Senior Information Assurance and Security Specialist

Job details

Hekima is a collaborative network of elite professionals established by IT veterans. Our goal is to bridge the gap between having a good job and a great career by providing opportunities that will help develop and refine the skills of the IT professionals within our network. We are actively seeking a Sr Information Assurance & Security Specialist who will exemplify Hekima s culture and mission.

About the company

At Hekima, we are guided by the conviction that the true measure of a company s stature is not found in its name, but in its people. Our founders, seasoned IT executives and industry architects, bring a wealth of experience in delivering innovative solutions to leading corporations and government entities. This expertise forms the cornerstone of Hekima a company dedicated to achieving excellence through investing in people.

We noticed a disconnect in the traditional service model talent was often undervalued and seen as interchangeable. This mindset not only stifles individual growth but also hampers organizational success. Driven by our firsthand experiences, we set out to challenge this perspective, with a belief that appreciating and developing talent is not just beneficial but crucial for enduring success.

Our team comprises seasoned IT professionals committed to delivering superior service and thoroughly vetted, skilled experts. We grasp the essentials of success in this industry, focusing on recruiting and training talent, as well as fostering meaningful relationships with our candidates and clients. By prioritizing a personal approach, we aim to understand individual and organizational needs, ensuring we align our services with their career and IT objectives.

Overview

Our direct client, a key public-sector agency, is seeking a Senior Information Assurance & Security Specialist to provide high-level security strategy, infrastructure oversight, and risk management across complex enterprise systems. This hybrid position requires a seasoned security professional with deep expertise in enterprise IT infrastructure, cloud integration (Azure), and disaster recovery, with a strong focus on proactive threat mitigation, architecture planning, and compliance enforcement.

The ideal candidate will bring 20+ years of IT and security experience, a strong command of security standards (CISSP, Security+, CEH), and a proven track record supporting mission-critical systems in hybrid (on-prem and cloud) environments. This role is both strategic and hands-on, demanding advanced problem-solving, design, and implementation capabilities across network, storage, virtualization, and security domains. The ideal candidate will:

Identify network problems, and recommend improvements to ensure optional performance;
Ability to monitor and analyze data traffic patterns within the OCFO Network infrastructure
Ability to enhance security and knowledge of the latest security threats, worms, and malware and advise on how to deter them;
Ability to reliability of the network through the above actions;
Extensive experience in developing strategic systems architecture plans
Experience with Storage infrastructure (NetApp Storage) and technologies include virtualization/arrays, FC/FCOE, NFS, ISCSI.
Design, administration of VMware Infrastructure including full integration with SAN for VMotion and VMware SRM multi-site administration
Advanced knowledge of disaster recovery and business continuity processes and tools needed.
Active Directory service management and operational stability and maintenance
Design and build solutions utilizing on-premises computer, networking, and storage technologies using Azure cloud. Cloud Engineer leads the design and support of large-scale projects.
Configure routers, switches, firewalls, and other appliances in compliance with OCFO security standards;
Monitor security measures in place within network perimeter, ensuring security breaches do not occur and information is safeguarded

Skills

Experience in complex Enterprise-level projects (Required)
Expert understanding of Windows server operating systems (Required)
Knowledge of on-premises and cloud security productions (Required)
Good understanding of IP Networks/Security (Required)
Extensive experience troubleshooting NetApp SAN (Required)
In-depth knowledge of SAN replication/Disaster Recovery (Highly Desired)
Hands-on experience managing storage on VMware ESXi (Required)
Good understanding of server/endpoint operating system (Required)
Windows 2016 AD Enterprise troubleshooting experience (Required)
In-depth experience with Disaster Recovery & Avoidance planning (Required)
VMWare Site Recovery Manager experience (Highly Desired)
Excellent understanding of troubleshooting IT infrastructure (Highly Desired)

Skill Matrix:

Experience developing, maintaining and recommending enhancements to IS
policies/requirements - Required
Experience performing vulnerability/risk analyses of computer systems/apps -
Required
Experience identifying, reporting and resolving security violations16 - Required
Cloud-Azure - Strong plus to have

Responsibilities

Determines enterprise information assurance and security standards.
Develops and implements information assurance/security standards and procedures.
Coordinates, develops, and evaluates security programs for an organization.
Recommends information assurance/security solutions to support customers requirements.
Identifies, reports, and resolves security violations.
Establishes and satisfies information assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands.
Supports customers at the highest levels in the development and implementation of doctrine and policies.
Applies know-how to government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures.
Performs analysis, design, and development of security features for system architectures.
Analyzes and defines security requirements for computer systems which may include mainframes, workstations, and personal computers.
Designs, develops, engineers, and implements solutions that meet security requirements.
Provides integration and implementation of the computer system security solution.
Analyzes general information assurance-related technical problems and provides basic engineering and technical support in solving these problems.
Performs vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle.
Ensures that all information systems are functional and secure.

Qualifications

Bachelor s Degree in IT or related field or equivalent experience (20 years) (Required),
Master s Degree in IT or related field (Highly desired)
Security CISSP, Security+, CEH (Required)

Hekima Business Solutions is an Equal Opportunity Employer. We are committed to a diverse and inclusive workplace and do not discriminate based on race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other protected status under applicable laws.

Hekima Business Solutions participates in the E-Verify program to confirm the employment eligibility of all newly hired employees. For more information about E-Verify, please visit: ;/p>