Information Security Platform Administrator

Information Security Platform Administrator

The proposed resource will be required to perform onsite during an initial three (3) month performance period at 189 Harry S. Truman Parkway, Annapolis, MD 21401. If performance is satisfactory, as determined by the AOC Contract Manager, the proposed source may perform in a hybrid role, Monday through Friday, as follows: a. Three (3) days remote at a suitable off-site location selected by the Offeror/Offeror Resource(s). (1) The AOC reserves the right to determine an off-site location is not suitable (e.g., crowded public space with distracting background noise during meetings). b. Two (2) days on site at the Maryland

The Offeror shall propose resource(s) that meet the following minimum qualifications:

a. Associate degree in an IT related field (as determined by the AOC).

3. The AOC prefers Offeror proposed resource(s) to have the following qualifications:

a. Experience in the configuration, deployment, and operation of two (2) or more of the following SAAS platforms:

SailPoint, CyberArk, Microsoft Purview, Archer Risk Management and/or Business Continuity Modules and other platforms as required.

Proposed candidates with experience in all SAAS platforms listed are strongly preferred.

b. Any industry leading networking certifications of a professional level.

. OFFEROR RESOURCE(S) SKILLS, EXPERIENCE, & CAPABILITIES

1. Offeror shall propose resource(s) possessing the following mid to expert level preferred skills, experience, and capabilities:

a. Ten (10) years of relevant IT work experience with at least five (5) years of experience in the information security and SaaS management and administration field.

b. Two (years) experience with hands on design, implementation, application customization and support experience with SaaS platforms.

c. Proficient with information security platforms in an enterprise environment.

d. Experience with SailPoint, CyberArk, Microsoft Purview and Archer with the ability to learn other platforms as required.

e. Specific proficiency with the following:

(1) SailPoint i Build application specific user attestations.

• ii Provide role-based access to individual system attestations.
• iii Ability to work with System Owners to build custom user attestation requirements.
• iv Provide training to the users of the system.

(2) CyberArk

• i Privileged Cloud
• ii Remote Access
• iii User Account Management

(3) Microsoft Purview (Security & Compliance)

• i Data Loss Protection Solicitation No. K25-0026-29 – Information Security Platform Advisor – mdcourts.gov/procurement Rev. 11/08/2023 Page 20
• ii Information Protection
• Labeling and Encryption
• Data Categorization and Classification
• iii Insider Risk Management
• iv Defender XDR

(4) Archer

i Risk Assessments

ii Risk Mapping to NIST and Security Policies

iii Risk Acceptance

iv Risk Register

v Risk Tracker

vi Risk Task Automation

vii Business Continuity

viii Security Incident Reporting

• f. Excellent communication, interpersonal and team skills.
• g. Ability to present technical information for knowledge transfer and training purposes.
• h. Ability to establish and maintain effective working relationships with peers, end users and vendor development staff, as well as all levels of management and judicial personnel as necessary.
• Ability to troubleshoot application specific problems and open support tickets as needed to address systems functionality issues.