Job Description
Undelucram.ro on behalf of:
EPAM Romania
EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.
We are seeking a Key Developer with hands-on experience working on Platform side for Enterprise Networking Appliances, experience working in Networking Security products preferably in SSL-VPN, NAC, WAF or Firewall products.
Responsibilities
EPAM Romania
EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.
We are seeking a Key Developer with hands-on experience working on Platform side for Enterprise Networking Appliances, experience working in Networking Security products preferably in SSL-VPN, NAC, WAF or Firewall products.
Responsibilities
- Product & Stack description
- ICS: Ivanti Connect secure
- Linux appliance SSL VPN (L3, L4 VPN)
- Runs on Ivanti custom Hardware (Ivanti Secure Access) and VMs
- Hardware: SuperMicro Intel appliance
- Centos 7. 9 derived
- Customized Ubuntu Kernel (4.x)
- 100+ customized OSS components
- Core Code implemented in C++ (32-bit code)
- Python flask API front end
- Web frontend Perl CGI based
- Core Code 10+ years old
- Preliminary Security Hardening roadmap
- CentOS 7.9 to Oracle 9 migration
- Remove customize OSS components. Update application stack in process
- Convert 32 bit to 64-bit code
- Upgrade Kernel to Oracle Linux 5.14 Kernel
- Modernize compiler used for compilation application stack
- Support VM & Ivanti Secure Access (ISA) Hardware
- Support in-place upgrade for VM
- Support SE Linux on new OS
- Non-root privilege for ICS services
- Protect/Secure Factory Reset Partition to prevent tampering
- Re-do key management and secure with TPM Chip
- C/C++
- Linux Kernel/Linux OS Internals
- Linux user space expertise
- Network programming (DHCP, TCP/IP, AAA, RADIUS, LDAP, SNMP, 802.1X, IPSec)
- Enterprise Linux Experience
- Linux Bootloader experience
- SE Linux
- Perl & Python – Nice to have