Lead Information Security Engineer – Certificate Management Services

Role Overview

• Lead computer security incident response activities for highly complex events
• Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
• Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
• Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
• Review and correlate security logs
• Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
• Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
• Collaborate and influence all levels of professionals including managers
• Lead a team to achieve objectives

Requirements

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 1+ years of experience providing production support
• 1+ years of experience using ticket tracking tools for change management, problem and incident management, and availability management
• 5+ years of experience implementing or managing Certificate Lifecycle Management for a variety of certificate use cases (TLS, machine identity, Code Signing, S/MIME, SSH)
• 5+ years of experience with one or more certificate management tools (Venafi, DigiCert, Microsoft)
• 1+ years of demonstrated experience developing automation with infrastructure as Code (IaC) tools like Ansible, Terraform, Chef, Puppet etc.
• 1+ years of experience with Continuous Integration/Continuous Deployment (CI/CD) tools for automation such as Jenkins, Github, Terraform, Harness, etc.
• 1+ years of experience developing API automation to consume REST API methods to automate client integrations.
• 1+ years of experience with Cloud platforms, Kubernetes container architecture and deployment services
• 1+ years of experience with industry standard security controls (NIST) related to digital certificates
• 1+ years of experience with Agile methodologies Kanban / Scrum and processing workflow using Jira tool
• Self-starter with the ability to manage multiple engineering projects
• Cloud vendor certification such as Microsoft Azure or Google Cloud
• Intermediate to advanced hands-on experience in scripting, orchestration, and automation languages such as PowerShell / DSC, Python and Ansible to deploy Infrastructure as Code (IaC)

Tech Stack

• Ansible
• Azure
• Chef
• Cloud
• Jenkins
• Kubernetes
• Puppet
• Python
• Terraform

Benefits

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement