Secure Access & Infrastructure Support Engineer

Job Role: Secure Access & Infrastructure Support Engineer

Location: Downey, CA (Remote)

Duration: 12 Months Contract

Position Description:

An Information Security Specialist interprets information security policies, standards and other requirements as they relate to internal information system and coordinates the implementation of these and other information security requirements. The Information Security Specialist redesigns and reengineers internal information handling processes so that information is appropriately protected from a wide variety of problems including unauthorized disclosure, unauthorized use, inappropriate modification, premature deletion, and unavailability. The Information Security Specialist will provide highly specialized experience in one or more information, computer, or network security disciplines (e.g. penetration testing, accreditation, or risk assessment and mitigation); develop system security plans, certification and accreditation reviews; analyze and establish processes for comprehensive systems and data protection; assess and mitigate system security threats and risks; perform security audits, evaluation, risk assessments and make a strategic recommendations; and manages, supports, installs and maintains security tools and systems, and tracks security patches and incidents.

Skills Required:

The Information Security Specialist will possess knowledge and experience in standard methodologies used in certification and accreditation processes; extensive experience following NIST guidelines in risk assessment and management; conducting vulnerability analysis; developing mitigation plans; and performing penetration testing, password protection testing and application security testing.

Additional Skills Required:

• Experience in managing multi-cloud Identity and Access Management (IAM) to ensure consistent access policies across AWS, Azure, and Google Cloud Platform.
• Experience in managing user identities in multi-cloud environment, including EntraID/Active Directory using Microsoft Identity Management (MIM) and CyberArk identity
• Experience in managing Privileged Access Management (PAM) such as CyberArk to secure privileged identities, sessions, and machine identities in the multi-cloud environment
• Experience in managing access control using Cisco Identity Service Engine (ISE) and/or CyberArk Secure Infrastructure Access (SIA)
• Experience in providing Just-In-Time (JIT) access in cloud services such as AWS, Azure and Google Cloud Platform and/or CyberArk Endpoint Privilege Management (EPM) and CyberArk Privilege Account Manager (PAM) for more than 100,000 endpoints
• Experience in enterprise cloud directories such as EntraID and/or CyberArk
• Experience in workforce password management and customer identity using CyberArk and/or Okta
• Experience in enabling privilege access and/or remote access for employees, contractors and administrators through a central policy and session manager
• Strong communication skills, a desire to build consensus, and comfort in relaying technical and security principles and decisions to various stakeholders.
• Experience with the following programming languages: Python, PowerShell script and VB Scripting