NO SPONSORSHIP - C Security Engineering/Architect - Controls Rate: Open C2C LOCATION: Remote if in: IL, TX, FL, GA, MA, MD, MN, NC, NJ, NY, DC, WI Looking for a candidate with security architecture, security controls, cloud on premise design implementation. Application security control implementation, control validation adversarial testing windows services end users NIST CSF FFIEC OWASP IAM network access control PKI Firewalls IPS AWS COBIT NIST NIST CSF ISO experience working with regulatory frameworks SCI CFTC 99.18 etc. Description: This position will support the Security Architecture team responsible for architecture of the security controls environment in the cloud and on-premise and ensuring that security requirements are met in systems design and implementation. This individual will work with the Security Architecture team to problem solve, define requirements and scope for application security, Control implementation, control validation and adversarial testing. The position will include extensive interaction with IT, Security Engineering, Security Assurance, EPMO, Windows services, and end-users for the duration of the engagement. Conduct architectural Security control validation testing processes Define security requirements aligned with current threat intelligence and industry standards such as the NIST CSF, CSA, FFIEC, OWASP Review current system security measures and recommending and implementing enhancements. Conduct market surveys of security tooling to identify potential replacements or upgrades to enhance security and resilience Partnering with IT department to design and implement effective Embedded security capabilities Drive the maturation and automation of Security information dissemination and oversight processes Support Security Assurance in assessing the effectiveness of planned remediations for identified security defects Produce reporting and documentation artifacts for leadership and staff relating to security related activities Ensure alignment of security controls and supporting services and related policies and procedures with applicable regulations and industry standard best practices Assists Security Analysts, transferring technical and risk management knowledge Assist in project planning, program development, and process formalization. Perform other duties as assigned SKILL AND EXPERIENCE REQUIRED: Bachelor degree in Computer Science, Management Information Systems, Statistics & Quantitative Modeling, Mathematics a plus or the equivalent combination of education and/or relevant experience. 10 years hands-on Information Security architecture or engineering Experience with design and specification of security control technologies such as IAM, Network Access Controls, PKI, Firewalls, IPS Experience with AWS and cloud-native tools desired; training provided as needed. Advanced understanding of information related frameworks and standards such as COBIT, NIST 800-53, NIST CSF, ISO etc. Experience in security risk management principles and practices. Experience in working with regulatory frameworks and requirements relevant to OCC such as, Reg SCI, CFTC 99.18, etc. Professional security certifications a plus (ie, AWS, CSA, GIAC, CISSP, CISA, CISM, CRISC)
05/09/2024
Project-based
NO SPONSORSHIP - C Security Engineering/Architect - Controls Rate: Open C2C LOCATION: Remote if in: IL, TX, FL, GA, MA, MD, MN, NC, NJ, NY, DC, WI Looking for a candidate with security architecture, security controls, cloud on premise design implementation. Application security control implementation, control validation adversarial testing windows services end users NIST CSF FFIEC OWASP IAM network access control PKI Firewalls IPS AWS COBIT NIST NIST CSF ISO experience working with regulatory frameworks SCI CFTC 99.18 etc. Description: This position will support the Security Architecture team responsible for architecture of the security controls environment in the cloud and on-premise and ensuring that security requirements are met in systems design and implementation. This individual will work with the Security Architecture team to problem solve, define requirements and scope for application security, Control implementation, control validation and adversarial testing. The position will include extensive interaction with IT, Security Engineering, Security Assurance, EPMO, Windows services, and end-users for the duration of the engagement. Conduct architectural Security control validation testing processes Define security requirements aligned with current threat intelligence and industry standards such as the NIST CSF, CSA, FFIEC, OWASP Review current system security measures and recommending and implementing enhancements. Conduct market surveys of security tooling to identify potential replacements or upgrades to enhance security and resilience Partnering with IT department to design and implement effective Embedded security capabilities Drive the maturation and automation of Security information dissemination and oversight processes Support Security Assurance in assessing the effectiveness of planned remediations for identified security defects Produce reporting and documentation artifacts for leadership and staff relating to security related activities Ensure alignment of security controls and supporting services and related policies and procedures with applicable regulations and industry standard best practices Assists Security Analysts, transferring technical and risk management knowledge Assist in project planning, program development, and process formalization. Perform other duties as assigned SKILL AND EXPERIENCE REQUIRED: Bachelor degree in Computer Science, Management Information Systems, Statistics & Quantitative Modeling, Mathematics a plus or the equivalent combination of education and/or relevant experience. 10 years hands-on Information Security architecture or engineering Experience with design and specification of security control technologies such as IAM, Network Access Controls, PKI, Firewalls, IPS Experience with AWS and cloud-native tools desired; training provided as needed. Advanced understanding of information related frameworks and standards such as COBIT, NIST 800-53, NIST CSF, ISO etc. Experience in security risk management principles and practices. Experience in working with regulatory frameworks and requirements relevant to OCC such as, Reg SCI, CFTC 99.18, etc. Professional security certifications a plus (ie, AWS, CSA, GIAC, CISSP, CISA, CISM, CRISC)
*We are unable to sponsor for this permanent Full time role* *Position is bonus eligible* Prestigious Enterprise Company is currently seeking a Senior Director Network Infrastructure Architecture. Candidate will provide top level design and integration of infrastructure related platform areas: End user supporting services Responsible for core infrastructure from perimeter to virtual edge (excludes clusters, service mesh, containers, and virtualized hosting) Core Network Services (Routing, Switching, Wi-Fi, Data Center, and End User Connectivity) Enterprise SDN/SDWAN Strategy Zero Trust Strategy and Roadmap Perimeter Security & Operations Network based services (DNS, Directory, IP Management, Proxies, Load Balancers) Automation COE (FN - This should be a discussion point) In addition, as a direct report you will provide oversight of special programs in progress (ie Operational Automation, Secure File Transfer). Team is comprised of 60+ FTEs, enterprise vendor contracts, software licensing and significant component and hardware assets. This role requires strong leadership, communication, influencing skills, technical and operational capabilities. This leader will be accountable to participate in the design and documentation of Enterprise Operations & Technology EOT) technology strategy. The candidate needs to establish strong relationship with their functional counterparts. You will be responsible for all enterprise administrative duties: Risk and Controls, Workforce Management (Performance, Recruiting, Training, Succession, Program Management and Financial). Responsibilities: Mentor existing team managers as the company embarks on building technology service automation to lead Technology delivery and Operations to improve efficiency Adopt and champion Agile methodologies to improve workflow velocity and improve leadership insight into project timelines and efficiency Standardize and automate processes aligned with enterprise frameworks to ensure sustainability and consistency Define and document high level understanding of division application workstreams Collaboration with IT teams to drive workflow efficiency in partnership with division COO organization Drive and adopt a culture driven by data - where key performance indicators are gathered from top to bottom and fed to automated tooling to improve system reliability and performance Prototype new tools & technologies based on organizational strategy and evolving threats while looking for opportunities to optimize, consolidate and manage out tools that no longer meet company needs Keep a critical eye towards what's working and what's not optimal to drive improvements Qualifications: The candidate must have implementation and operations of Software Defined Infrastructure, concepts in cloud technology and software defined architectures The candidate must understand how to design service taxonomy and develop Middleware/glue ware components to support self-service and dynamic binding of services developed by other functional areas 15+ years of Technology Management experience of large technology areas Lead and contribute to technology direction Lead and contribute to team development and workforce strategy 15+ years in running technology operations Core Network Services (Routing, Switching, Wi-Fi, Data Center and End User Connectivity) Enterprise SDN/SDWAN Strategy Zero Trust Strategy and Roadmap Perimeter Security Expert in networking design or operations Experience in vendor management. Experience in Operational Risk Management and three lines of defense operating models. Development experience a plus. Experience designing and implementing self-service capabilities via automation for the technology services under their remit. Experience participating in discussions with senior leadership to understand the vision and strategic goals being supported by the team. Experience with communicating and influencing senior business leaders in operational and risk management of their IAM landscape Experience communicating project and budget status to senior leadership on regular, defined intervals. Experience with business financial management, compliance and regulatory requirements, program management, change management and risk management Degree in Computer Science, Engineering, or relative experience
