Senior DevOps Engineer, Mexico City

Principal Engineer II - Mexico - Hybrid Model (Office with Flex)

ICON plc is a world-leading healthcare intelligence and clinical research organization. We’re proud to foster an inclusive environment driving innovation and excellence, and we welcome you to join us on our mission to shape the future of clinical development.

As a Principal Engineer II at ICON, you will be responsible for leading engineering projects and initiatives that enhance our product development and operational capabilities.

What You Will Do
This role is responsible for providing technical leadership, resolving complex network issues, supporting global infrastructure projects, and ensuring the stability, security, and availability of the enterprise network

Key Responsibilities Include

• Lead the design, implementation, and support of a global enterprise network infrastructure, ensuring high availability, security, and performance.
• Act as the highest technical escalation point for complex network incidents, driving root cause analysis and long-term solutions.
• Deliver and support global infrastructure initiatives, including datacenter migrations, cloud connectivity, office deployments, and technology refresh projects.
• Provide technical leadership and mentorship to network engineers while collaborating with cross-functional and Cyber Security teams.
• Design and maintain enterprise networking solutions across routing, switching, SD-WAN, firewalls, load balancing, and cloud environments.
• Drive network automation, operational improvements, and adherence to security and compliance best practices.

Your Profile
The ideal candidate should have 10+ years of hands-on enterprise networking experience, with strong expertise in Cisco ACI, Fortinet Firewalls, NetScaler/F5 Load Balancers, SD-WAN technologies (preferably CATO), enterprise routing and switching, and cloud networking.

Required Qualifications And Experience

• 10+ years of experience managing large-scale enterprise network environments in a global organization.
• Strong expertise in Cisco technologies (including ACI), Fortinet Firewalls, SD-WAN (CATO preferred), F5/NetScaler, Azure/AWS networking, and enterprise routing & switching.
• Experience leading major incident resolution, infrastructure projects, and technical decision-making in mission-critical environments.
• Hands-on experience with network automation using Python, Ansible, or PowerShell, as well as network monitoring and performance analysis tools.
• Advanced English language level with the ability to collaborate effectively in a global environment.
• Strong communication, stakeholder management, and mentoring skills, with the ability to lead technical discussions across global teams.
• Industry certifications such as CCNP/CCIE, Fortinet, Azure/AWS Networking, CATO, or ITIL are highly valued.

What ICON Can Offer You
Our success depends on the quality of our people. That’s why we’ve made it a priority to build a diverse culture that rewards high performance and nurtures talent.

In addition to your competitive salary, ICON offers a range of additional benefits. Our benefits are designed to be competitive within each country and are focused on well-being and work life balance opportunities for you and your family.

Our Benefits Examples Include

• Various annual leave entitlements
• A range of health insurance offerings to suit you and your family’s needs.
• Competitive retirement planning offerings to maximize savings and plan with confidence for the years ahead.
• Global Employee Assistance Programme, LifeWorks, offering 24-hour access to a global network of over 80,000 independent specialized professionals who are there to support you and your family’s well-being.
• Life assurance
• Flexible country-specific optional benefits, including childcare vouchers, bike purchase schemes, discounted gym memberships, subsidized travel passes, health assessments, among others.

Visit our careers site to read more about the benefits ICON offers.

At ICON, inclusion & belonging are fundamental to our culture and values. We’re dedicated to providing an inclusive and accessible environment for all candidates. ICON is committed to providing a workplace free of discrimination and harassment. All qualified applicants will receive equal consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application process, or in order to perform the essential functions of a position, please let us know or submit a request here

Interested in the role, but unsure if you meet all of the requirements? We would encourage you to apply regardless – there’s every chance you’re exactly what we’re looking for here at ICON whether it is for this or other roles.

