Middle Python Developer - Cloud Security & AWS

Location: Warsaw, Poland (Hybrid preferred, open to remote within Poland)

Experience: 3+ years

Job Description:

Backend Engineer - Security & Mobile Connectivity

Team Description

The team manages the Splunk Connected Experiences ecosystem, bridging the gap between core data and mobile accessibility. We specialize in the administration of Splunk Secure Gateway, leveraging Spacebridge technology to provide end-to-end encrypted, VPN-less access to operational intelligence. We are dedicated to maintaining a secure, high-performance infrastructure that allows stakeholders to monitor system health and respond to critical incidents via Splunk Mobile, ensuring data integrity through advanced MDM integrations, security ecosystems, and SAML authentication.

Role Overview

We are seeking a highly skilled Backend Engineer to contribute to our engineering initiatives, with a focus on building secure, scalable, and high-performance backend systems. This role demands a robust understanding of backend architecture, security integrations, and practical experience with a suite of contemporary technologies including Splunk Secure Gateway, Splunk Mobile.

Core Technical Requirements

Languages & Frameworks

• Proficiency in Python 3 for backend service development.
• Experience building RESTful APIs and microservices architectures.
• Familiarity with React for collaborating on frontend interactions.

Cloud Infrastructure (AWS)

AWS DynamoDB: NoSQL data modeling and management.

AWS IAM: Role-based access control and security policy enforcement.

AWS Lambda & API Gateway: Serverless architecture patterns.

Data Management & Caching

• Proficiency with Redis for in-memory caching, session management, and high-availability cluster configurations.

Containerization & Orchestration

Docker & Docker Compose: Containerized development and multi-service environments.

Kubernetes: Orchestration, scaling, and operations of containerized applications.

Helm: Chart management and cluster administration.

Security & Integration Requirements

Splunk & Mobile Connectivity

Splunk Secure Gateway: Administer and configure the Gateway to facilitate encrypted, VPN-less communication between Splunk instances and mobile devices via Spacebridge.

Splunk Mobile Deployment: Manage the rollout of Splunk Mobile to provide stakeholders with real-time alerts and mobile-optimized dashboards (Dashboard Studio/Classic).

Secure Firewall App for Splunk: Integration with Firewall Management Center (FMC) and configuration of eStreamer Client Add-On for data ingestion.

Secure Network Analytics (SNA): SSL certificate management and Webhook setup for forwarding alerts to Splunk HTTP Event Collector (HEC).

Authentication & Access Control

SAML 2.0 & SSO: Hands-on experience with Identity Providers (IdP), Active Directory (AD) attribute mapping, and SAML group/role configuration.

Identity Security: Experience with Duo Single Sign-On and Two-Factor Authentication (2FA) policy enforcement.

Endpoint Security Analytics

Responsibilities

Design & Develop: Build and maintain scalable backend services and APIs that power our secure data pipelines.

Secure Connectivity: Implement and manage secure communication flows via Splunk Secure Gateway and Spacebridge.

Security Integration: Collaborate with security teams on Secure Firewall and SNA integrations to build real-time threat discovery dashboards.

Infrastructure Management: Manage containerized deployments using Docker and Kubernetes while optimizing AWS and Redis performance.

Mobile Optimization: Ensure critical business metrics and alerts are securely accessible via Splunk Mobile.

⭐ Desirable Experience

Protobuf for efficient data serialization.

WebSockets for real-time bidirectional communication.

Duo Network Gateway (DNG) for secure access to on-premises web applications and SSH/RDP hosts.

• Knowledge of DMZ architecture and secure network design principles.

Qualifications

• Bachelor's degree in Computer Science, Engineering, or related field.

3+ years of backend engineering experience.

• Strong understanding of network security principles and enterprise data privacy.