05/09/2024
Full time
*We are unable to sponsor for this permanent Full time role* *Position is bonus eligible* Prestigious Enterprise Company is currently seeking a Senior Director Network Infrastructure Architecture. Candidate will provide top level design and integration of infrastructure related platform areas: End user supporting services Responsible for core infrastructure from perimeter to virtual edge (excludes clusters, service mesh, containers, and virtualized hosting) Core Network Services (Routing, Switching, Wi-Fi, Data Center, and End User Connectivity) Enterprise SDN/SDWAN Strategy Zero Trust Strategy and Roadmap Perimeter Security & Operations Network based services (DNS, Directory, IP Management, Proxies, Load Balancers) Automation COE (FN - This should be a discussion point) In addition, as a direct report you will provide oversight of special programs in progress (ie Operational Automation, Secure File Transfer). Team is comprised of 60+ FTEs, enterprise vendor contracts, software licensing and significant component and hardware assets. This role requires strong leadership, communication, influencing skills, technical and operational capabilities. This leader will be accountable to participate in the design and documentation of Enterprise Operations & Technology EOT) technology strategy. The candidate needs to establish strong relationship with their functional counterparts. You will be responsible for all enterprise administrative duties: Risk and Controls, Workforce Management (Performance, Recruiting, Training, Succession, Program Management and Financial). Responsibilities: Mentor existing team managers as the company embarks on building technology service automation to lead Technology delivery and Operations to improve efficiency Adopt and champion Agile methodologies to improve workflow velocity and improve leadership insight into project timelines and efficiency Standardize and automate processes aligned with enterprise frameworks to ensure sustainability and consistency Define and document high level understanding of division application workstreams Collaboration with IT teams to drive workflow efficiency in partnership with division COO organization Drive and adopt a culture driven by data - where key performance indicators are gathered from top to bottom and fed to automated tooling to improve system reliability and performance Prototype new tools & technologies based on organizational strategy and evolving threats while looking for opportunities to optimize, consolidate and manage out tools that no longer meet company needs Keep a critical eye towards what's working and what's not optimal to drive improvements Qualifications: The candidate must have implementation and operations of Software Defined Infrastructure, concepts in cloud technology and software defined architectures The candidate must understand how to design service taxonomy and develop Middleware/glue ware components to support self-service and dynamic binding of services developed by other functional areas 15+ years of Technology Management experience of large technology areas Lead and contribute to technology direction Lead and contribute to team development and workforce strategy 15+ years in running technology operations Core Network Services (Routing, Switching, Wi-Fi, Data Center and End User Connectivity) Enterprise SDN/SDWAN Strategy Zero Trust Strategy and Roadmap Perimeter Security Expert in networking design or operations Experience in vendor management. Experience in Operational Risk Management and three lines of defense operating models. Development experience a plus. Experience designing and implementing self-service capabilities via automation for the technology services under their remit. Experience participating in discussions with senior leadership to understand the vision and strategic goals being supported by the team. Experience with communicating and influencing senior business leaders in operational and risk management of their IAM landscape Experience communicating project and budget status to senior leadership on regular, defined intervals. Experience with business financial management, compliance and regulatory requirements, program management, change management and risk management Degree in Computer Science, Engineering, or relative experience
*We are unable to sponsor for this permanent Full time role* *Position is bonus eligible* Prestigious Enterprise Company is currently seeking a Senior Director Network Infrastructure Architecture. Candidate will provide top level design and integration of infrastructure related platform areas: End user supporting services Responsible for core infrastructure from perimeter to virtual edge (excludes clusters, service mesh, containers, and virtualized hosting) Core Network Services (Routing, Switching, Wi-Fi, Data Center, and End User Connectivity) Enterprise SDN/SDWAN Strategy Zero Trust Strategy and Roadmap Perimeter Security & Operations Network based services (DNS, Directory, IP Management, Proxies, Load Balancers) Automation COE (FN - This should be a discussion point) In addition, as a direct report you will provide oversight of special programs in progress (ie Operational Automation, Secure File Transfer). Team is comprised of 60+ FTEs, enterprise vendor contracts, software licensing and significant component and hardware assets. This role requires strong leadership, communication, influencing skills, technical and operational capabilities. This leader will be accountable to participate in the design and documentation of Enterprise Operations & Technology EOT) technology strategy. The candidate needs to establish strong relationship with their functional counterparts. You will be responsible for all enterprise administrative duties: Risk and Controls, Workforce Management (Performance, Recruiting, Training, Succession, Program Management and Financial). Responsibilities: Mentor existing team managers as the company embarks on building technology service automation to lead Technology delivery and Operations to improve efficiency Adopt and champion Agile methodologies to improve workflow velocity and improve leadership insight into project timelines and efficiency Standardize and automate processes aligned with enterprise frameworks to ensure sustainability and consistency Define and document high level understanding of division application workstreams Collaboration with IT teams to drive workflow efficiency in partnership with division COO organization Drive and adopt a culture driven by data - where key performance indicators are gathered from top to bottom and fed to automated tooling to improve system reliability and performance Prototype new tools & technologies based on organizational strategy and evolving threats while looking for opportunities to optimize, consolidate and manage out tools that no longer meet company needs Keep a critical eye towards what's working and what's not optimal to drive improvements Qualifications: The candidate must have implementation and operations of Software Defined Infrastructure, concepts in cloud technology and software defined architectures The candidate must understand how to design service taxonomy and develop Middleware/glue ware components to support self-service and dynamic binding of services developed by other functional areas 15+ years of Technology Management experience of large technology areas Lead and contribute to technology direction Lead and contribute to team development and workforce strategy 15+ years in running technology operations Core Network Services (Routing, Switching, Wi-Fi, Data Center and End User Connectivity) Enterprise SDN/SDWAN Strategy Zero Trust Strategy and Roadmap Perimeter Security Expert in networking design or operations Experience in vendor management. Experience in Operational Risk Management and three lines of defense operating models. Development experience a plus. Experience designing and implementing self-service capabilities via automation for the technology services under their remit. Experience participating in discussions with senior leadership to understand the vision and strategic goals being supported by the team. Experience with communicating and influencing senior business leaders in operational and risk management of their IAM landscape Experience communicating project and budget status to senior leadership on regular, defined intervals. Experience with business financial management, compliance and regulatory requirements, program management, change management and risk management Degree in Computer Science, Engineering, or relative experience