Are you a current ICON Employee? Please click here to apply

WHAT MAKES US A GREAT PLACE TO WORK

We are proud to be consistently recognized as one of the world’s best places to work. We are currently the top ranked consulting firm on Glassdoor’s Best Places to Work list and have earned the #1 overall spot a record seven times. Extraordinary teams are at the heart of our business strategy, but these don’t happen by chance. They require intentional focus on bringing together a broad set of backgrounds, cultures, experiences, perspectives, and skills in a supportive and inclusive work environment. We hire people with exceptional talent and create an environment in which every individual can thrive professionally and personally.

WHO YOU’LL WORK WITH

You’ll join our Cyber Operations team within Bain’s Technology Services Group (TSG), working closely with IT, infrastructure, cloud, and engineering teams across a large and diverse global environment.

WHERE YOU’LL FIT WITHIN THE TEAM

As a Vulnerability Management Analyst, you’ll operate and drive the day-to-day maturity of our vulnerability and exposure management program across a large, diverse global environment spanning servers, endpoints, network devices, containers, and multi-cloud workloads.

You’ll run our core tooling stack hands-on — Qualys Vulnerability Management, Detection and Response (VMDR) for host and application scanning, Wiz for cloud and container posture, and Tanium for endpoint visibility and remediation.

You’ll also lead a Continuous Threat Exposure Management (CTEM) program that turns findings from these tools into a single, risk-prioritized view of real exposure. Working closely with IT, infrastructure, cloud, and engineering teams, you’ll set remediation standards, drive accountability, guide junior analysts, and brief leadership on exposure and risk trends.

Location and working model:
Mexico City, Mexico. This role follows a hybrid working model and requires you to work from Bain’s Polanco office at least two days per week.

WHAT YOU’LL DO

• Own and continuously mature the end-to-end vulnerability management lifecycle across the enterprise, including asset discovery, scanning, detection, validation, prioritization, remediation governance, rescanning, and closure verification.
• Operate and administer the core exposure tooling stack hands-on — Qualys VMDR for host and application scanning, Wiz for cloud and container posture, and Tanium for endpoint visibility and remediation — including deployment, configuration, tuning, integration, and scanner, agent, and sensor health.
• Lead the Continuous Threat Exposure Management (CTEM) program, running the scoping, discovery, prioritization, validation, and mobilization cycles and correlating findings across host, cloud, and endpoint sources into a single de-duplicated, risk-ranked view of exposure.
• Prioritize vulnerabilities using the Common Vulnerability Scoring System (CVSS) combined with exploitability signals, including the Exploit Prediction Scoring System (EPSS) and CISA Known Exploited Vulnerabilities (KEV), threat intelligence, and asset and business criticality — focusing remediation on what is exploitable and material.
• Set and enforce remediation service-level agreements (SLAs) and drive accountability with IT, infrastructure, cloud, and engineering teams, translating findings into clear, actionable work and escalating aged or high-risk exposures.
• Partner with threat intelligence to correlate external threat activity with internal findings, translate emerging threats into targeted validation and remediation, and surface material risks for escalation.
• Define exception and risk-acceptance standards, review and adjudicate requests, and maintain defensible documentation to support audits, compliance, and leadership reporting.
• Build and automate dashboards, metrics, and executive reporting on exposure, scan coverage, vulnerability aging, and SLA adherence using native tool reporting, Excel, including pivot tables, and query or business intelligence tooling.
• Mentor junior analysts, set standards for triage, documentation, and reporting quality, and act as the escalation point for complex or contested findings.
• Advise on secure configuration, hardening, and overall program maturity, and communicate findings and recommendations clearly to audiences ranging from engineers to senior stakeholders.

