Summary
The job is for a Cloud Security Engineer working remotely on a contract basis. The role involves hands-on experience with Microsoft Azure technologies, particularly in access control, certificate management, and key management. The candidate should have a strong understanding of information security and access controls, preferably with industry certifications.
Requirements
- Hands-on experience with Access control technologies such as Azure AD B2C; SAML SSO, oAuth 2.0 configuration, set-up and operations management
- Experience with certificate management for IaaS and PaaS elements
- Experience with Azure AD, Azure Resource Management Templates and Azure policies
- Experience with Azure Key Vault integration and key management
- Hands-on development and scripting skills in PowerShell 5
- 7+ years’ experience working in a technical role with a minimum of 3 years’ experience focused on information security and access control
- Strong knowledge of information security and access controls
Responsibilities
- Contribute to the vision, strategy, and drive execution for integrated security controls across SaaS, PaaS, IaaS for Navy’s Azure environment
- Demonstrate clear understanding of current risks and threats to Cloud infrastructure and/or IT infrastructures at technical and manager audiences
- Drive Identity and Access Management (IAM), configuration management, and monitoring strategy for Azure
- Provide security consultancy and engineering support for cloud security solutions including analysis and development of Azure and other security solutions
- Provide architecture assurance on Cloud security initiatives and compliance of existing security standards interfacing with infrastructure and development teams
- Maintain the security infrastructure tools that are built on the Cloud platform, providing stability and policies and procedures
- Support the development and delivery of a comprehensive ISP for the entire organization
- Develop and maintain documentation of all Security products including specific tools, technologies and processes
- Participate in Information Security Incident Response activities for the NFCU’s environment
- Respond to security vulnerabilities identified through periodic and on-demand system audits and vulnerability assessments of Cloud services
- Monitor compliance with the organization's information security policies and procedures among employees, contractors and third parties
- Manage remediation efforts for any gaps reported in audits or recommended process improvements
- Actively monitor new and emerging cloud security technologies, trends, issues, and solutions and assess their applicability to Navy Federal’s cloud strategy
Preferred Qualifications
- Industry certification (CISSP, CISA, CISM, CEH) of high interest
- Financial industry experience preferred
- Experience with CheckPoint Next Generation Firewall and Threat Prevention Suite (nice to have)
Benefits
Not specified