04/09/2024
Full time
*We are unable to sponsor for this permanent Full time role* *Position is bonus eligible* Prestigious Enterprise Company is currently seeking a Senior Director Network Infrastructure Architecture. Candidate will provide top level design and integration of infrastructure related platform areas: End user supporting services Responsible for core infrastructure from perimeter to virtual edge (excludes clusters, service mesh, containers, and virtualized hosting) Core Network Services (Routing, Switching, Wi-Fi, Data Center, and End User Connectivity) Enterprise SDN/SDWAN Strategy Zero Trust Strategy and Roadmap Perimeter Security & Operations Network based services (DNS, Directory, IP Management, Proxies, Load Balancers) Automation COE (FN - This should be a discussion point) In addition, as a direct report you will provide oversight of special programs in progress (ie Operational Automation, Secure File Transfer). Team is comprised of 60+ FTEs, enterprise vendor contracts, software licensing and significant component and hardware assets. This role requires strong leadership, communication, influencing skills, technical and operational capabilities. This leader will be accountable to participate in the design and documentation of Enterprise Operations & Technology EOT) technology strategy. The candidate needs to establish strong relationship with their functional counterparts. You will be responsible for all enterprise administrative duties: Risk and Controls, Workforce Management (Performance, Recruiting, Training, Succession, Program Management and Financial). Responsibilities: Mentor existing team managers as the company embarks on building technology service automation to lead Technology delivery and Operations to improve efficiency Adopt and champion Agile methodologies to improve workflow velocity and improve leadership insight into project timelines and efficiency Standardize and automate processes aligned with enterprise frameworks to ensure sustainability and consistency Define and document high level understanding of division application workstreams Collaboration with IT teams to drive workflow efficiency in partnership with division COO organization Drive and adopt a culture driven by data - where key performance indicators are gathered from top to bottom and fed to automated tooling to improve system reliability and performance Prototype new tools & technologies based on organizational strategy and evolving threats while looking for opportunities to optimize, consolidate and manage out tools that no longer meet company needs Keep a critical eye towards what's working and what's not optimal to drive improvements Qualifications: The candidate must have implementation and operations of Software Defined Infrastructure, concepts in cloud technology and software defined architectures The candidate must understand how to design service taxonomy and develop Middleware/glue ware components to support self-service and dynamic binding of services developed by other functional areas 15+ years of Technology Management experience of large technology areas Lead and contribute to technology direction Lead and contribute to team development and workforce strategy 15+ years in running technology operations Core Network Services (Routing, Switching, Wi-Fi, Data Center and End User Connectivity) Enterprise SDN/SDWAN Strategy Zero Trust Strategy and Roadmap Perimeter Security Expert in networking design or operations Experience in vendor management. Experience in Operational Risk Management and three lines of defense operating models. Development experience a plus. Experience designing and implementing self-service capabilities via automation for the technology services under their remit. Experience participating in discussions with senior leadership to understand the vision and strategic goals being supported by the team. Experience with communicating and influencing senior business leaders in operational and risk management of their IAM landscape Experience communicating project and budget status to senior leadership on regular, defined intervals. Experience with business financial management, compliance and regulatory requirements, program management, change management and risk management Degree in Computer Science, Engineering, or relative experience
Long term contract role - remote rate is around $115 c2c CYBERSECURITY ENGINEER/ARCHITECT Must have very clear communication skills Mandatory Technical Skills: Strong knowledge of network security protocols, best practices, and perimeter security tools Strong knowledge of IAM controls, including SAML and OAUTH/OIDC based authentication, Active Directory, and role mapping Understanding of common security control solutions for event logging, remote access, endpoint management, and mobile device management Understanding of common data protection technologies such as cryptography, tokenization, and hashing Additional Technical Skills: Understanding of Azure native security services and best practices Strong knowledge of threat modelling and risk assessment technologies or frameworks Desired Skills: Architecture Skills The candidate shall have the experience on developing secure view of architecture and secure design documents for different applications ability to lead the exercise of collecting the required data to produce the deliverables Ability to articulate the requirements in technical and non technical language Ability to defend secure design and support it with real life scenarios Ability to articulate the risk and findings in business language Explain vulnerabilities and threats Threat modelling Recent attacks Application Security Focus Areas Secure Code Development Secure SDLC Secure Agile development Testing Security requirements Writing security stories Web Application Security Owasp 10 SAST and DAST Scan API Security CI/CD pipeline Integrate security tools Security testing Cloud Security Focus Area Shared Responsibility model Secure services in the cloud Infrastructure security in the cloud Secure boundaries Authentication & Authorization security services in the Cloud Cloud Native VS Third party security capabilities Container Security Container security life cycle Image scanning
03/09/2024
Project-based
Long term contract role - remote rate is around $115 c2c CYBERSECURITY ENGINEER/ARCHITECT Must have very clear communication skills Mandatory Technical Skills: Strong knowledge of network security protocols, best practices, and perimeter security tools Strong knowledge of IAM controls, including SAML and OAUTH/OIDC based authentication, Active Directory, and role mapping Understanding of common security control solutions for event logging, remote access, endpoint management, and mobile device management Understanding of common data protection technologies such as cryptography, tokenization, and hashing Additional Technical Skills: Understanding of Azure native security services and best practices Strong knowledge of threat modelling and risk assessment technologies or frameworks Desired Skills: Architecture Skills The candidate shall have the experience on developing secure view of architecture and secure design documents for different applications ability to lead the exercise of collecting the required data to produce the deliverables Ability to articulate the requirements in technical and non technical language Ability to defend secure design and support it with real life scenarios Ability to articulate the risk and findings in business language Explain vulnerabilities and threats Threat modelling Recent attacks Application Security Focus Areas Secure Code Development Secure SDLC Secure Agile development Testing Security requirements Writing security stories Web Application Security Owasp 10 SAST and DAST Scan API Security CI/CD pipeline Integrate security tools Security testing Cloud Security Focus Area Shared Responsibility model Secure services in the cloud Infrastructure security in the cloud Secure boundaries Authentication & Authorization security services in the Cloud Cloud Native VS Third party security capabilities Container Security Container security life cycle Image scanning
