דרושים System & Security Engineer ב-Armis ב-Israel, Tel Aviv-yafo

What you'll do

• Design and build high-performance and distributed infrastructure for search and pipeline products
• Integrate with the Armis platform and be a key player in its design and development
• Develop extendable libraries and utilities which will speed-up our implementations and make sure we’re building scalable and high-quality solutions
• Work closely with product and other R&D teams
• Help with solving complex customer issues with our solutions and platform

What we expect

• 5+ years experience with Python/GO/Java/C/C++
• 5+ years of experience in backend infrastructure engineering in a cloud environment
• 5+ years of experience with relational databases(Postgres, SqlServer, MySql, SingleStore)
• Experience with designing data-intensive applications
• Experience with system architecture and finding creative solutions to complex problems
• Experience in dealing with performance and high scale systems
• The mentality of a team player, sense of ownership and urgency

Desirable Multipliers

• High-end tech stack, e.g. docker, K8s, DBs, cloud providers and message brokers
• Asynchronous programming
• Microservice architecture
• BS degree in Computer Science or equivalent

The role:

An operations-first engineer with deep expertise in running, scaling, automating, and monitoring streaming infrastructure like Kafka and RabbitMQ.

What you will do…

• Automate Deployment and Operation Oversee deployment of Kafka and RabbitMQ clusters (including Confluent Cloud & CFK). Build automation pipelines to ensure repeatability and resiliency across environments.
• Monitor and Support Production Systems Own production stability of global Kafka clusters. Handle on-call rotations, incident management, troubleshooting, and scaling challenges.
• Improve Infrastructure Observability Build and maintain observability systems: dashboards, alerting pipelines, metrics collection (Prometheus, Grafana, etc.).
• Optimize System Performance Collaborate with peers on benchmarking and optimization initiatives. Work on tuning Kafka brokers, cluster configurations, and runtime parameters.
• Provide Developer Support and Training (Infra-focused) Help developers configure topics, quotas, and consumers appropriately. Train service owners to interpret monitoring data and avoid pitfalls.
• Develop and Maintain Infrastructure Contribute to building infrastructure tools and scripts (IaC, Helm charts, etc.) that make provisioning and managing clusters reliable and efficient.
• Secure Infrastructure Access Configure and maintain secure access patterns across streaming infrastructure, ensuring proper authentication and role-based access controls are enforced for both developers and services.

What we expect…

• 8+ years of experience in DevOps , SRE , or Infrastructure Engineering roles.
• Deep hands-on Kafka experience , including deploying, maintaining, scaling, and monitoring clusters.
• Experience with RabbitMQ .
• Extensive experience with Docker , Kubernetes , Helm, and GitOps-style deployments.
• Infrastructure as Code experience (Terraform, Pulumi, etc.).
• Strong skills in scripting and automation (Python, Bash, etc.).
• Familiarity with Confluent Cloud , Confluent for Kubernetes , and similar tools.
• Solid understanding of authentication and authorization mechanisms in distributed systems.
• Production support mindset – with proven troubleshooting and incident resolution history.
• Collaboration and communication skills – especially with dev teams depending on platform support.
• Experience with Istio Service Mesh (bonus).
• Experience with GovCloud (bonus).

• Mentorship and leadership experience in infrastructure or SRE teams.
• Contributions to automation or monitoring open-source tooling.
• Active participant in SRE or DevOps communities.
• Conference speaker or internal tech trainer.
• Technical writing about infrastructure automation or reliability.

Key Responsibilities

Database Infrastructure Development- Design, develop, and maintain scalable and reliable self-serve database infrastructure, including PostgreSQL, MongoDB, SingleStore, and AWS Aurora.

Big Data Infrastructure Development- Design, develop, and maintain scalable and reliable self-serve big data infrastructure, including cloud-agnostic data lakehouse, distributed databases, and platform-powered data pipelines.

- Take responsibility for the entire lifecycle of data infrastructure, from DevOps (Terraform, Kubernetes) to application-level components (infrastructure libraries, core components in data pipelines).

Requirements

• Extensive Experience in software engineering and data infrastructure.
• Extensive Expertise in the administration of OLTP and OLAP databases.
• Strong knowledge of big data frameworks, including Apache Spark, Athena, Trino, and Iceberg.
• Hands-on experience with DevOps tools such as Terraform, Kubernetes, and Cloud infrastructure.
• Proficiency in building and managing data pipelines and core infrastructure components.
• Strong problem-solving, communication, and leadership skills, with the ability to mentor and collaborate across teams.

