Sr Engineer, Information Security

** Innovate in Charlotte*
* Thank you for dedicating your time and talent to Lowe's.  We want to give you more opportunities to learn and grow, so if you find a position you're interested in below, we encourage you to apply!

** Your Impact*
* The primary purpose of this role is to support the design, implementation, and ongoing operation of information security tools and services. This includes leading the process of translating business and technical requirements into robust enterprise security software solutions that ensure information assets are adequately protected with acceptable levels of control. This also includes monitoring, testing, and evaluating security assessments of systems and taking steps to design and implement remediation solutions.

To be successful, the individual in this role must have strong knowledge of security practices and tools related to identity and access management along with enterprise digital certificate management systems. This role establishes and maintains programs that enable the business to operate efficiently and remain in compliance with regulatory and industry best practices.

** What You Will Do*
* + Design, implement, and maintain enterprise network security solutions, including physical, virtual, and cloud-based firewalls (Fortinet), ensuring secure, reliable, and compliant operations.

+ Engineer and support network security architectures across hybrid environments, including Google Cloud Platform (GCP), Microsoft Azure, Oracle Cloud Infrastructure (OCI), and on-premises data centers.

+ Design, implement, and administer secure access technologies, including VPN, Zero Trust Network Access (ZTNA), Network Access Control (NAC), web proxy, IoT security, and microsegmentation solutions to support Zero Trust initiatives.

+ Install, upgrade, configure, and maintain firewalls, network security appliances, and related infrastructure while managing lifecycle, change control, and operational support.

+ Monitor, troubleshoot, and optimize enterprise security systems; investigate security events, respond to escalated issues, and lead break/fix activities to ensure service availability.

+ Collaborate with Infrastructure, Cloud, Network, Security Operations, and Architecture teams to design secure solutions, implement remediation plans, and integrate security into enterprise projects.

+ Evaluate emerging security technologies, industry trends, and threat intelligence to improve the organization's security posture and defend against evolving cyber threats.

+ Develop and maintain security standards, technical documentation, operational procedures, and architecture diagrams while ensuring knowledge transfer to Security Operations teams.

+ Automate security operations and infrastructure management using scripting and Infrastructure-as-Code tools such as Python, Ansible, Terraform, or similar technologies.

+ Mentor junior engineers, provide technical leadership on complex initiatives, and communicate effectively with technical teams, leadership, and business stakeholders.

+ Maintain a strong understanding of enterprise networking, security architecture, compliance frameworks, risk management, and project delivery best practices.

** Minimum Qualifications*
* + Bachelor's degree Computer Science, CIS, Engineering, Cybersecurity, or related field or equivalent years of experience in lieu of education requirement, if applicable

+ 5 Years of Experience in technology system support, software development or a related field

+ 2 Years of

Experience with information security applications and systems

** Preferred Skills/Education*
* + Master's degree Computer Science, CIS, Business Administration, or related field

+ 3 Years of Experience evaluating entire applications (Container, Infrastructure, host platform) to identify potential threats and vulnerabilities

+ 1 Year of Dev Ops experience

+ 3 Years of Experience evaluating entire applications (Container, Infrastructure, host platform) to identify potential threats and vulnerabilities

+ 3 Years of Experience in the custom enhancement or development of applications using secure coding techniques to reduce the threat of remote or local vulnerabilities

+ 5…