Who We Are

Wayfair is a dynamic, cutting-edge technology company operating in the ecommerce space. We’re committed to providing our customers with a best-in-class experience for all things home. We’re looking for an experienced Senior Engineer for our Enterprise Cybersecurity team. The Enterprise Cybersecurity (ECS) team is responsible for protecting the technologies used by Wayfairians to operate the business, including devices, data and the networks utilized in the warehouses, call centers, and corporate offices. The team is also responsible for managing & supporting a small portfolio of security tools such as Proofpoint, Axonius, and SentinelOne.

This position is a hybrid in-office role that works out of our Toronto HQ. Tuesday-Thursday will be working in office.

What You’ll Do

• Be a subject matter expert for enterprise cybersecurity - design and implement preventative measures to protect Wayfair from outside attackers and insider threats
• Balance usability and flexibility for our users against security for corporate, warehouse, contact center, and physical retail Wayfairians
• Harden endpoints, networks, and applications used by various Wayfair business units
• Improve the security architecture of on premise and cloud infrastructure; harden SaaS and public cloud platforms used by the enterprise including Azure and GCP
• Architect and deploy Google GCP and BeyondCorp security technologies, such as context-aware access (CAA) and identity-aware proxy (IAP)
• Provide technical support and guidance to team members, ensuring the secure, scalable operation of our platform
• Conduct security reviews for the configuration and implementation of technical services

What You’ll Need

• 5+ years of experience in a security or information technology related field
• Experience in hardening endpoints and servers against threats
• Proficiency with infrastructure-as-code (such as Terraform and DSC), including extensive experience with Python
• Strong knowledge of foundational network security concepts such as wireless technologies, layer 7 firewalls, and VLANs 
• Experience providing architecture proposals, which follow security best practices to cross-functional IT teams
• A deep understanding of the Zero Trust security architecture
• Hands-on experience securing cloud platforms such as Azure or GCP
• Experience with authentication and authorization technologies such as SSO Providers, SAML, OAuth2.0, or OPA