Infrastructure and Email Security Engineer

Job description

About Marvell Marvell’s semiconductor solutions are the essential building blocks of the data infrastructure that connects our world. Across enterprise, cloud and AI, and carrier architectures, our innovative technology is enabling new possibilities. At Marvell, you can affect the arc of individual lives, lift the trajectory of entire industries, and fuel the transformative potential of tomorrow. For those looking to make their mark on purposeful and enduring innovation, above and beyond fleeting trends, Marvell is a place to thrive, learn, and lead. Your Team, Your Impact Marvell is seeking an Infrastructure Security Engineer to drive cyber security best practices across the systems, appliances, and platforms that run Marvell's data center and cloud (IaaS/PaaS) environments, along with email security. This role partners closely with Cyber and IT Engineering/Operations teams across each area of the data center, cloud, compute, storage, network, and virtualization to identify risk and drive adoption of stronger technical controls What You Can Expect Partner with Cyber and IT Engineering/Operations teams spanning compute, storage, network, and virtualization in the data center and cloud environment, as well as the M365/Exchange Online team, to drive cyber security best practices. Maintain working knowledge of the tools and systems used to manage and protect data center and cloud infrastructure (hardening standards, patch and vulnerability management, privileged access, configuration management, cloud security posture tooling) and administer/tune the Proofpoint email security platform. Design and recommend email security architecture and technical controls that reduce phishing, business email compromise, and account takeover risk. Identify and help drive remediation on gaps in baseline security controls across data center, cloud, and email environments, working with system owners to prioritize based on risk. Act as a technical liaison between Security/SecOps and IT Infrastructure, Operations, and Exchange teams, translating security requirements into practical, operationally feasible controls. Work with the SOC as needed to support investigation and response for infrastructure- and email-related security incidents, providing technical context on affected systems. Contribute to metrics and reporting on infrastructure and email security posture, control effectiveness, and residual risk. What We're Looking For Hands-on experience administering and managing servers running Microsoft Windows and Linux operating systems with focus on cyber security hardening and best practices Working knowledge of virtualization platforms (e.g., VMware vSphere, Microsoft Hyper-V). Solid understanding of core network fundamentals (DNS, DHCP, TCP/IP) and data center appliances (firewalls, load balancers such as F5, switches/routers) Experience with cloud IaaS/PaaS environments (AWS, Azure, and/or GCP) compute, storage, networking, and identity/access management services. Working knowledge of configuration and patch management tooling (e.g., SCCM, Ansible, Puppet, Chef) and vulnerability management/scanning platforms (e.g., Tenable, Qualys, Rapid7). Practical experience with enterprise storage and appliances (e.g., NetApp, Dell EMC, Pure Storage) and how they're typically secured and managed. Hands-on experience administering Proofpoint (or a comparable secure email gateway platform such as Mimecast, Abnormal Security, or Microsoft Defender for Office 365) in an enterprise environment is a big plus Knowledge of Microsoft 365, with deep focus on Exchange Online (mail flow, transport rules, connectors, authentication protocols). Solid working familiarity of core email authentication standards (SPF, DKIM, DMARC) Practical understanding of identity infrastructure (Active Directory, Azure AD/Entra ID) and privileged access management (PAM) concepts. Experience with asset discovery/inventory tooling and building compliance reporting or dashboards to track endpoint protection coverage across a large device fleet. Broad cybersecurity fundamentals across a modern enterprise: identity, endpoint, network, and cloud security concepts. Experience working cross-functionally with IT Engineering, IT Operations, SecOps, SOC, and Security Engineering teams. Ability to translate security requirements into practical guidance for operational teams and communicate risk clearly to technical and non-technical audiences. Experience with backup/disaster recovery platforms (e.g., Veeam, Commvault) and container/Kubernetes environments. Experience with cloud security posture management (CSPM) tooling and SIEM platforms (e.g., Splunk, XSIAM). Experience in a high-growth or high-visibility organization with an elevated threat profile. Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field. Master's degree preferred. Relevant certifications (e.g., CISSP, GIAC/GSEC, Proofpoint certifications, cloud security certifications, Azure, AWS and GCP certifications). This role is eligible to participate in Marvell's bonus and equity plans, including a new hire equity grant and annual equity refreshers, ensuring you are rewarded for your contributions and remain invested in the company's long-term success. Additional Compensation and Benefit Elements With competitive compensation and great benefits, you will enjoy our workstyle within an environment of shared collaboration, transparency, and inclusivity. We’re dedicated to giving our people the tools and resources they need to succeed in doing work that matters, and to grow and develop with us. For additional information on what it’s like to work at Marvell, visit our Careers page. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Interview Integrity To support fair and authentic hiring practices, candidates are not permitted to use AI tools (such as transcription apps, real-time answer generators like ChatGPT or Copilot, or automated note-taking bots) during interviews. These tools must not be used to record, assist with, or enhance responses in any way. Our interviews are designed to evaluate your individual experience, thought process, and communication skills in real time. Use of AI tools without prior instruction from the interviewer will result in disqualification from the hiring process. This position may require access to technology and/or software subject to U.S. export control laws and regulations, including the Export Administration Regulations (EAR). As such, applicants must be eligible to access export-controlled information as defined under applicable law. Marvell may be required to obtain export licensing approval from the U.S. Department of Commerce and/or the U.S. Department of State. Except for U.S. citizens, lawful permanent residents, or protected individuals as defined by 8 U.S.C. 1324b(a)(3), all applicants may be subject to an export license review process prior to employment. #LI-MN1