Infrastructure Engineer Senior - PRIMUS Global Services, Inc

Cyber Security Engineer

This position will be supporting the Applied Cryptography team within the Information Security Engineering department within the Information Security Unit of the Information Technology Division. This position is primarily responsible for providing administration and engineering support of the encryption-at-rest services within our client's private and public cloud environments.

Location: McLean, VA (Onsite Tues/Wed/Thurs)
Duration: 12 months
Schedule: Non-Standard - role will require some weekend work and some unplanned changes to schedule for troubleshooting. Will be paid overtime if unplanned. If planned, then will adjust weekly hours.

The candidate expectations are as follows:

• Collaborate with Information Security Leads to implement and support existing data encryption services within private and public cloud environments.
• Perform the planning, design, implementation, and Level 3 support of IT Security solutions related to data-at-rest encryption while onboarding new applications to the enterprise encryption services.
• Support the security risk assessment of applications and infrastructure, including remediation of incident response, vulnerability analysis and threat intelligence.
• Provide technical guidance, develop design documents, perform product installation, upgrades and certification, implementation plan, deployment and troubleshooting support.
• Diagnose, solve, and provide root cause analysis for issues related to key and certificate management and data-in-transit.
• Ensure consistent delivery of superior technical solutions.
• Champion technology and tools change that improves delivery processes.
• Act as an agent for change to reflect the latest data encryption management standards in new technologies and tools.
• Serve as an enterprise subject matter expert (SME) and advocate of IT Security standards and reference architectures related to data-at-rest encryption management.
• Coordinate with Information Security team to ensure solution assurance and compliance to security policy, procedures, standards and baseline security configurations.
• Provide training for clients in use of the key and certificate management and access request systems and automated environments.
• Work closely with technology and business stakeholders to implement data-at-rest encryption and upgrade goals, determine security requirements, design and implement solutions to meet business objectives, IT strategic initiatives, corporate and regulatory requirements.
• Execute enterprise-wide data encryption management governance processes in collaboration with Information Security and Enterprise Architecture to adequately plan, communicate and deploy enterprise configurations as new data encryption and key management standards are adopted.
• Communicate effectively with clients to identify needs and evaluate alternative technical solutions and strategies.
• Protect and secure company resources in the cloud, virtual and physical infrastructures.
• Stay current with developing technologies, emerging threat landscape and predict impact of changing technologies.

Qualifications:

• Bachelor's degree in information technology, engineering, computer science, related field or equivalent experience.
• 5+ years of professional IT experience with implementation and administration of any database and folder-level data encryption solution.
• Additional 2+ year(s) of experience with implementation and administration of any data encryption and key management security tools and/or cloud services a plus.
• Experience with System Administration basics with Linux (CentOS, RedHat) and/or Microsoft Windows Server (and associated technologies such as Active Directory and Exchange).
• Experience operating and maintaining production systems in Linux and public cloud environments.
• Experience with basic troubleshooting (network commands, cURL or related).
• Knowledge of AWS cryptography, encryption and key management best practices and policies.

Preferred Skills:

• Knowledge of Vormetric Data Encryption platform, including most recent release.
• Knowledge of industry leading cloud-based solutions and available native services
• Experience implementing AWS cryptography, encryption and key management best practices and policies.

• Experience with scripting tools to automate routine tasks using scripting languages including but not limited to PowerShell and bash scripting.
• Exposure to various operating systems UNIX, Linux, Windows

Required Skills : o At least 5 years of experience with Data Encryption platform, including most recent release. o AWS Policy o Top 3 Skills: Engineering experience, encryption at rest, CyberTrust Encryption at rest, understanding databased level encryption solutions, AWS in other implementations, automation capabilities (python, Shell, Powershell, bash, etc.). o Must have experience with operating systems UNIX, Linux, and Windows. ? Data REST and AWS Cloud environment experience - is a PLUS. Nice to haves - Python, PowerShell and Bash experience. ? You will be working with different internal stakeholders. One round interview process
Background Check :Yes
Drug Screen :Yes
Notes :
Selling points for candidate :One round interview process
Project Verification Info :The information provided below is for Apex Systems AV use only and is not to be distributed publicly, or to any third party. Any distribution of the below information will result in corrective action from Apex Systems Vendor Management. MSA: Blanket Approval Received Client Letter: Will Provide
Candidate must be your W2 Employee :Yes
Exclusive to Apex :No
Face to face interview required :No
Candidate must be local :Yes
Candidate must be authorized to work without sponsorship ::No
Interview times set :Yes
Type of project :Federal Home Loan Mortgage Corporation - BC
Master Job Title :
Branch Code :