Zero Trust Engineer II

Posted:
3/23/2025, 5:00:00 PM

Location(s):
Florida, United States ⋅ Orlando, Florida, United States

Experience Level(s):
Junior ⋅ Mid Level

Field(s):
Software Engineering

Workplace Type:
Remote

**Relocation Assistance Available**

Position Summary

As a member of the professional staff, contributes general knowledge and skill in a discipline (e.g., Accounting, Finance, Human Resources, Inventory, Revenue Management, Information Resources, Operations Planning & Support, Sales & Marketing) area to support team and/or department objectives. Generally, works under limited supervision, but within established guidelines, producing and analyzing more complex business information to assist in the decision-making process.

Business Context

Marriott Vacations Worldwide (MVW) is a leading global vacation company that offers vacation ownership, exchange, rental and resort and property management, along with related businesses, products, and services. The Company has over 120 vacation ownership resorts and approximately 700,000 owner families in a diverse portfolio that includes some of the most iconic vacation ownership brands. The Company also operates exchange networks and membership programs comprised of nearly 3,200 affiliated resorts in over 90 countries and territories, as well as provides management services to other resorts and lodging properties.

As a leader and innovator in the vacation ownership industry, the Company upholds the highest standards of excellence in serving its customers, investors and associates while maintaining exclusive, long-term relationships with Marriott International, Inc. and Hyatt Hotels Corporation for the development, sales and marketing of vacation ownership products and services.

The vision of MVW is to strive to build long-lasting relationships with their Owners, Members, customers, and associates to help them live their lives to the fullest. Innovation. Integrity. Excellence. This is the story of MVW. And while the company spans brands and businesses, decades and continents, their shared inspiration continues to drive them forward: delivering unforgettable experiences that make vacation dreams come true.

Global Technology Context

The Global Technology (GT) team at Marriott Vacations Worldwide (MVW) is on a multi-year journey to modernize technical and digital products and platforms across all business lines. This role demands a visionary leader with a technical understanding of the range of resort operations technical products in solving complex business challenges. Proven success as a leader in recruiting, developing, and retaining technical talent on high performing teams is required. The incumbent is a proven thought leader, a consensus builder, and an integrator of people, processes, and technology.

Specific Job Summary

The Zero Trust Security Engineer II will function as a technology principal providing technical management of operations, and technical assistance of Zero-Trust focused Information Security systems both on premises and in the cloud.  The Zero Trust Engineer will contribute heavily to the further maturity and development of our Zero Trust segmentation security strategies. This role will be responsible for designing, implementing, testing, and maintaining a Zero Trust security model to protect the IT infrastructure and data. Also, this role is involved in collaborating with multi-disciplinary teams to ensure that security is integrated into all aspects of our technology enterprise ecosystem. The ideal candidate will have experience in cybersecurity, network architecture, and Zero Trust principles.

Additionally, this role serves as an escalation point for technical problem analysis and resolution related to Zero Trust technology Operations. It requires hands-on technical work and a strong understanding of information security challenges, domains, concepts, and principles.

This position involves leading operations, maintenance, and configuration of key enterprise security devices supporting Information Security Engineering.

Working Relationships:

  • Information Security Operations support team
  • Security Architecture
  • Cyber Security Office
  • GT and business groups in the delivery and support of Information Security solutions.

Generic Expected Contributions

  • Responds to, solves, and makes decisions on more complex/non-routine business requests with limited to moderate risk.
  • Responsible for own work and contributing to team, department and/or business results. May direct work of non-management staff.
  • Assists more senior associates in achieving business results by:
    • identifying opportunities to enhance the effectiveness of business processes
    • participating in setting department operating plans.
    • achieving results against budget within scope of responsibility.
  • Demonstrates an awareness of personal strengths and areas for improvement and acts independently to improve and increase skills and knowledge.
  • Performs other duties as appropriate.

