[Hiring] Security Engineer III @Mindlance

Role Description

The Identity & Access Management (IAM) Security Engineer’s primary responsibility is to implement and support the integration of authentication and authorization protocols and provide overall infrastructure support aligned with CDR (Cybersecurity and Digital Risk) security principles and policies protecting data and reducing risk for the client Workforce.

The IAM Senior Engineer will be focused on the implementation and support of modern Enterprise (Workforce) IAM systems. The Senior Engineer will work closely with cross-organizational development teams, architects, analysts, and consumers of IAM authentication and authorization services. They serve as a key contact within IAM responsible for the integration of secure identity solutions during the product lifecycle.

The IAM Security Engineer requires a deep understanding of identity and access management principles, protocols, and best practices as well as experience implementing and managing IAM related automation, integrations, and orchestration. This is a senior-level position that will execute the implementation of designs and requirements provided by IAM architects and analysts and ensures that IAM capabilities and services are successfully integrated within systems across the organization while also providing ongoing support and maintenance as needed for IAM processes and technology.

• Design, integrate, and implement information systems security infrastructure.
• Assess potential systems and process vulnerabilities to determine security infrastructure requirements.
• Develop policies and procedures to prevent unauthorized access.
• Educate and communicate security requirements and procedures to users and new employees.
• Recommend and implement changes to enhance systems security and prevent unauthorized access.
• Research security trends, new methods, and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach.
• Provide guidance and direction on best practices for the protection of information.
• Ensure compliance with regulations and privacy laws.
• May oversee internal or external systems security (e.g., cloud services).
• Recognized as expert in field, knowledgeable of emerging trends and industry practices.
• Conducts the most complex and vital work critical to the organization.
• Works without supervision with complete latitude for independent judgment.
• May mentor less experienced peers and display leadership as needed.

Qualifications

• Knowledge of computer and network security techniques and methodologies.
• Knowledge of networking, security monitoring tools and security systems; including routers, switches, firewalls, IDS/IPS, authentication systems, anti-virus, content filtering, SEIM, log management, etc.
• Advanced security, system, and network troubleshooting skills.
• Excellent written and verbal skills with public speaking ability.
• Report writing skills using Microsoft Word, PowerPoint and Excel.
• Experience with vendor product lines such as Juniper, RSA, Cisco, Qualys, MalwareBytes, and Sophos.
• Experience working with automation tools such as Jenkins, Chef and Puppet.
• Experience writing scripts in Python, Java or JavaScript.
• Experience working with multiple sites throughout a geographically dispersed area.
• Multi-datacenter experience.
• Computer forensics and malware analysis.
• Understanding of Application Development, DevOps, Agile Methodology, MS Active Directory.
• Security Certifications (CISSP, CISA, GSEC, Security+).
• Bachelors degree or equivalent work experience.
• Experience with Microsoft and Linux based operating systems (Server and Workstation).
• Competency in Cyber Threat Management including content development using custom signatures, parsers, SNORT, REGEX, YARA.
• Experience and knowledge of network security, security controls (firewalls, IDS/IPS, authentication, etc.), TCP/IP, and security systems (routers, switches, firewalls, antivirus, content filtering, etc.).

Requirements

• Optional Certifications:
• CISSP certification.
• SANS/GIAC Certified Firewall Analyst (GCFW).
• SANS/GIAC Enterprise Defender (GCED).

Benefits

• Remote candidates are fine.
• Interviews will be 2 rounds.
• The position can be remote within the US. Travel is not expected.

EEO

“Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”