Why Join Us

• Be part of a talented and innovative Data Platform Team, building the backbone of the company’s data ecosystem.
• Work on a variety of challenging and impactful projects with modern technologies.
• Play a pivotal role in shaping the company’s data and architectural strategies.
• Enjoy a dynamic, fast-paced environment with opportunities for growth and professional development.

What you'll do

• Build and maintain a robust backend infrastructure and micro-services.
• Develop and sustain an advanced web application infrastructure.
• Architect new components and features.
• Write code for both frontend and backend.
• Collaborate with multiple development and data analysis teams on cross-company features.
• Manage remote production environments (cloud services).
• Participate in end-to-end development processes and contribute to horizontal projects within the group.

What we expect

• A minimum of 5 years of experience in developing complex web applications.
• Proficiency in JavaScript, CSS, and HTML (knowledge of ES6 and React is a plus).
• Strong understanding of server-side concepts (expertise in Python, ORMs, and web servers is a plus).
• Experience with relational databases (SQL knowledge is a plus).
• The ability to work independently and make a significant impact.
• Familiarity with network knowledge is an advantage.
• Experience with at least one backend framework (e.g., Java, Python, Go, Node.js, C#) and an advantage for Python with at least two years of experience in the backend.

What you'll do

• Develop and maintain integrations with various network devices and Network Management Platforms.
• Develop and maintain infrastructures that handle network-related data, help write integrations, manage them, and enhance their functionality
• Integrate with the Armis platform and be a key player in its design and development
• Develop extendable libraries and utilities that will speed up our implementations and make sure we’re building scalable and high-quality solutions
• Work closely with product and other R&D teams
• Help with solving complex customer issues with our solutions and platform

• 5+ years of experience with Python
• Networking and Network Equipment Background: In-depth understanding of networking protocols (TCP/IP, UDP, etc.), network architectures, and experience working with various network equipment (routers, switches, firewalls, WLC, etc.)
• Experience with developing and maintaining production, enterprise-level systems
• Experience with system architecture and finding creative solutions to complex problems
• Experience in dealing with performance and high-scale systems
• The mentality of a team player, a sense of ownership, and of urgency and eagerness to learn new concepts and improve

• High-end tech stack, e.g., Docker, K8s, Redis, Postgres, etc.
• Asynchronous programming
• Microservice architecture

You will implement robust security systems and tools leveraging automation to optimize infrastructure scalability, usability, and security.

• Manage, maintain and monitor the company's IT & Security infrastructure systems and integrations (on-prem & SaaS)
• Design, manage, maintain, optimize, and monitor TLV office network infrastructure (on-prem & SaaS managed infrastructure such as Infoblox, Aruba, and Portnox)
• Manage, maintain, optimize, and integrate systems into the company’s SSO platform to support SAML & user lifecycle management (Okta)
• Manage, maintain, develop, and implement automation across the company’s infrastructure, network, and systems to support internal processes, company growth and continuously improve the employees' experience by maximizing security
• Manage, maintain, and optimize the company’s on-prem virtualization infrastructure (VMware & Nutanix)
• Manage, maintain and improve the company’s MDMs (Jamf & Intune).
• Implement security best-practice permissions models (RBAC, JiT)
• Actively monitor network and server infrastructure to ensure uptime and performance.
• Joint SOC tools and alerts management (SIEM, EDR / EPP, others…)
• Managing & monitoring system performance and ensuring reliability and availability
• Investigate and respond to security incidents
• Identify, automate and document solutions to common issues
• Collaborate with the global team in implementing security policies, procedures and best practices
• Collaborate with the company’s teams or departments to understand, research, and resolve problems
• Deliver professional tier 2 and 3 global technical support to the company’s employees and systems
• Work as per IT & Security processes and KPIs
• Work with vendors and suppliers of physical and virtual assets
• Assess vendor’s solutions, coordinate security review and oversee product implementation
• Create and improve technical documentation, training materials
• Conduct security awareness training for employees

What we expect…

• At least 3 years of experience with LAN/WAN/WiFi networks design, implementation and management.
• 3+ years of experience in implementation, administration, and management of security systems (firewalls, end-point protection softwares, intrusion systems, encryption, PK)
• Deep expertise in network segmentation and security best-practices
• Deep expertise with network tools (analyzer, monitoring, SIEM)
• Experience with advanced network security frameworks (ZTNA, DDI)
• Experience with infrastructure monitoring tools (e.g., PRTG, Grafana).
• Experience with network policies and processes (change management, configuration management…)
• 2+ years experience with systems administration (Okta, Google Workspace, Jamf, Office 365, Intune)
• 1+ years of experience with cloud infrastructure administration (AWS, GCP, Azure)
• 2+ years of experience with on-prem virtualization infrastructure administration (VMware & Nutanix)
• 2+ years of experience with infrastructure scripting and automation (Python, Bash, Powershell)
• 4+ years of experience with OS administration and troubleshooting (Windows, macOS, Linux / Unix)
• Excellent troubleshooting, problem-solving and analytical skills
• Strong understanding of security principles and best practices
• Excellent documentation capabilities
• Strong communication and teamwork skills

