Information Assurance and Security Specialist, Master (Hybrid, Washington, DC)

About This Role

The DC Office of the Chief Financial Officer (OCFO) is hiring a senior Information Assurance and Security Specialist (Master) to set enterprise information assurance and security standards and to secure the OCFO network and infrastructure. The role spans security architecture and engineering, vulnerability and risk analysis, Windows Server and Active Directory, NetApp SAN, VMware (ESXi, SRM), on-premises to Azure cloud solutions, and disaster recovery and business continuity. This is a hybrid role in Washington, DC for DMV-area candidates.

Responsibilities

• Determine and implement enterprise information assurance and security standards, procedures, and programs
• Perform vulnerability and risk analyses across the system development life cycle; identify, report, and resolve security violations
• Design, engineer, and implement security features for system architectures and integrate the security solution end to end
• Configure and secure routers, switches, firewalls, and appliances to OCFO standards; monitor the perimeter to prevent breaches
• Troubleshoot NetApp SAN and manage storage on VMware ESXi; administer VMware infrastructure (VMotion, SRM multi-site)
• Maintain Windows 2016 Active Directory stability; design on-premises and Azure cloud solutions and lead large-scale projects
• Advance disaster recovery and business continuity (SAN replication, VMware Site Recovery Manager)

Qualifications

• Bachelor’s in IT or related field (or equivalent, 20 years); Master’s a plus; CISSP, Security+, or CEH required
• 16 plus years developing/maintaining IS policies, performing vulnerability/risk analyses, and resolving security violations
• Expert Windows Server operating systems and Windows 2016 Active Directory Enterprise troubleshooting
• Hands-on storage management on VMware ESXi; extensive NetApp SAN troubleshooting
• Knowledge of on-premises and cloud security, IP networks/security, and complex enterprise-level projects
• In-depth disaster recovery and avoidance planning; SAN replication and VMware Site Recovery Manager a plus
• Azure cloud experience (highly desired); able to work hybrid in Washington, DC and sign an NDA

Required Skills

• Enterprise information assurance and security standards, programs, and policy development
• Vulnerability and risk analysis across the SDLC, and security violation resolution
• Security architecture and engineering for enterprise system architectures
• Windows Server and Windows 2016 Active Directory Enterprise administration and troubleshooting
• Storage and virtualization: NetApp SAN and VMware (ESXi, VMotion, SRM) with SAN integration
• Disaster recovery and business continuity (SAN replication, Site Recovery Manager); on-premises and Azure cloud security
• *Software / platforms:* Windows Server 2016, Active Directory, NetApp SAN, VMware vSphere/ESXi/SRM, Azure; routers, switches, firewalls