Overview
Skills
Job Details
About this Position:
Job Title: Security Architect - Consultant
Daily duties / responsibilities:
-
Identity and access management ensuring that appropriate identity management, single sign on, multi-factor authentication, active directory and applications are properly implemented and configured to support it and security operations.
-
Responsible for automation development and implementation of disparate security and enterprise it tools.
-
Responsible for planning, designing, development and implementation of enterprise security solutions that align with business goals and risk tolerance.
-
Design, deploy and manage countermeasures to known security threats and develop preventative mitigation strategies for new and emergent threats to enterprise data, networks and associated services.
-
Ensure, validate and measure the consistent application of protective measures throughout the enterprise business application and infrastructure support environments. Take appropriate action to protect state data and technology services.
Required skills (rank in order of importance):
-
5+ years of expertise in automation development using tools such as python and bash.
-
5+ years of experience with expert understanding of identity and access control, logging and reporting systems.
-
5+ years of experience in cyber security awareness and understanding.
-
5+ years of experience with linux, windows, network security protocols and procedures.
-
Five years of experience in supporting large it environments and/or system deployments.
Preferred skills (rank in order of importance):
-
Siem analysis and reporting.
-
Security frameworks: nist, csf, cjis, irs 1075, cms mars-e.
-
Application security (appsec).
Required education/certifications:
-
Bachelor's degree in an information technology or information security related field.
-
Eight years of relevant work experience may be substituted in lieu of education.
Preferred education/certifications:
-
Cissp, cisa, ciso or equivalent advanced security certification.
-
Additional relevant certifications (e.g., ceh, oscp, gpen).