Evernote is looking for an infrastructure security architect to join our growing security team. Are you passionate about solving security infrastructure problems at scale? Our customers trust us with billions of their notes, projects, and ideas and we are here to protect them. You will work with teams across multiple disciplines to provide practical security advice that improves our posture in network security, identity and access management, data security, and security risk. Do you enjoy working with modern technologies like Spanner, Kubernetes, and cloud-native services? We're growing and investing in these areas, so there's no shortage of new and interesting things to learn about and secure. You’ll be joining a team of senior security professionals who are focused on providing practical security guidance to a rapidly growing technology stack. If you like to question traditional security dogma and apply a rational perspective to adapt it to modern technology, you are going to enjoy this role.

Responsibilities

• Provide security guidance on new technology implementations
• Perform risk-based security reviews on existing infrastructure
• Review and approve changes to infrastructure security controls
• Assess the security posture of our third-party partners and service providers
• Assist with driving remediation of risks and exposures you identify
• Document application and system architectures when needed
• Document policy exceptions as they arise

Requirements

• Have at least five years of experience in a security-related field
• Have a minimum of three years in a security architecture role
• Experience securing infrastructure in a cloud environment
• Practical infrastructure threat-modeling experience
• Previous significant experience with one or more popular firewall vendor
• Deep understanding of at least one major authentication and authorization technology
• Good knowledge of Linux and ability to navigate the command line
• Strong grasp of web services architecture and commonly employed technologies
• Success leading highly complex technology projects
• Ability to quickly learn and comprehend new system architectures
• Excellent verbal and written communication skills
• Ability to make effective architecture diagrams
• Excellent organizational skills
• Interest in multi-functional partnership within the company