Specific Expected Contributions

  • Manage relationships with various internal organizations responsible for network and system infrastructure
  • Design and implement a Zero Trust security architecture to enhance our data security posture.
  • Develop and enforce security policies and procedures based on Zero Trust principles.
  • Collaborate with IT, DevOps, and security teams to integrate Zero Trust controls across all systems and applications.
  • Assist in risk assessments and vulnerability analyses to identify and mitigate security risks.
  • Implement and manage identity and access management (IAM) solutions, including multi-factor authentication (MFA) and least privilege access.
  • Perform continuous assessments of network security, endpoint protections, and data access policies to ensure adherence to Zero Trust principles.
  • Monitor and analyze network traffic to detect and respond to security incidents.
  • Develop and maintain documentation for Zero Trust architecture, policies and procedures.
  • Translate business requirements into technical designs and code implementations, ensuring the delivery of high-quality software solutions.
  • Participate in security audits and compliance efforts to ensure adherence to relevant standards and regulations.
  • Serves as first-level 24/7 escalation point for Zero Trust Operations, technical problem analysis and resolution related to network and system security.
  • Provides analytical and technical engineering in the assessment of new security tools and technologies, recommend security related products for consideration within the MVW Information Protection environment.
  • Successful management and support of technologies that support network and system security, including but not limited to:
    • Illumio network segmentation
    • Zscaler Web Protection and Cloud Firewall
    • Application integrations with key data sources such as ServiceNow
  • Supports the technical engineers in performing research, analysis, and design of enterprise security solutions to meet current and future governance and compliance requirements
  • Supports the ability to direct the team to limit or contain the impact of a potential cybersecurity event
  • Supports efforts to operationalize security solutions from the design specifications, product installation, maintenance, and performance tuning

Candidate Profile

Successful candidates should possess knowledge and experience and demonstrate leadership skills as follows:

Generally, a professional position with specific knowledge in a discipline (e.g., Accounting, Human Resources, Information Technology).  College degree and/or relevant experience typically required.

Specific Candidate Profile

Education

  • Bachelor’s degree in computer science or management information systems, or related discipline or equivalent work experience.
  • Master’s degree in information security or related discipline preferred.

Certifications Preferred

  • Certified Information Systems Security Professional (CISSP)
  • Security+
  • Certified Information Security Manager (CISM)

Experience

  • At least 8 years' experience in enterprise network security experience in roles such as firewall engineering, intrusion detection, or Security Information and Event Management (SIEM) analysis.

Skills and Attributes

  • Analytical and Strategic Thinking
    • Exceptional analytical skills to interpret complex data and information security challenges.
  • Technical
    • Strong understanding of information security challenges, domains, concepts, and principles.
    • Extensive firsthand experience with implementing and managing Zero Trust Network Access (ZTNA) solutions using leading platforms such as Illumio, Zscaler, and Cloudflare
    • Ensuring secure, scalable, and policy-driven access to organizational resources.
    • Proven expertise in designing, implementing, and managing Zero Trust cloud security solutions within Amazon AWS and Microsoft Azure environments, leveraging native and third-party security tools integrations to ensure robust protection, compliance, and risk mitigation across cloud infrastructures.
    • In-depth understanding of standard Zero Trust architectures and security frameworks.
    • Proficiency with automation tools, including SOAR platforms and security automation workflows.
    • Familiarity with network segmentation, multi-factor authentication (MFA), and least privilege access models.
    • Hands-on experience with enterprise security solutions, including firewall configuration, IDS/IPS systems, SIEM platforms (e.g., Splunk, Elastic Security).
    • Knowledge of network protocols, encryption mechanisms, and access control technologies.
  • Interpersonal Skills
    • Communication: Proven verbal and written communication skills to convey technical concepts to non-technical stakeholders in easy-to-understand ways.
    • Collaboration: Proven ability to collaborate withing the Global Technology organization at all levels, vendors, and Managed Services providers to architect solutions and oversee successful project implementations.
  • Additional Attributes
    • Ability to multi-task, problem solve and meet deadlines.
    • Willingness to work outside of regular business hours as required which can include evenings, weekends, and holidays.
    • Proficiency in creating and maintaining technical documentation, security reports, and compliance-related materials.
    • Strong attention to detail, ensuring that all security measures are meticulously applied and monitored.
    • Adaptability and ability to stay current on emerging cybersecurity trends and evolving threats.
    • Comfort with remote work, when required, including the use of collaboration platforms (e.g., Microsoft Teams, Slack, Zoom).

Marriott Vacations Worldwide is an equal opportunity employer committed to hiring a diverse workforce and sustaining an inclusive culture.