Infrastructure Security Engineer – Zero Trust & Cloud

msgentertainmentholdingsllc

Burbank (CA)

On-site

USD 140,000 - 210,000

Full time

7 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Madison Square Garden Entertainment Corp. in New York seeks an Infrastructure Security Engineer to design, implement, and evolve security services and automation across on-prem and cloud environments.

You will tackle red‑team findings, validate weaknesses, and contribute to a resilient security posturing while collaborating with IT and operations teams. Ideal candidates have hands‑on experience with Palo Alto firewalls, secure network design, and a proactive mindset to reduce risk through

Qualifications

Bachelor's degree in Computer Science, Cybersecurity, a related field, or equivalent combination of education and experience.
5+ years of related experience.
Solid networking foundation applied to modern on premise & cloud environments: BGP, Routing, DNS, TLS and certificate-based trust, network segmentation, micro segmentation, VPNs and cloud networking constructs such as VPCs, security groups and cloud interconnect.
Proficient in networking concepts and technologies, including TCP/IP, DNS, DHCP, BGP, and OSPF, with a strong focus on how they interact with security solutions.
Strong Palo Alto firewall skills as well as Network ACLs, Azure NSGs, AWS security groups

Responsibilities

Manage Palo Alto Networks firewalls, tuning configuration for security policies, threat prevention and application control.
Participate in secure network architecture discussions in multi vendor environments, enforcing proper segmentation, zero trust and defense in depth strategies.
Partner with network teams to implement security controls across LAN and WAN environments without compromising network performance.
Own the technology implementation and delivery approach end to end, documentation, knowledge base upkeep and post implementation support.
Secure hybrid and multi cloud environments, applying security controls for cloud networking services (i.e. AWS & GCP VPC, load balancing, routing & cloud firewalls).
Acts as the L3 escalation point for Security Operations issues and security incidents, taking on operational responsibilities as the need arises.
Execute technical audits and compliance reviews, engaging constructively with our GRC function.
Curate and evolve our security services and product catalog, ensuring each service is clearly defined, has service levels set and is marketed to key stakeholders, informed by findings surfaced during pentesting and red team engagements.
Participate in business cases and storyboards that justify spend and technical decisions, including investments in Security Engineering applications built in house, working closely with the operations team to stay aligned on direction.
Assist with the development of in house security tooling and automation that operationalizes internal and external pentesting workflows, turning offensive findings into repeatable, validated controls.
Take on the technical development of recovery and business continuity plans, ensuring the security infrastructure survives system shocks and internal, or external events and validating resilience through offensive testing.
Collaborate with Information Security & Information Technology leaders to define the year to year Network Security program roadmap, inclusive of our security platforms and in house engineered applications.
Drive hyper automation into all security products and services, so minimal human engagement is needed to deliver desired outcomes, building the tooling in house where it gives us an edge.
Provide exceptional experiences for our guests, partners, and team members, including by adhering to our appearance and presentation guidelines while on‑site.