Apply on Employer Site

Alkami Technology · 2 weeks ago

Sr. Security Engineer I, Network

United States

Full-time

Remote

Senior Level

$110K/yr - $130K/yr

5+ years exp

Alkami Technology is a leading cloud-based digital banking solutions provider for financial institutions in the United States. As a Senior Security Engineer on Alkami’s Enterprise Information Security team, you will play a critical role in safeguarding the resilience and integrity of online banking platforms by optimizing security controls and collaborating with various teams to ensure compliance and protection against threats.

BankingCreditFinanceFinancial ServicesFinTechSaaSSoftware

No H1B

Responsibilities

Serve as the primary escalation resource for Cloudflare issue resolution

Provide operational coverage when issues arise and perform data analytics on the Cloudflare WAF to continuously learn and improve threat detection

Engineer, optimize, and maintain Cloudflare security solutions (WAF, Bot Management, Traffic Filtering) and implement/manage configurations using Terraform-based IaC for consistency and scale

Manage and refine enterprise Palo Alto firewall policies, ensuring continuous tuning against emerging threats and aligning rule sets with business requirements

Partner with Security Architecture, SRE, and Engineering teams to ensure secure design and implementation of network paths, access patterns, and cloud services, and to provide actionable security requirements

Conduct ongoing security assessments of network and application controls to identify risks, validate protections, and drive remediation activities with partner teams

Serve as the SME for Cloudflare WAF, Terraform, and Palo Alto firewall governance, participating in security incidents and contributing to strategic initiatives

Support the enterprise certificate lifecycle program and promote organizational awareness of network/application security best practices and secure patterns

Participate in on-call rotations and help train and mentor engineers

Qualification

Security EngineeringCloudflare WAFTerraformPalo Alto FirewallAWSNetwork Security ArchitectureSecurity CertificationsLearning AgilityCommunication SkillsProblem-Solving SkillsCollaboration Skills

Required

Extensive Security Engineering Background (5+ years): Proven experience in Information/Network Security engineering, specializing in protecting cloud (AWS preferred) and web-facing environments, and operating in externally audited settings (e.g., PCI DSS, SOC 2)

Tool & IaC Proficiency: Demonstrated success deploying, tuning, and maintaining a wide array of enterprise security controls (WAF, EDR, Firewalls, SIEM, IDPS, etc.). Expert proficiency with Infrastructure-as-Code (IaC), specifically Terraform, to manage Cloudflare and AWS configurations at scale

Deep Network Architecture Knowledge: Strong command of network security architectures, including segmentation, traffic inspection, enterprise firewall management, modern security principles, secure protocols, and relevant threat patterns

Communication & Collaboration: Excellent analytical, problem-solving, and communication skills, with the ability to quickly assess complex scenarios, determine effective mitigation strategies, and build strong, collaborative relationships across technical and leadership teams

Learning: Strong desire to continuously learn, adapt, and contribute to a rapidly evolving security program and engineering organization

Education: Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field (or equivalent practical experience)

Preferred

Security certifications such as AWS Certified Security – Specialty, CISSP, CCSP, or CCSK

The ability to systematically investigate and isolate security incidents in a complex environment

Prior experience in fintech, banking, or other highly regulated industries

Background in high-availability SaaS, regulated environments, where zero-downtime operations are critical

Ability to support an environment and projects that may require irregular or long working hours, such as to support the team through maintenance windows for planned upgrades and project milestones, and handle escalations of security concerns outside of regular working hours to address urgent situations

Previous experience supporting and addressing security concerns in a multi-tenant, hosted solution in a cloud-based architecture