Senior System Security Specialist

We are seeking an experienced Senior Cloud Security & Identity and Access Management (IAM) Engineer to design, implement, and manage enterprise-grade cloud security controls and IAM solutions for large, mission-critical, public-facing systems. The ideal candidate will have deep expertise in AWS cloud security, IAM platforms (ForgeRock, SailPoint), incident response, and security governance within complex regulatory environments.

Required Qualifications

Education

• Bachelor s degree from an accredited college or university in Engineering, Computer Science, Information Systems, Business, or a related discipline.

Certifications (One or More Preferred)

• CISSP
• ISO 27001
• CSA STAR Cloud Security Advisor
• CCSE, QCS, CNA, VCP, or equivalent security certifications

General Experience Requirements

• 8+ years of experience analyzing, defining, deploying, monitoring, and administering security controls for large, mission-critical IT systems.
• 5+ years of hands-on experience in day-to-day security operations including administration, troubleshooting, and issue resolution.
• 4+ years of hands-on experience in cloud security functions.
• 4+ years of experience defining security requirements for enterprise applications and evaluating security product capabilities.
• 4+ years of production experience supporting AWS Cloud security operations.
• 4+ years of experience administering security on Windows and Linux operating systems.
• Experience in Security Incident Response and Forensics using SIEM tools.
• Strong working knowledge of AWS security services, including:
• Security Groups, NACLs, Firewalls, WAF
• GuardDuty, Macie, CloudTrail, CloudWatch, Control Tower
• Experience conducting security assessments, risk analysis, and vulnerability mitigation.
• Experience with patching, performance tuning, backups, and scheduled maintenance.
• Experience with user provisioning and de-provisioning.
• Proven ability to monitor security infrastructure for operational effectiveness.

Specialized / Preferred Experience

• 5+ years implementing and managing security governance and controls for public-facing, complex IT systems.
• 5+ years of hands-on experience with ForgeRock and SailPoint IAM platforms.
• 5+ years assessing information systems and mitigating threats, risks, and vulnerabilities.
• 5+ years conducting Incident Response testing and security process evaluations.
• 3+ years designing and administering security policies for health insurance marketplaces or large health/human services systems.
• Experience implementing:
• Single Sign-On (SSO)
• Password synchronization
• Identity lifecycle management
• ACLs, access policies, workflows, reconciliation, and service definitions
• Experience integrating IAM solutions with:
• Active Directory
• LDAP
• Databases
• Hands-on troubleshooting and operational issue resolution.
• Experience developing IT Security roadmaps and execution plans.
• Strong command-line experience on Linux and Windows.
• Experience with Java, JavaScript, and shell scripting.
• Experience supporting compliance frameworks:
• NIST SP 800-37 / 800-53
• IRS Publication 1075
• MARS-E 2.0
• Experience with vulnerability management and penetration testing.
• Experience configuring and reviewing ASA and/or Fortinet firewalls.
• Experience working within PMO processes and governance models.