*We are unable to sponsor for this permanent Full time role* *Position is bonus eligible* Prestigious Global Firm is currently seeking a Senior Identity and Access Management Engineer with strong ForgeRock experience. Candidate will be integrating internal applications with ForgeRock Identity suite using OAuth methodologies and custom scopes, coordinating directly with application development teams and enterprise architecture. Team Members collaborate daily for IAM System design and implementation, as well as assist with operational support in Identity and Access related functions. Responsibilities: Administration and configuration of our IAM products and processes with an emphasis on ForgeRock Identity products. Developing custom integration, workflows and rules between tools using Agile methodologies. Planning, implementation, enforcement and review of security policies, procedures, and controls specific to Identity Access Management. Processing access requests and issue tickets for internal and external customers Leading troubleshooting and resolution of system issues that might contribute to enterprise Production problems. Managing project work through all phases (design, build, test, cutover). Report on controls, evidence gathering and control execution. Work collaboratively across IT and Business departments to implement technical solutions Under limited direction from management, monitor, evaluate and maintain systems and procedures to enforce best practices for user access authorization and control. Research, recommend, and implement changes to procedures and systems to enhance systems security. Assist in communicating security policies and procedures to users. Assist internal and external customers with multi-platform security access issues and requests. Assist in identifying or developing tools or methods to track and monitor risk Support management with special projects and other duties as assigned Report on controls, evidence gathering and control execution. Work collaboratively across IT and Business departments to implement technical solutions Under limited direction from management, monitor, evaluate and maintain systems and procedures to enforce best practices for user access authorization and control. Research, recommend, and implement changes to procedures and systems to enhance systems security. Assist in communicating security policies and procedures to users. Assist internal and external customers with multi-platform security access issues and requests. Assist in identifying or developing tools or methods to track and monitor risk Support management with special projects and other duties as assigned. Qualifications: Microsoft Active Directory and LDAP Experience working in and developing solutions for a highly regulated environment or organization that leverages a security framework (such as NIST, COBIT, etc). Experience supporting the ForgeRock Identity Platform including Identity Gateway, Access Manager, and Directory Server. Experience with Multi-Factor authentication protocols and systems (Entrust, Duo, or similar). Experience with Single-Sign on protocols (OIDC, OAuth2.0, SAML, SWA, etc) and systems (Okta, Ping, Siteminder, or similar). Development experience: Java, Javascript, Groovy Development experience: Python and Shell Scripting Solid understanding of Encryption and Network protocols (SSL, IPV4, HTTP) Basic knowledge of Linux operating system administration. Basic knowledge of Windows server and desktop operating systems Basic knowledge of Amazon Web Services (AWS) Basic knowledge of Controls, Risk Ranking/mapping, Remediation items and general IT audit Preferred (nice to have) Sailpoint Identity IQ administration or experience E-GRC/Archer ServiceNow Mainframe architecture CA-ACF2 Mainframe access control facilities Directory services, LDAP, and their inherent security (Active Directory, CA Directory). Bachelor's degree in Computer Science, Engineering, or other related field, or equivalent experience 7+ Years Identity Access Management (IAM) experience preferred Hands-on IT or security operations experience Industry recognized certifications (CISSP, ITIL, etc)
03/09/2024
Full time
*We are unable to sponsor for this permanent Full time role* *Position is bonus eligible* Prestigious Global Firm is currently seeking a Senior Identity and Access Management Engineer with strong ForgeRock experience. Candidate will be integrating internal applications with ForgeRock Identity suite using OAuth methodologies and custom scopes, coordinating directly with application development teams and enterprise architecture. Team Members collaborate daily for IAM System design and implementation, as well as assist with operational support in Identity and Access related functions. Responsibilities: Administration and configuration of our IAM products and processes with an emphasis on ForgeRock Identity products. Developing custom integration, workflows and rules between tools using Agile methodologies. Planning, implementation, enforcement and review of security policies, procedures, and controls specific to Identity Access Management. Processing access requests and issue tickets for internal and external customers Leading troubleshooting and resolution of system issues that might contribute to enterprise Production problems. Managing project work through all phases (design, build, test, cutover). Report on controls, evidence gathering and control execution. Work collaboratively across IT and Business departments to implement technical solutions Under limited direction from management, monitor, evaluate and maintain systems and procedures to enforce best practices for user access authorization and control. Research, recommend, and implement changes to procedures and systems to enhance systems security. Assist in communicating security policies and procedures to users. Assist internal and external customers with multi-platform security access issues and requests. Assist in identifying or developing tools or methods to track and monitor risk Support management with special projects and other duties as assigned Report on controls, evidence gathering and control execution. Work collaboratively across IT and Business departments to implement technical solutions Under limited direction from management, monitor, evaluate and maintain systems and procedures to enforce best practices for user access authorization and control. Research, recommend, and implement changes to procedures and systems to enhance systems security. Assist in communicating security policies and procedures to users. Assist internal and external customers with multi-platform security access issues and requests. Assist in identifying or developing tools or methods to track and monitor risk Support management with special projects and other duties as assigned. Qualifications: Microsoft Active Directory and LDAP Experience working in and developing solutions for a highly regulated environment or organization that leverages a security framework (such as NIST, COBIT, etc). Experience supporting the ForgeRock Identity Platform including Identity Gateway, Access Manager, and Directory Server. Experience with Multi-Factor authentication protocols and systems (Entrust, Duo, or similar). Experience with Single-Sign on protocols (OIDC, OAuth2.0, SAML, SWA, etc) and systems (Okta, Ping, Siteminder, or similar). Development experience: Java, Javascript, Groovy Development experience: Python and Shell Scripting Solid understanding of Encryption and Network protocols (SSL, IPV4, HTTP) Basic knowledge of Linux operating system administration. Basic knowledge of Windows server and desktop operating systems Basic knowledge of Amazon Web Services (AWS) Basic knowledge of Controls, Risk Ranking/mapping, Remediation items and general IT audit Preferred (nice to have) Sailpoint Identity IQ administration or experience E-GRC/Archer ServiceNow Mainframe architecture CA-ACF2 Mainframe access control facilities Directory services, LDAP, and their inherent security (Active Directory, CA Directory). Bachelor's degree in Computer Science, Engineering, or other related field, or equivalent experience 7+ Years Identity Access Management (IAM) experience preferred Hands-on IT or security operations experience Industry recognized certifications (CISSP, ITIL, etc)
Request Technology - Craig Johnson
Chicago, Illinois
*We are unable to sponsor for this permanent Full time role* *Position is bonus eligible* Prestigious Global Firm is currently seeking a Senior Identity and Access Management Engineer with strong ForgeRock experience. Candidate will be integrating internal applications with ForgeRock Identity suite using OAuth methodologies and custom scopes, coordinating directly with application development teams and enterprise architecture. Team Members collaborate daily for IAM System design and implementation, as well as assist with operational support in Identity and Access related functions. Responsibilities: Administration and configuration of our IAM products and processes with an emphasis on ForgeRock Identity products. Developing custom integration, workflows and rules between tools using Agile methodologies. Planning, implementation, enforcement and review of security policies, procedures, and controls specific to Identity Access Management. Processing access requests and issue tickets for internal and external customers Leading troubleshooting and resolution of system issues that might contribute to enterprise Production problems. Managing project work through all phases (design, build, test, cutover). Report on controls, evidence gathering and control execution. Work collaboratively across IT and Business departments to implement technical solutions Under limited direction from management, monitor, evaluate and maintain systems and procedures to enforce best practices for user access authorization and control. Research, recommend, and implement changes