigned as needed by management.

Pay Range

The pay range for this role is $93,400 to $143,800 USD annually with additional opportunities for pay in the form of bonus and/or equity (applies to United States of America candidates only).

Benefits

HP offers a comprehensive benefits package for this position, including:

• Health insurance
• Dental insurance
• Vision insurance
• Long term/short term disability insurance
• Employee assistance program
• Flexible spending account
• Life insurance
• Generous time off policies, including:
• 4-12 weeks fully paid parental leave based on tenure
• 11 paid holidays
• Additional flexible paid vacation and sick leave (US benefits overview)

The compensation and benefits information is accurate as of the date of this posting. The Company reserves the right to modify this information at any time, with or without notice, subject to applicable law.