ABOUT YOU

Required Qualifications

• Experience:
  You have 3–5 years of hands-on experience in vulnerability management, exposure management, or closely related security operations, including time in a lead capacity.
• Lifecycle and governance:
  You have a deep understanding of the vulnerability management lifecycle, risk-based remediation, and SLA governance across large, complex environments.
• Tooling — hands-on:
  You have direct, hands-on experience operating and administering Qualys VMDR, Wiz, and Tanium, including deployment, configuration, tuning, integration, and reporting. Hands-on depth with all three is required.
• CTEM:
  You have demonstrated experience running or materially contributing to a Continuous Threat Exposure Management program across its scoping, discovery, prioritization, validation, and mobilization phases.
• Risk prioritization:
  You are proficient in CVSS analysis combined with exploitability signals, including EPSS and CISA KEV, and threat-intelligence-driven, risk-based prioritization.
• Data and reporting:
  You have strong data and reporting skills, including Excel and pivot tables, native tool reporting, and ideally query or business intelligence tooling, enabling you to produce both technical and executive-level metrics.
• Environment breadth:
  You have proven experience securing large, diverse environments spanning Windows, Linux, network devices, endpoints, containers, and multi-cloud workloads.
• Threat awareness:
  You have strong working knowledge of threat intelligence sources and the ability to correlate external threat data with internal findings to drive prioritization.
• Communication and leadership:
  You have excellent written, verbal, and presentation skills, with the ability to influence remediation owners, brief senior leadership, and mentor junior analysts.
• English:
  Advanced English proficiency is required, with the ability to communicate effectively in professional and technical environments.

Preferred / Nice-to-Have

• Cloud and container security:
  Working knowledge of cloud security posture management (CSPM), cloud-native application protection platforms (CNAPP), and container/Kubernetes security concepts, ideally through Wiz or an equivalent platform.
• Benchmarking:
  Working knowledge of CIS Benchmarks and secure configuration and hardening standards.
• Automation:
  Exposure to scripting or automation, such as Python, PowerShell, tool APIs, or Power Query, to integrate tooling and streamline reporting or remediation workflows.
• Integrations:
  Experience integrating vulnerability and exposure tooling with IT service management (ITSM) platforms, such as ServiceNow, to automate remediation workflows.

Certifications

One or more relevant certifications are preferred, or a willingness to obtain them:

• Qualys VMDR Certification
• Wiz Certified or equivalent cloud security/CNAPP certification
• GIAC certification, such as GEVA or GCED, or Certified Ethical Hacker (CEH)
• CISSP, Tanium, or CompTIA Security+, or progress toward these certifications

ID de la solicitud:
248551

Programa de Referido de Empleados – Probable Pago:
$0,00

Estamos comprometidos en continuar invirtiendo en nuestros empleados y ayudarte a continuar desarrollando tu línea de carrera en Scotiabank.

Purpose of the Role

Are you an early technology professional with strong English communication skills and a passion for learning? We are looking for curious, analytical, and motivated talent to join our global operations team.

In this role, you will support critical technology platforms across LATAM and Canada, participate in automation and production support activities, and develop expertise in enterprise workload automation tools such as Control-M, and AutoSys. Previous experience with Batch Scheduling or Control-M is
not required
. We provide the training; you bring the technical foundation, problem-solving mindset, and willingness to learn. Advanced English is essential, as you will collaborate daily with international teams in a global environment.

What We're Looking For

• Advanced English communication skills.
• Strong analytical and problem-solving abilities.
• Basic knowledge of Linux, scripting, databases, infrastructure, or technology operations.
• Eagerness to learn new technologies and grow within enterprise operations and automation.
• Ownership, curiosity, and a continuous learning mindset.

Key Responsibilities

• Promote a customer-focused culture to deepen client relationships and leverage the Bank's systems, capabilities, and operational knowledge.
• Administer and maintain the availability of enterprise workload automation and batch scheduling platforms used across Scotiabank, including:

• Control-M
• AutoSys
• Robot Scheduler
• Job Scheduler supporting multiple entities across LATAM and Canada.

• Implement service requests and changes through GEMS and ServiceNow for the creation, modification, and decommissioning of batch processes.
• Provide support for production incidents and major outages affecting batch processing services across LATAM and Canada, including:

• Service restoration leadership
• Cross-functional coordination
• Escalation management
• Collaboration with Incident Managers and GSOC Operations teams
• 24x7 support coverage as required.