to procedures and systems to enhance systems security. Assist in communicating security policies and procedures to users. Assist internal and external customers with multi-platform security access issues and requests. Assist in identifying or developing tools or methods to track and monitor risk Support management with special projects and other duties as assigned Report on controls, evidence gathering and control execution. Work collaboratively across IT and Business departments to implement technical solutions Under limited direction from management, monitor, evaluate and maintain systems and procedures to enforce best practices for user access authorization and control. Research, recommend, and implement changes to procedures and systems to enhance systems security. Assist in communicating security policies and procedures to users. Assist internal and external customers with multi-platform security access issues and requests. Assist in identifying or developing tools or methods to track and monitor risk Support management with special projects and other duties as assigned. Qualifications: Microsoft Active Directory and LDAP Experience working in and developing solutions for a highly regulated environment or organization that leverages a security framework (such as NIST, COBIT, etc). Experience supporting the ForgeRock Identity Platform including Identity Gateway, Access Manager, and Directory Server. Experience with Multi-Factor authentication protocols and systems (Entrust, Duo, or similar). Experience with Single-Sign on protocols (OIDC, OAuth2.0, SAML, SWA, etc) and systems (Okta, Ping, Siteminder, or similar). Development experience: Java, Javascript, Groovy Development experience: Python and Shell Scripting Solid understanding of Encryption and Network protocols (SSL, IPV4, HTTP) Basic knowledge of Linux operating system administration. Basic knowledge of Windows server and desktop operating systems Basic knowledge of Amazon Web Services (AWS) Basic knowledge of Controls, Risk Ranking/mapping, Remediation items and general IT audit Preferred (nice to have) Sailpoint Identity IQ administration or experience E-GRC/Archer ServiceNow Mainframe architecture CA-ACF2 Mainframe access control facilities Directory services, LDAP, and their inherent security (Active Directory, CA Directory). Bachelors degree in Computer Science, Engineering, or other related field, or equivalent experience 7+ Years Identity Access Management (IAM) experience preferred Hands-on IT or security operations experience Industry recognized certifications (CISSP, ITIL, etc)
03/09/2024
Full time
*We are unable to sponsor for this permanent Full time role* *Position is bonus eligible* Prestigious Global Firm is currently seeking a Senior Identity and Access Management Engineer with strong ForgeRock experience. Candidate will be integrating internal applications with ForgeRock Identity suite using OAuth methodologies and custom scopes, coordinating directly with application development teams and enterprise architecture. Team Members collaborate daily for IAM System design and implementation, as well as assist with operational support in Identity and Access related functions. Responsibilities: Administration and configuration of our IAM products and processes with an emphasis on ForgeRock Identity products. Developing custom integration, workflows and rules between tools using Agile methodologies. Planning, implementation, enforcement and review of security policies, procedures, and controls specific to Identity Access Management. Processing access requests and issue tickets for internal and external customers Leading troubleshooting and resolution of system issues that might contribute to enterprise Production problems. Managing project work through all phases (design, build, test, cutover). Report on controls, evidence gathering and control execution. Work collaboratively across IT and Business departments to implement technical solutions Under limited direction from management, monitor, evaluate and maintain systems and procedures to enforce best practices for user access authorization and control. Research, recommend, and implement changes to procedures and systems to enhance systems security. Assist in communicating security policies and procedures to users. Assist internal and external customers with multi-platform security access issues and requests. Assist in identifying or developing tools or methods to track and monitor risk Support management with special projects and other duties as assigned Report on controls, evidence gathering and control execution. Work collaboratively across IT and Business departments to implement technical solutions Under limited direction from management, monitor, evaluate and maintain systems and procedures to enforce best practices for user access authorization and control. Research, recommend, and implement changes to procedures and systems to enhance systems security. Assist in communicating security policies and procedures to users. Assist internal and external customers with multi-platform security access issues and requests. Assist in identifying or developing tools or methods to track and monitor risk Support management with special projects and other duties as assigned. Qualifications: Microsoft Active Directory and LDAP Experience working in and developing solutions for a highly regulated environment or organization that leverages a security framework (such as NIST, COBIT, etc). Experience supporting the ForgeRock Identity Platform including Identity Gateway, Access Manager, and Directory Server. Experience with Multi-Factor authentication protocols and systems (Entrust, Duo, or similar). Experience with Single-Sign on protocols (OIDC, OAuth2.0, SAML, SWA, etc) and systems (Okta, Ping, Siteminder, or similar). Development experience: Java, Javascript, Groovy Development experience: Python and Shell Scripting Solid understanding of Encryption and Network protocols (SSL, IPV4, HTTP) Basic knowledge of Linux operating system administration. Basic knowledge of Windows server and desktop operating systems Basic knowledge of Amazon Web Services (AWS) Basic knowledge of Controls, Risk Ranking/mapping, Remediation items and general IT audit Preferred (nice to have) Sailpoint Identity IQ administration or experience E-GRC/Archer ServiceNow Mainframe architecture CA-ACF2 Mainframe access control facilities Directory services, LDAP, and their inherent security (Active Directory, CA Directory). Bachelors degree in Computer Science, Engineering, or other related field, or equivalent experience 7+ Years Identity Access Management (IAM) experience preferred Hands-on IT or security operations experience Industry recognized certifications (CISSP, ITIL, etc)
Request Technology - Craig Johnson
San Francisco, California
*We are unable to sponsor for this 6+ month straight contract role, no 3rd party candidates will be considered* Prestigious Enterprise Company is currently seeking a Cyber Security Infrastructure Engineer and Architect with Azure experience. Candidate will be responsible for the planning, development and implementation of enterprise information security solutions (such as authentication and authorization, public key infrastructure, data loss prevention, and security event information management) to address the current and emerging security needs of the business. This role requires the solution of complex enterprise-scale information security problems. The role will design and develop new technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors. Responsibilities: Contributes to a team that ensures the security of enterprise data and systems by developing enterprise information security solutions. Creates and updates a view of IT assets, related attack surfaces, and threat actors to illustrate the flow of data and associated security threats. Researches, designs, and develops new enterprise technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors. Serves as a security expert in one or more of application development, database design, network, and/or platform (operating system) efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices. Analyzes business impact and exposure based on emerging security threats, vulnerabilities, and risks and contributes to the development and maintenance of information security architecture. Engages with security specialists and other functional area architects to ensure adequate enterprise security solutions are in place to sufficiently mitigate identified risks, and to meet business objectives and regulatory requirements. Serves as a cybersecurity subject matter expert, assessing the business impact of cybersecurity risks to the enterprise and identifying options and recommendations for mitigating those risks. Serves as an expert in one or more of platform, application, storage, network, virtualization, cloud and mobile security best practices. Cloud Security: Shared Responsibility model Secure services in the cloud Infrastructure security in the cloud Secure boundaries Authentication & Authorization security services in the Cloud Cloud Native VS Third party security capabilities Container Security Container security life cycle Image scanning Qualifications: Strong knowledge of network security protocols, best practices, and perimeter security tools Strong knowledge of identity and access management controls, including SAML and OAUTH/OIDC based authentication, Active Directory, and role mapping Understanding of common security control solutions for event logging, remote access, endpoint management, and mobile device management Understanding of common data protection technologies such as cryptography, tokenization, and hashing Understanding of Azure native security services and best practices Strong knowledge of threat modelling and risk assessment technologies or frameworks Preferred Skills: The candidate shall have the experience on developing secure view of architecture and secure design documents for different applications ability to lead the exercise of collecting the required data to produce the deliverables Ability to articulate the requirements in technical and non technical language Ability to defend secure design and support it with real life scenarios Ability to articulate the risk and findings in business language Explain vulnerabilities and threats Threat modelling Recent attacks Application Security Focus Areas Secure Code Development Secure SDLC Secure Agile development Testing Security requirements Writing security stories Web Application Security Owasp 10 SAST and DAST Scan API Security CI/CD pipeline Integrate security tools Security testing
