IT & Software - Information Security Engr 5 Information Security Engr 5

Company: ObjectWin Technology
Location: Ann Arbor
Posted on: January 26, 2023

Job Description:

IT & Software - Information Security Engr 5
6 Months contract
Location: Ann Arbor, Michigan - Hybrid

Job Description:

Job Responsibilities:
Expert design, enhancement, and advanced support of a global enterprise-level directory service with a focus on any of the market leading IAM products like (Sailpoint, Okta, Ping Identity, Saviynt, Oauth, & CyberArk) and its related technologies, including Single Sign-On (SSO), Universal Directory (UD), Multi-factor Authentication (MFA), and User Lifecycle Management.
Utilize IAM (Identity and Access Management) programs to protect against digital identity risks.
Manage and support SSO environments in Azure and third-party SSO federation deployments using x509 SAML connectors.
Identify and evaluate complex business and technology risks, internal controls which mitigate risks, and related opportunities for internal control improvement
Collaborate across Enterprise Architecture and Cybersecurity to help mitigate security risks within the environment.
Acts strategically, staying abreast of trends and advances in IT/Cybersecurity solutions and supervises changes in the operating environment
Develops external partnerships as appropriate, and develops, maintains, and communicates the Security Architecture strategy in partnership with senior Business and leaders
Presents business updates, recommendations, strategic opportunities and assessments to leadership and senior management as needed
Resolves security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimates.
Implements security systems by specifying intrusion detection methodologies and equipment; preparing preventive and reactive measures; crafting, transmitting, and maintaining keys; providing technical support; completing documentation.
Verifies security requirements by designing and implementing test scripts.
Maintains security by monitoring and ensuring compliance to standards, policies, and procedures.
Upgrades security by identifying security gaps; evaluating and implementing improvements.
Prepares system security reports by collecting, analyzing, and summarizing data and trends.

Desired Qualifications:
Advanced knowledge of IAM security tools supporting SSO, MFA, and Security Information, and Event Management (SIEM) solutions
Advanced knowledge of Microsoft Active Directory, Azure AD & IAM in Cloud services (Azure & AWS).
Advanced understanding of business processes, internal control risk management, IT controls and related standards
Experience managing and supporting a multi-forest global AD infrastructure.
Experience in hardening and securing AD environments.
Experience leading domain/forest consolidation and M&A projects.
Experience/Knowledge of Forest/Domain Recovery requirements and procedures.
Experience working in a risk-based environment including mitigation and planning.
Fundamental understanding of Network and security architectures and their impact on AD environments.
Knowledge and understanding of IAM/IDM platforms and supporting services such as Password Vaults, Privileged Access Management, and Privileged Access Workstations.
Fundamental knowledge of PKI environments using ADCS and the use of Certificates in an enterprise.
Scripting knowledge PS/VB/VBA, others are a plus.
Basic Understanding of Linux/Unix OS.
Experience with Linux systems running in an AD infrastructure.
Superb communication and influencing skills, including the ability to simplify key messages, build compelling presentations and promote technical and personal credibility with internal and external executives, and both technical and non-technical audiences.
Pursuit or completion of Security related certification (CISSP or CEH, etc.).
Computer, infrastructure (full tech stack) and operating system knowledge.
Understanding of support tools, techniques, and how technology is used to provide Cybersecurity services.
Knowledge of the NIST CSF, 800-171 and 800-53, CIS Top 20.
Knowledge of confidentiality, integrity, and availability principles.
Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).
Knowledge of cyber defense assessment tools and their capabilities.
Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.

Minimum Qualifications
Master's Level Degree and work experience of 5 years, or bachelor's Level Degree and work experience of 7 years.

Keywords: ObjectWin Technology, Ann Arbor , IT & Software - Information Security Engr 5 Information Security Engr 5, IT / Software / Systems , Ann Arbor, Michigan