OverviewJob Purpose
As an Infrastructure Compliance professional, you will be responsible for ensuring the security and integrity of our IT systems and applications. You will facilitate with various IT teams (network, server, etc.) the remediation efforts and root cause analysis identified by all lines of defense. You will also gain experience responding to various audits (internal, external and regulatory). To succeed in this role, you will need strong technical skills, analytical thinking, problem-solving abilities, and knowledge of IT security best practices.
Responsibilities
- Communicate verbally and in writing to technical and non-technical audiences of various levels both internally and externally
- Multitask in a fast-paced environment with a focus on timeliness, documentation, and communications with peers and business users
- Suggest business workflow and recommend improvements and efficiencies to new and existing products and features
- Serve as subject matter expert for Infrastructure, Network Engineering, Network Operations, Server Engineering and various IT applications
- Develop technical solutions to identify technical non-compliance with internal, external and regulatory requirements.
- Documenting enhancements to processes, data management, and technical capabilities of the platform and its supporting functions.
- Deliver and execute on plans for deploying approved enhancements to processes and technologies that support the overall suite of platform products
- Automate deployment workflows to minimize manual intervention and reduce errors.
- Responsible for network device appliances to DISA STIG controls
- Monitoring and partnering with appropriate teams to ensure CIS benchmarks are compliant.
Knowledge and Experience
- 3+ years of relevant experience
- Bachelor’s degree in Computer Science, Information Systems, or related field
- Proficient using Microsoft products including Visio, Excel, Word and PowerPoint
- Experience working within an integrated technology environment – using relational databases, endpoints/APIs and UIs to read and analyze data
- Experience and understanding of the construction of various structured document formats such as XML and JSON, as well as integration technologies such as Python, .NET, C++ and Java
- Knowledge and experience of scripting languages for the transformation of data, e.g. Python, SQL, Power Query, or advanced use of Excel and VBA
- High level understanding of data communication protocols - e.g. HTTPS, TCP Sockets and Web Sockets.
- Intermediate level of understanding around networking principles and technologies - e.g. IP addressing, firewalls, routers, switches
- High level understanding of cloud infrastructure and best practices
- Experience in Linux or Windows administration
- Collaborate and work closely with Systems, Infosec, and Datacenter engineering teams
- Fundamental understanding of the SDLC processes, and tools (GIT, Puppet, Bitbucket, etc.)
- Fundamental understanding of Operational Concepts (DR, BCP, Prod vs. Non-Prod)
Desirable Knowledge and Experience
- Strong analytical and problem-solving capabilities
- Experience in maintaining data, defining operational processes and partnering across product, operations and development groups
- Experience with documenting business and system requirements including documentation of comprehensive use-cases and working within iterative software development environments
- Experience creating Policy and Procedure documentation
- Must be comfortable working with and presenting to a broad base of internal and external clients at different seniority levels
- Ability to grasp very complex architectural concepts.
- Knowledge of Cisco, Juniper, Arista and other vendor equipment and configuration
- Knowledge and experience with Routing Protocols (BGP, RIP, OSPF, etc.)
- Experience in MPLS and Traffic Engineering
- Strong verbal and written communication and customer service skills
- Experience with network traffic analysis, Splunk and firewall logs