03/09/2024
Project-based
*We are unable to sponsor for this 6+ month straight contract role, no 3rd party candidates will be considered* Prestigious Enterprise Company is currently seeking a Cyber Security Infrastructure Engineer and Architect with Azure experience. Candidate will be responsible for the planning, development and implementation of enterprise information security solutions (such as authentication and authorization, public key infrastructure, data loss prevention, and security event information management) to address the current and emerging security needs of the business. This role requires the solution of complex enterprise-scale information security problems. The role will design and develop new technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors. Responsibilities: Contributes to a team that ensures the security of enterprise data and systems by developing enterprise information security solutions. Creates and updates a view of IT assets, related attack surfaces, and threat actors to illustrate the flow of data and associated security threats. Researches, designs, and develops new enterprise technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors. Serves as a security expert in one or more of application development, database design, network, and/or platform (operating system) efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices. Analyzes business impact and exposure based on emerging security threats, vulnerabilities, and risks and contributes to the development and maintenance of information security architecture. Engages with security specialists and other functional area architects to ensure adequate enterprise security solutions are in place to sufficiently mitigate identified risks, and to meet business objectives and regulatory requirements. Serves as a cybersecurity subject matter expert, assessing the business impact of cybersecurity risks to the enterprise and identifying options and recommendations for mitigating those risks. Serves as an expert in one or more of platform, application, storage, network, virtualization, cloud and mobile security best practices. Cloud Security: Shared Responsibility model Secure services in the cloud Infrastructure security in the cloud Secure boundaries Authentication & Authorization security services in the Cloud Cloud Native VS Third party security capabilities Container Security Container security life cycle Image scanning Qualifications: Strong knowledge of network security protocols, best practices, and perimeter security tools Strong knowledge of identity and access management controls, including SAML and OAUTH/OIDC based authentication, Active Directory, and role mapping Understanding of common security control solutions for event logging, remote access, endpoint management, and mobile device management Understanding of common data protection technologies such as cryptography, tokenization, and hashing Understanding of Azure native security services and best practices Strong knowledge of threat modelling and risk assessment technologies or frameworks Preferred Skills: The candidate shall have the experience on developing secure view of architecture and secure design documents for different applications ability to lead the exercise of collecting the required data to produce the deliverables Ability to articulate the requirements in technical and non technical language Ability to defend secure design and support it with real life scenarios Ability to articulate the risk and findings in business language Explain vulnerabilities and threats Threat modelling Recent attacks Application Security Focus Areas Secure Code Development Secure SDLC Secure Agile development Testing Security requirements Writing security stories Web Application Security Owasp 10 SAST and DAST Scan API Security CI/CD pipeline Integrate security tools Security testing
Request Technology - Craig Johnson
Chicago, Illinois
*We are unable to sponsor for this permanent Full time role* *Position is bonus eligible* Prestigious Global Firm is currently seeking a with Intune and Exchange 2019 experience. Candidate will lead a team of engineers responsible for the administration and support of essential services including Microsoft O365, Microsoft Exchange, Intune, and audio/video conferencing. The ideal candidate will ensure seamless operation, security, and compliances of these systems with exceptional leadership skills. Someone who is driven to identify opportunities for improvement and automation while meeting our compliance and regulatory requirements are essential. Responsibilities: Lead and manage a team of talented engineers by providing guidance, mentoring, and support to ensure delivery of high-quality solutions Develops short and long-term strategy for delivery of system objectives together with the technical and business product owner(s) and other partners Develop and implement strategies for secure and effective utilization of Microsoft O365, Microsoft Exchange, Microsoft Intune, WiFi, and Zoom Video Conferencing and VoiP services Oversee the planning, deployment, and management of cloud-based infrastructure and IT systems, ensuring optimal performance, scalability, and security Collaborate with cross-functional teams to understand business requirements and translate them into technical solutions Establish and maintain effective relationships with vendors to ensure their products and services align with requirements Develop and enforce IT policies, procedures, and best practices while ensuring compliance with industry standards and regulatory requirements Lead technology projects from initiation to completion ensuring timely delivery within budget and scope Remove barriers and obstacles from end user technology to enable the business Collaborate with team and SMEs to identify process pain points and opportunities to improve efficiency Analyze impact from process changes to risks and controls within processes Manage expectations and report project progress to stakeholders, team members, and management Foster a culture of innovation, collaboration, and continuous learning within the technology team Performance Management and development of the team members Qualifications: [Required] Understanding of risk and controls within processes [Required] Proven ability to communicate effectively with stakeholders, team, and leadership [Required] Ability to work proactively in identifying risks and proposing solutions [Required] Ability to plan/manage/prioritize work to meet objectives of multiple priorities/projects [Required] Strong presentation and communication skills [Required] Strong analytical skills with an interest in designing innovative solutions [Required] Strong written and verbal communication skills are critical, including the ability to discuss technical concepts with non-technical personnel [Required] Curious and adept in developing understanding about technology including industry best practices, platform capabilities, and architecture principles to help drive team productivity Technical Skills: [Required] Experience in cloud infrastructure management, virtualization, networking, and security within Microsoft technology stack [Required] Experience working with hybrid cloud environments [Required] Demonstrated understanding of Agile practices and project management methodologies [Required] Experience managing systems for e-mail security, e-mail flow design, mail hygiene, eDiscovery, and retention [Required] Experience support an enterprise Windows Server Environment (2012R2, 2016, and 2019) Education and/or Experience: [Required] Bachelor's degree in Computer Science, Information Technology or a related field. [Required] Minimum 7 years of hands-on experience in managing Microsoft environments [Required] Minimum 5 years of hands-on experience managing Active Directory & Azure [Required] Minimum 3 years of hands-on experience with Microsoft Exchange and Group Policy [Required] Minimum 3 years of hands-on experience with Microsoft O365 and Intune Certificates or Licenses: [Preferred] Relevant Microsoft certifications such as MCSE, Azure Administrator, Microsoft 365 Certified
