Gap Inc.
Sr Staff, InfoSec Engineer - InfraSec
We are hiring a highly skilled and experienced Senior Infrastructure Security Engineer. In this role, you will be responsible for designing, implementing, and maintaining the security posture of our network and cloud infrastructure. You will play a key role in identifying and mitigating security risks, ensuring compliance with industry best practices and regulations, and driving continuous improvement in our security operations. You will be a subject matter expert, mentoring junior engineers, and collaborating with cross-functional teams to deliver secure and reliable infrastructure solutions. Provide Infrastructure Security Design & Implementation, delivering robust security controls for cloud (Azure, GCP, OCI), on-premises, and hybrid infrastructure environments. Develop and maintain infrastructure security architecture diagrams and documentation. Configure and manage security tools and technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), Network Access Controls (NAC), VPN & Zero Trust Network Access. Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, NIST, SOC 2, PCI DSS) and participate in security audits and assessments. Develop and maintain deep relationships with the various teams delivering products within Gap Inc including product and engineering leaders to ensure security is built in from the start. Build security policies and standards and enforce them. Assess and communicate potential security risks and make recommendations to stakeholders and leadership. Collaborate and partner with other Infosec teams to incorporate feedback early in the product lifecycle as well as influence processes in other parts of Infosec. Stay current with the latest security trends, threats and develop and maintain deep industry expertise to incorporate it into your work to ensure the company's applications and data remain secure. Experience: Senior Infrasec engineer with 5+ experience working as security engineer. Strong technical knowledge and understanding of modern network & cloud security platforms and services such as Palo Alto NGF & PRISMA, ClearPass, VPN, SD-WAN, ZTNA and cloud infrastructure security technologies such as Azure, GCP (AFW, AppGW, Cloud Armor). Experience with modern compute architectures such as Docker/Kubernetes & Serverless. Experience with security automation & orchestration - infrastructure-as-code (IaC) tools (e.g., Terraform, ARM, cloud IaaS/PaaS automation). Skills: Strong problem-solving skills and ability to perform technical analysis at both a high and low level of detail. Effective written and verbal communication skills with the ability to collaborate and interact across teams and at varying levels of management. Ability to filter, prioritize, and organize work appropriately to meet and exceed goals. Aptitude to understand technical solutions and business processes quickly. Strong negotiation skills to influence decisions while working with senior technical architects and business leads. Education: Bachelor's degree in computer science, Information Security, or related field (or equivalent experience). Benefits at Gap Inc. Merchandise discount for our brands: 50% off regular-priced merchandise at Old Navy, Gap, Banana Republic and Athleta, and 30% off at Outlet for all employees. One of the most competitive Paid Time Off plans in the industry. Employees can take up to five "on the clock" hours each month to volunteer at a charity of their choice. Extensive 401(k) plan with company matching for contributions up to four percent of an employee's base pay. Employee stock purchase plan. Medical, dental, vision and life insurance. Gap Inc. is an equal-opportunity employer and is committed to providing a workplace free from harassment and discrimination. We are committed to recruiting, hiring, training and promoting qualified people of all backgrounds, and make all employment decisions without regard to any protected status. We will meet minimum wage or minimum of the pay range (whichever is higher) based on city, county and state requirements.
We are hiring a highly skilled and experienced Senior Infrastructure Security Engineer. In this role, you will be responsible for designing, implementing, and maintaining the security posture of our network and cloud infrastructure. You will play a key role in identifying and mitigating security risks, ensuring compliance with industry best practices and regulations, and driving continuous improvement in our security operations. You will be a subject matter expert, mentoring junior engineers, and collaborating with cross-functional teams to deliver secure and reliable infrastructure solutions. Provide Infrastructure Security Design & Implementation, delivering robust security controls for cloud (Azure, GCP, OCI), on-premises, and hybrid infrastructure environments. Develop and maintain infrastructure security architecture diagrams and documentation. Configure and manage security tools and technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), Network Access Controls (NAC), VPN & Zero Trust Network Access. Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, NIST, SOC 2, PCI DSS) and participate in security audits and assessments. Develop and maintain deep relationships with the various teams delivering products within Gap Inc including product and engineering leaders to ensure security is built in from the start. Build security policies and standards and enforce them. Assess and communicate potential security risks and make recommendations to stakeholders and leadership. Collaborate and partner with other Infosec teams to incorporate feedback early in the product lifecycle as well as influence processes in other parts of Infosec. Stay current with the latest security trends, threats and develop and maintain deep industry expertise to incorporate it into your work to ensure the company's applications and data remain secure. Experience: Senior Infrasec engineer with 5+ experience working as security engineer. Strong technical knowledge and understanding of modern network & cloud security platforms and services such as Palo Alto NGF & PRISMA, ClearPass, VPN, SD-WAN, ZTNA and cloud infrastructure security technologies such as Azure, GCP (AFW, AppGW, Cloud Armor). Experience with modern compute architectures such as Docker/Kubernetes & Serverless. Experience with security automation & orchestration - infrastructure-as-code (IaC) tools (e.g., Terraform, ARM, cloud IaaS/PaaS automation). Skills: Strong problem-solving skills and ability to perform technical analysis at both a high and low level of detail. Effective written and verbal communication skills with the ability to collaborate and interact across teams and at varying levels of management. Ability to filter, prioritize, and organize work appropriately to meet and exceed goals. Aptitude to understand technical solutions and business processes quickly. Strong negotiation skills to influence decisions while working with senior technical architects and business leads. Education: Bachelor's degree in computer science, Information Security, or related field (or equivalent experience). Benefits at Gap Inc. Merchandise discount for our brands: 50% off regular-priced merchandise at Old Navy, Gap, Banana Republic and Athleta, and 30% off at Outlet for all employees. One of the most competitive Paid Time Off plans in the industry. Employees can take up to five "on the clock" hours each month to volunteer at a charity of their choice. Extensive 401(k) plan with company matching for contributions up to four percent of an employee's base pay. Employee stock purchase plan. Medical, dental, vision and life insurance. Gap Inc. is an equal-opportunity employer and is committed to providing a workplace free from harassment and discrimination. We are committed to recruiting, hiring, training and promoting qualified people of all backgrounds, and make all employment decisions without regard to any protected status. We will meet minimum wage or minimum of the pay range (whichever is higher) based on city, county and state requirements.