IRIS Business Services - Senior Secuirty Engineer (5-10 yrs)

What you'll do :

We are looking for a deeply collaborative and adaptable Network Security Engineer who will be responsible for activities related to implementation, configuration, management & maintenance of company security solutions with minimal oversight. This includes endpoint Internet proxy, zero trust network access, firewall policy manager, web application firewall and content delivery solutions.

In this role you will partner with our application and system owners, as well as other security teams to review, assess, and recommend then implement technical controls to ensure that security tools are effective and comprehensively deployed.

- Review and provide input to security architecture designs, with a focus on implementation and verification of controls.

- Ensure that routine maintenance and configuration items are well managed, so that security toolsets are operating effectively. This includes proper platform operation, patch upgrades and vendor management.

- Provide periodic platform reporting, including assessment findings and recommendations for improvement. Implement, monitor and track these improvements until remediations occur, or risk is reduced to an acceptable level.

- Assist in achieving compliance requirements, including Payment Card Industry (PCI-DSS), Sarbanes-Oxley, HIPAA/HITECH, Global Data Privacy Requirements (GDPR), as well as state and federal regulations.

- Accommodate a weekly on-call rotation between team members, as needed.

What we'll want you to have :

- 5 + years of progressively responsible experience within information technology or Cyber Security.

- Experience in administration of a network security policy management (NSPM), Internet proxy or zero trust network access solutions.

- The ability to assess and report risk against compliance with corporate requirements and best practices within a multi-cloud environment.

- Understanding of cyber security concepts, including threats, vulnerabilities, encryption, network security and IAM.

- Understanding of how to implement security controls and compensating/mitigating controls.

- Advanced technical, analytical, and problem-solving skills within a collaborative team environment.

- Experience with any of the following is a plus :

1. Zscaler Internet Access and\or ZTNA, DLP technologies and methodologies.

2. Microsoft and AWS cloud components, Containers and or Kubernetes.