03/09/2024
Full time
*We are unable to sponsor for this permanent Full time role* *Position is bonus eligible* Prestigious Global Firm is currently seeking a with Intune and Exchange 2019 experience. Candidate will lead a team of engineers responsible for the administration and support of essential services including Microsoft O365, Microsoft Exchange, Intune, and audio/video conferencing. The ideal candidate will ensure seamless operation, security, and compliances of these systems with exceptional leadership skills. Someone who is driven to identify opportunities for improvement and automation while meeting our compliance and regulatory requirements are essential. Responsibilities: Lead and manage a team of talented engineers by providing guidance, mentoring, and support to ensure delivery of high-quality solutions Develops short and long-term strategy for delivery of system objectives together with the technical and business product owner(s) and other partners Develop and implement strategies for secure and effective utilization of Microsoft O365, Microsoft Exchange, Microsoft Intune, WiFi, and Zoom Video Conferencing and VoiP services Oversee the planning, deployment, and management of cloud-based infrastructure and IT systems, ensuring optimal performance, scalability, and security Collaborate with cross-functional teams to understand business requirements and translate them into technical solutions Establish and maintain effective relationships with vendors to ensure their products and services align with requirements Develop and enforce IT policies, procedures, and best practices while ensuring compliance with industry standards and regulatory requirements Lead technology projects from initiation to completion ensuring timely delivery within budget and scope Remove barriers and obstacles from end user technology to enable the business Collaborate with team and SMEs to identify process pain points and opportunities to improve efficiency Analyze impact from process changes to risks and controls within processes Manage expectations and report project progress to stakeholders, team members, and management Foster a culture of innovation, collaboration, and continuous learning within the technology team Performance Management and development of the team members Qualifications: [Required] Understanding of risk and controls within processes [Required] Proven ability to communicate effectively with stakeholders, team, and leadership [Required] Ability to work proactively in identifying risks and proposing solutions [Required] Ability to plan/manage/prioritize work to meet objectives of multiple priorities/projects [Required] Strong presentation and communication skills [Required] Strong analytical skills with an interest in designing innovative solutions [Required] Strong written and verbal communication skills are critical, including the ability to discuss technical concepts with non-technical personnel [Required] Curious and adept in developing understanding about technology including industry best practices, platform capabilities, and architecture principles to help drive team productivity Technical Skills: [Required] Experience in cloud infrastructure management, virtualization, networking, and security within Microsoft technology stack [Required] Experience working with hybrid cloud environments [Required] Demonstrated understanding of Agile practices and project management methodologies [Required] Experience managing systems for e-mail security, e-mail flow design, mail hygiene, eDiscovery, and retention [Required] Experience support an enterprise Windows Server Environment (2012R2, 2016, and 2019) Education and/or Experience: [Required] Bachelor's degree in Computer Science, Information Technology or a related field. [Required] Minimum 7 years of hands-on experience in managing Microsoft environments [Required] Minimum 5 years of hands-on experience managing Active Directory & Azure [Required] Minimum 3 years of hands-on experience with Microsoft Exchange and Group Policy [Required] Minimum 3 years of hands-on experience with Microsoft O365 and Intune Certificates or Licenses: [Preferred] Relevant Microsoft certifications such as MCSE, Azure Administrator, Microsoft 365 Certified
*We are unable to sponsor for this permanent Full time role* *Position is bonus eligible* Prestigious Global Firm is currently seeking a with Intune and Exchange 2019 experience. Candidate will lead a team of engineers responsible for the administration and support of essential services including Microsoft O365, Microsoft Exchange, Intune, and audio/video conferencing. The ideal candidate will ensure seamless operation, security, and compliances of these systems with exceptional leadership skills. Someone who is driven to identify opportunities for improvement and automation while meeting our compliance and regulatory requirements are essential. Responsibilities: Lead and manage a team of talented engineers by providing guidance, mentoring, and support to ensure delivery of high-quality solutions Develops short and long-term strategy for delivery of system objectives together with the technical and business product owner(s) and other partners Develop and implement strategies for secure and effective utilization of Microsoft O365, Microsoft Exchange, Microsoft Intune, WiFi, and Zoom Video Conferencing and VoiP services Oversee the planning, deployment, and management of cloud-based infrastructure and IT systems, ensuring optimal performance, scalability, and security Collaborate with cross-functional teams to understand business requirements and translate them into technical solutions Establish and maintain effective relationships with vendors to ensure their products and services align with requirements Develop and enforce IT policies, procedures, and best practices while ensuring compliance with industry standards and regulatory requirements Lead technology projects from initiation to completion ensuring timely delivery within budget and scope Remove barriers and obstacles from end user technology to enable the business Collaborate with team and SMEs to identify process pain points and opportunities to improve efficiency Analyze impact from process changes to risks and controls within processes Manage expectations and report project progress to stakeholders, team members, and management Foster a culture of innovation, collaboration, and continuous learning within the technology team Performance Management and development of the team members Qualifications: [Required] Understanding of risk and controls within processes [Required] Proven ability to communicate effectively with stakeholders, team, and leadership [Required] Ability to work proactively in identifying risks and proposing solutions [Required] Ability to plan/manage/prioritize work to meet objectives of multiple priorities/projects [Required] Strong presentation and communication skills [Required] Strong analytical skills with an interest in designing innovative solutions [Required] Strong written and verbal communication skills are critical, including the ability to discuss technical concepts with non-technical personnel [Required] Curious and adept in developing understanding about technology including industry best practices, platform capabilities, and architecture principles to help drive team productivity Technical Skills: [Required] Experience in cloud infrastructure management, virtualization, networking, and security within Microsoft technology stack [Required] Experience working with hybrid cloud environments [Required] Demonstrated understanding of Agile practices and project management methodologies [Required] Experience managing systems for e-mail security, e-mail flow design, mail hygiene, eDiscovery, and retention [Required] Experience support an enterprise Windows Server Environment (2012R2, 2016, and 2019) Education and/or Experience: [Required] Bachelor's degree in Computer Science, Information Technology or a related field. [Required] Minimum 7 years of hands-on experience in managing Microsoft environments [Required] Minimum 5 years of hands-on experience managing Active Directory & Azure [Required] Minimum 3 years of hands-on experience with Microsoft Exchange and Group Policy [Required] Minimum 3 years of hands-on experience with Microsoft O365 and Intune Certificates or Licenses: [Preferred] Relevant Microsoft certifications such as MCSE, Azure Administrator, Microsoft 365 Certified
03/09/2024
Full time