Core Competencies

• Strong ownership and accountability
• Proactive approach to problem solving
• Self-management and ability to work independently
• Continuous learning mindset
• Strong analytical thinking
• Ability to perform effectively under pressure
• Solution-oriented attitude
• Excellent teamwork and communication skills

Bajo ninguna circunstancia solicita pruebas de embarazo, ni de VIH

Scotiabank es una empresa incluyente, que respeta la diversidad y no hace ningún tipo de discriminación

Under any circumstance it is required a pregnancy or VIH test to apply

Scotiabank is an incluyent company that respects diversity and promote a discrimination free workplace

Ubicación(s): México : Ciudad de México : Miguel Hidalgo

Scotiabank es un banco líder en las Américas. Inspirándonos en nuestro propósito corporativo, “por nuestro futuro”, ayudamos a nuestros clientes, sus familias y sus comunidades a lograr el éxito a través de una completa gama de asesoría, productos y servicios en los sectores de banca personal y comercial, gestión patrimonial, banca privada, corporativa y de inversión, y mercados de capital.

En Scotiabank, valoramos las habilidades y experiencias únicas que cada persona aporta al Banco y nos hemos comprometido a crear y mantener un entorno inclusivo y accesible para todos. Si necesitas algún tipo de adaptación (como, por ejemplo, un lugar accesible para la entrevista, documentos en formato alternativo, un intérprete en lengua de señas o tecnología de asistencia, entre otras cosas) durante el proceso de reclutamiento y selección, indícalo a nuestro equipo de Reclutamiento. Si necesitas apoyo técnico, haz clic aquí. Los candidatos deben postularse directamente en línea si desean ser tomados en cuenta para este puesto. Agradecemos a todos los candidatos por su interés en esta oportunidad profesional en Scotiabank, pero solo nos comunicaremos con aquellos que hayan sidoseleccionados para una entrevista.

Network & Infrastructure Security Analyst (AI Training)
About The Role
We partner with the world's leading AI research teams and labs to build and train cutting-edge AI models. Now, we're looking for hands-on infrastructure security practitioners to bring their real-world expertise to the frontier of AI development.

Your knowledge of how enterprise networks get attacked, misconfigured, and defended will directly shape how AI understands and responds to security threats. This is a rare opportunity to do meaningful, high-impact work — on your own schedule, from anywhere.

• Organization: Alignerr
• Type: Hourly Contract
• Location: Remote
• Commitment: 10–40 hours/week

What You'll Do

• Analyze network, endpoint, and email security scenarios across modern enterprise environments
• Review firewall, EDR, and infrastructure security cases to determine what went wrong and why
• Classify incidents, misconfigurations, and control failures based on real operational data
• Create, label, and validate security training and evaluation datasets used to improve AI systems
• Clearly explain security issues, root causes, and business impact in structured formats

Who You Are

• 2+ years of hands-on experience in network, infrastructure, or endpoint security
• Familiar with firewalls, EDR platforms, email security, IAM, SIEMs, and enterprise tooling
• Strong understanding of how real organizations deploy and operate security controls
• Able to communicate technical findings clearly — in writing, for both technical and non-technical audiences
• Detail-oriented, self-directed, and comfortable working asynchronously

Nice to Have

• Experience with incident response, threat hunting, or red/blue team operations
• Familiarity with security frameworks such as MITRE ATT&CK, NIST, or CIS Controls
• Background in security architecture, cloud infrastructure security, or compliance

Why Join Us

• Work directly on frontier AI systems with leading research labs
• Fully remote and flexible — work on your own schedule
• Freelance perks: autonomy, variety, and global collaboration
• Your security expertise shapes how AI defends against real-world threats
• Potential for ongoing work and contract extension