Principal, Systems and Infrastructure Engineer, Information Security

Overview

Position Summary...

At Walmart, we prioritize innovation and data security. Our team is dedicated to maintaining a secure operating environment and preserving the trust of our customers, associates, and stakeholders. We combine a range of services and expertise to prevent fraud, detect threats, and manage digital risk and access. Our focus is on mitigating attack risks, securing cloud transformation, and fostering a culture of security and reliability within our team

Walmart is searching for an experienced IoT/OT practitioner to join our team and continue our mission of securing a large scale and diverse businesses environment. As an IoT/OT Security (Distinguished, Principle, Staff, Senior) Engineer, you will be responsible for designing and developing solutions that secure the IoT/OT solutions supporting the enterprise  environment will include a variety of sensors, cameras, robots, printers, SCADA controllers, and industrial automation platforms.

In addition to ensuring the security and compliance of these systems and devices, the role will be responsible for providing guidance to other teams and stakeholders.

• Research, design, test, and document IoT/OT solution patterns to integrate with current and future solutions sets.

• Implement security controls and best practices for IoT/OT systems and devices, such as encryption, authentication, authorization, logging, patching, etc.

• Collaborate with vulnerability assessment and penetration testing teams to identify risks, findings, and remediations across the IoT/OT landscape.

• Collaborate with other teams and stakeholders to ensure the security and compliance of IoT/OT systems/devices, and provide training and awareness as needed.

• Stay updated on the latest trends and developments in IoT/OT security and evaluate and recommend new technologies and solutions.

• Perform protocol aware traffic analysis (Modbus, DNP3, OPC UA, FOX)

• Bachelor’s degree in Computer Science, Engineering, or related field, or equivalent work experience.

• Relevant certifications such as IEC 62443, CISSP, GICSP, etc…

• 10+ years of experience in IoT/OT security, system operations, or related field.

• Experience with IoT/OT protocols such as Modbus, Bacnet, FOX, MQTT, CoAP, OPC UA, Azure IoT, etc.

• Experience with IoT/OT devices, sensors, and hardware, such as IoT single-board computers, PLCs (, RTUs, etc.

• Experience with OT environments including ICS and SCADA systems (GE, ABB, Siemens, Schnieder Electric, Honeywell, Emerson, etc…)

• Experience with security tools and frameworks, such as Wireshark, Nmap, Metasploit, Burp Suite, OWASP, etc.

• Experience with computer languages and configurations, such as Python, Powershell, Bash, Terraform, YAML, SQL, etc..

• Experience deploying, tuning, and integrating OT IDS tools (Armis, Claroty, Dragos, Nozomi, Defender for IoT, etc)

• Familiar with using artificial intelligence for scripting and code development

• Familiar with CI/CD pipeline to maintain solutions and integrations

• Familiar with OT/IoT architecture security design and review for OT/IoT systems

• Experience with cloud and network technologies, such as GCP, Big Query, Kubernetes, Azure, TCP/IP, VPN, etc.

• Background & experience with security regulations and standards, such as IEC 62443, NIST 800-82, NERC-CIP, TSA Security Directives, ISO, HIPPA, PCI, etc

• Strong analytical, problem-solving, and communication skills.

• Architecture & Solution pattern development skillsets in complex environments

• Ability to work independently and as part of a team.

• Ability to learn new technologies and skills quickly.

• Familiar with OT/IoT threat actors and their techniques

Imagine working in an environment where one line of code can make life easier for hundreds of millions of people. That’s what we do at Walmart Global Tech. We’re a team of software engineers, data scientists, cybersecurity expert's and service professionals within the world’s leading retailer who make an epic impact and are at the forefront of the next retail disruption.

People are why we innovate, and people power our innovations. We are people-led and tech-empowered. We train our team in the skillsets of the…