• Experience with LAN/WAN/WiFi networks architecture design, implementation and management
• Deep expertise in firewalls implementation, administration and management
• Experience with ZTNA solutions
• Experience with CASB tools.
• Experience with enterprise browser solutions
• Experience with security incident response
• Experience with PAM implementation and administration
• Experience with infrastructure monitoring implementation and administration
• Experience with security policy development and implementation
• Excellent and proven serviceability skills
• Ability to be patient with non-technical users and simplify processes and procedures

• High level of independence with excellent time management skills
• Good project management skills
• Very high motivation and willingness to continuously learn

You will implement robust security systems and tools leveraging automation to optimize infrastructure scalability, usability, and security.

• Manage, maintain and monitor the company's IT & Security infrastructure systems and integrations (on-prem & SaaS)
• Design, manage, maintain, optimize, and monitor TLV office network infrastructure (on-prem & SaaS managed infrastructure such as Infoblox, Aruba, and Portnox)
• Manage, maintain, optimize, and integrate systems into the company’s SSO platform to support SAML & user lifecycle management (Okta)
• Manage, maintain, develop, and implement automation across the company’s infrastructure, network, and systems to support internal processes, company growth and continuously improve the employees' experience by maximizing security
• Manage, maintain, and optimize the company’s on-prem virtualization infrastructure (VMware & Nutanix)
• Manage, maintain and improve the company’s MDMs (Jamf & Intune).
• Implement security best-practice permissions models (RBAC, JiT)
• Actively monitor network and server infrastructure to ensure uptime and performance.
• Joint SOC tools and alerts management (SIEM, EDR / EPP, others…)
• Managing & monitoring system performance and ensuring reliability and availability
• Investigate and respond to security incidents
• Identify, automate and document solutions to common issues
• Collaborate with the global team in implementing security policies, procedures and best practices
• Collaborate with the company’s teams or departments to understand, research, and resolve problems
• Deliver professional tier 2 and 3 global technical support to the company’s employees and systems
• Work as per IT & Security processes and KPIs
• Work with vendors and suppliers of physical and virtual assets
• Assess vendor’s solutions, coordinate security review and oversee product implementation
• Create and improve technical documentation, training materials
• Conduct security awareness training for employees

What we expect…

• At least 3 years of experience with LAN/WAN/WiFi networks design, implementation and management.
• 3+ years of experience in implementation, administration, and management of security systems (firewalls, end-point protection softwares, intrusion systems, encryption, PK)
• Deep expertise in network segmentation and security best-practices
• Deep expertise with network tools (analyzer, monitoring, SIEM)
• Experience with advanced network security frameworks (ZTNA, DDI)
• Experience with infrastructure monitoring tools (e.g., PRTG, Grafana).
• Experience with network policies and processes (change management, configuration management…)
• 2+ years experience with systems administration (Okta, Google Workspace, Jamf, Office 365, Intune)
• 1+ years of experience with cloud infrastructure administration (AWS, GCP, Azure)
• 2+ years of experience with on-prem virtualization infrastructure administration (VMware & Nutanix)
• 2+ years of experience with infrastructure scripting and automation (Python, Bash, Powershell)
• 4+ years of experience with OS administration and troubleshooting (Windows, macOS, Linux / Unix)
• Excellent troubleshooting, problem-solving and analytical skills
• Strong understanding of security principles and best practices
• Excellent documentation capabilities
• Strong communication and teamwork skills

• Experience with LAN/WAN/WiFi networks architecture design, implementation and management
• Deep expertise in firewalls implementation, administration and management
• Experience with ZTNA solutions
• Experience with CASB tools.
• Experience with enterprise browser solutions
• Experience with security incident response
• Experience with PAM implementation and administration
• Experience with infrastructure monitoring implementation and administration
• Experience with security policy development and implementation
• Excellent and proven serviceability skills
• Ability to be patient with non-technical users and simplify processes and procedures

• High level of independence with excellent time management skills
• Good project management skills
• Very high motivation and willingness to continuously learn