*We are unable to sponsor for this permanent Full time role* *Position is bonus eligible* Prestigious Global Firm is currently seeking a with Intune and Exchange 2019 experience. Candidate will lead a team of engineers responsible for the administration and support of essential services including Microsoft O365, Microsoft Exchange, Intune, and audio/video conferencing. The ideal candidate will ensure seamless operation, security, and compliances of these systems with exceptional leadership skills. Someone who is driven to identify opportunities for improvement and automation while meeting our compliance and regulatory requirements are essential. Responsibilities: Lead and manage a team of talented engineers by providing guidance, mentoring, and support to ensure delivery of high-quality solutions Develops short and long-term strategy for delivery of system objectives together with the technical and business product owner(s) and other partners Develop and implement strategies for secure and effective utilization of Microsoft O365, Microsoft Exchange, Microsoft Intune, WiFi, and Zoom Video Conferencing and VoiP services Oversee the planning, deployment, and management of cloud-based infrastructure and IT systems, ensuring optimal performance, scalability, and security Collaborate with cross-functional teams to understand business requirements and translate them into technical solutions Establish and maintain effective relationships with vendors to ensure their products and services align with requirements Develop and enforce IT policies, procedures, and best practices while ensuring compliance with industry standards and regulatory requirements Lead technology projects from initiation to completion ensuring timely delivery within budget and scope Remove barriers and obstacles from end user technology to enable the business Collaborate with team and SMEs to identify process pain points and opportunities to improve efficiency Analyze impact from process changes to risks and controls within processes Manage expectations and report project progress to stakeholders, team members, and management Foster a culture of innovation, collaboration, and continuous learning within the technology team Performance Management and development of the team members Qualifications: [Required] Understanding of risk and controls within processes [Required] Proven ability to communicate effectively with stakeholders, team, and leadership [Required] Ability to work proactively in identifying risks and proposing solutions [Required] Ability to plan/manage/prioritize work to meet objectives of multiple priorities/projects [Required] Strong presentation and communication skills [Required] Strong analytical skills with an interest in designing innovative solutions [Required] Strong written and verbal communication skills are critical, including the ability to discuss technical concepts with non-technical personnel [Required] Curious and adept in developing understanding about technology including industry best practices, platform capabilities, and architecture principles to help drive team productivity Technical Skills: [Required] Experience in cloud infrastructure management, virtualization, networking, and security within Microsoft technology stack [Required] Experience working with hybrid cloud environments [Required] Demonstrated understanding of Agile practices and project management methodologies [Required] Experience managing systems for e-mail security, e-mail flow design, mail hygiene, eDiscovery, and retention [Required] Experience support an enterprise Windows Server Environment (2012R2, 2016, and 2019) Education and/or Experience: [Required] Bachelor's degree in Computer Science, Information Technology or a related field. [Required] Minimum 7 years of hands-on experience in managing Microsoft environments [Required] Minimum 5 years of hands-on experience managing Active Directory & Azure [Required] Minimum 3 years of hands-on experience with Microsoft Exchange and Group Policy [Required] Minimum 3 years of hands-on experience with Microsoft O365 and Intune Certificates or Licenses: [Preferred] Relevant Microsoft certifications such as MCSE, Azure Administrator, Microsoft 365 Certified
*Fully remote position* *Long Term Contract* A prestigious company is looking for a Cybersecurity Design Engineer/Architect. This person will focus on enterprise cybersecurity infrastructure and have a good understanding of application cybersecurity. This engineer/architect will primarily focus on Cloud migration, Citrix cloud, SDWAN security, VPN, Github security, MS Power platform, and MS co-pilot. Responsibilities: Contributes to a team that ensures the security of enterprise data and systems by developing enterprise information security solutions. Creates and updates a view of IT assets, related attack surfaces, and threat actors to illustrate the flow of data and associated security threats. Serves as a security expert in one or more of application development, database design, network, and/or platform (operating system) efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices. Analyzes business impact and exposure based on emerging security threats, vulnerabilities, and risks and contributes to the development and maintenance of information security architecture. Engages with security specialists and other functional area architects to ensure adequate enterprise security solutions are in place to sufficiently mitigate identified risks, and to meet business objectives and regulatory requirements. Serves as a cybersecurity subject matter expert, assessing the business impact of cybersecurity risks to the enterprise and identifying options and recommendations for mitigating those risks. Serves as an expert in one or more of platform, application, storage, network, virtualization, cloud and mobile security best practices. Technical Skills Strong knowledge of network security protocols, best practices, and perimeter security tools Strong knowledge of identity and access management controls, including SAML and OAUTH/OIDC based authentication, Active Directory, and role mapping Understanding of common security control solutions for event logging, remote access, endpoint management, and mobile device management Understanding of Azure native security services and best practices Strong knowledge of threat modelling and risk assessment technologies or frameworks The candidate shall have the experience on developing secure view of architecture and secure design documents for different applications Explain vulnerabilities and threats Threat modelling Recent attacks Application Security Focus Areas Secure Code Development Secure SDLC Secure Agile development Testing Security requirements Writing security stories Web Application Security Owasp 10 SAST and DAST Scan API Security CI/CD pipeline Integrate security tools Security testing Cloud Security Focus Area Shared Responsibility model Secure services in the cloud Infrastructure security in the cloud Secure boundaries Authentication & Authorization Security services in the Cloud Cloud Native VS Third party security capabilities Container Security Container security life cycle Image scanning
21/08/2024
Project-based
*Fully remote position* *Long Term Contract* A prestigious company is looking for a Cybersecurity Design Engineer/Architect. This person will focus on enterprise cybersecurity infrastructure and have a good understanding of application cybersecurity. This engineer/architect will primarily focus on Cloud migration, Citrix cloud, SDWAN security, VPN, Github security, MS Power platform, and MS co-pilot. Responsibilities: Contributes to a team that ensures the security of enterprise data and systems by developing enterprise information security solutions. Creates and updates a view of IT assets, related attack surfaces, and threat actors to illustrate the flow of data and associated security threats. Serves as a security expert in one or more of application development, database design, network, and/or platform (operating system) efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices. Analyzes business impact and exposure based on emerging security threats, vulnerabilities, and risks and contributes to the development and maintenance of information security architecture. Engages with security specialists and other functional area architects to ensure adequate enterprise security solutions are in place to sufficiently mitigate identified risks, and to meet business objectives and regulatory requirements. Serves as a cybersecurity subject matter expert, assessing the business impact of cybersecurity risks to the enterprise and identifying options and recommendations for mitigating those risks. Serves as an expert in one or more of platform, application, storage, network, virtualization, cloud and mobile security best practices. Technical Skills Strong knowledge of network security protocols, best practices, and perimeter security tools Strong knowledge of identity and access management controls, including SAML and OAUTH/OIDC based authentication, Active Directory, and role mapping Understanding of common security control solutions for event logging, remote access, endpoint management, and mobile device management Understanding of Azure native security services and best practices Strong knowledge of threat modelling and risk assessment technologies or frameworks The candidate shall have the experience on developing secure view of architecture and secure design documents for different applications Explain vulnerabilities and threats Threat modelling Recent attacks Application Security Focus Areas Secure Code Development Secure SDLC Secure Agile development Testing Security requirements Writing security stories Web Application Security Owasp 10 SAST and DAST Scan API Security CI/CD pipeline Integrate security tools Security testing Cloud Security Focus Area Shared Responsibility model Secure services in the cloud Infrastructure security in the cloud Secure boundaries Authentication & Authorization Security services in the Cloud Cloud Native VS Third party security capabilities Container Security Container security life cycle Image scanning