Our client is working with a BioTech company supporting and strengthening Cyber Security initiatives and program. We are looking for an experienced Senior Systems/Security engineer who can help us in this area.

Requirements

Projects, Duties, & Responsibilities

• Storage encryption - Implement drive encryption for internal storage systems NAS \ SAN)
• Endpoint encryption - Implement MBAM and roll out BitLocker Encryption to all endpoints. Also need to implement encryption for Mac laptops
• Deploying Endpoint Security Applications - The infrastructure has numerous end-point applications that need to be deployed installed on all workstations and servers including Qualys \ Nessus agents, Sentinel One, Palo Alto GlobalProtect, etc..
• System Hardening Templates - Implement NIST \ STIG controls for all windows servers and workstations as well as Linux servers. This engineer will have to coordinate testing and implementing security controls with various teams, as well as researching solutions to mitigate issues with legacy systems that might not be compatible with all the security controls
• Patching and Vulnerability Management - Review vulnerability reports and work with IT to deploy patches to endpoints and servers
• Carbon Black and Crowdstrike monitoring and configuration
• Account Management Cleanup - Currently, implementing an automatic systems for storing, tracking, and managing user and system accounts across the enterprise. The engineer should be able to help discover these accounts and dependencies. It will be required to work with the various groups to move this account into the new password management system to automate management of these accounts and passwords
• Identity and Access Management
• Always connected VPN - Migrating to Palo Alto firewalls. Help rollout GlobalProtect to all endpoints to enable always connected VPN
• Perform Firewall Rules analysis
• Perform security patch management and server monitoring
• Perform gap analysis and review compliance with NIST, STIG, and CIS 8.x framework
• Perform duties typically handled by such as network issues, managing domain controllers, remote connections/locations servers, file servers, etc.
• Review and suggest improvements, troubleshooting to Linux and Windows security controls
• Works with key vendors to keep abreast of new technology that improves network, Linux and Windows server environments
• Work closely with the rest of IT team and be proactive in identifying Systems improvements for current or future projects
• Devise innovative work-around solutions or new processes
• May require travel to onsite client on a special needs basis

EDUCATION AND/OR EXPERIENCE

• Minimum of 5 years of experience in Systems security, AD, Windows, Linux, SAN/NAS, GPO, and endpoint security
• Strong knowledge and experience with Linux with SAN/NAS storage
• Experience in Microsoft MBAM implementation and rolling out BitLocker to endpoints
• MDM experience for implementing encryption on MAC’s
• Extensive knowledge with AD, and Microsoft Group Policies
• Knowledgeable in NIST, STIG, and CIS compliance controls
• Strong knowledge in Linux and system hardening for security controls
• Strong skills in testing and project management
• Experience with building application installation packages and rollout to Windows, Linux, and Mac endpoints (Manageengine preferred)
• Knowledgeable in VPN technology (Palo Alto highly preferred)
• Understanding in zone-based firewalls for ACL’s and VPN policies. (Palo Alto highly preferred)
• Experienced in pushing patches to Windows and Linux.
• Some experience in reviewing vulnerability reports (Nessus preferred)
• Project management skills in tracking vulnerabilities to completion
• Knowledgeable in Windows and Linux account management and services.
• Experience with Thycotic Secret Server is desirable.
• Experience with Palo Alto networks firewall