Description Position at Sumitomo Electric Wiring Systems, Inc.
SEWS - Farmington Hills, Michigan Office. Although located at SEWS - Farmington Hills Office, this is a Hybrid position, which combines both in office and off-site work. Associates are required to work at least four days in the office each week, but also have the flexibility to work off-site.
JOB TITLE: Senior Systems Engineer (I.S.)
BASIC PURPOSE:This position will provide operational administration, technical direction, and support for company information security systems. The position will support the IT Security Manager in maintaining company-wide security controls and compliance with parent company policies, standards, and operating constraints.
This position will be directly responsible for the administration, configuration, security, and support of all company firewall, intrusion detection system (IDS), and intrusion prevention system (IPS) technologies. The position will administer and secure key identity, network security, cloud security, and infrastructure security systems. The position will work with the Network Administrator to ensure Cisco network infrastructure is securely configured and maintained.
This position will provide security direction for endpoint protection and assist with the security aspects of file sharing, email, database, SharePoint, and other business systems where they intersect with network, operating system, or Active Directory security.
This position will manage and integrate Office 365 and Azure security controls with company systems within parent company requirements. The position will lead or support security incident response, audit activities, security standardization, vendor-managed security services, policy development, reporting, and technical coordination with North American affiliated companies. The position will serve as a senior Computer Security Incident Response Team resource.
RESPONSIBILITIES:- Manage security for firewalls, IDS/IPS, remote access, internet connectivity, network segmentation, and wireless security.
- Lead CSIRT activities, coordinate security incident response, support security audits, and maintain required evidence and documentation.
- Develop, maintain, and enforce security policies, procedures, standards, system configuration requirements, and documentation practices.
- Manage the security integration of Office 365 and Azure with company systems, within parent company policies, controls, and constraints.
- Manage external security service providers, contracts, and outsourced security resources; monitor service delivery and improvement actions.
- Work with the Network Administrator to review and improve the security of Cisco LAN/WAN, routing, switching, VLAN, and wireless configurations.
- Provide security support to North American affiliated companies and communicate security status, risks, projects, and recommendations to management.
- Administer and secure Active Directory, Group Policy, authentication, privileged access, and related Windows infrastructure security controls.
- Provide security direction for endpoint protection and assist with security controls affecting file sharing, email, SQL, SharePoint, and other business systems.
- Perform other duties as assigned.
QUALIFICATIONS/REQUIREMENTS:- Bachelor's Degree required.
- 7-10 years progressive professional experience.
Experience with the following:
- Securing Active Directory, Group Policy, Windows Server, authentication, privileged access, and file sharing.
- Microsoft 365, Exchange Online security, Azure security controls, and identity integration.
- Administering FortiGate firewalls and related Fortinet security products.
- Firewalls, IDS/IPS, VPN, wireless, network segmentation, and security logging.
- Developing security policies, procedures, standards, technical documentation, and audit evidence.
- Security incident response, CSIRT activities, vulnerability remediation, and security audits.
- Managing third-party security providers, service contracts, projects, and outsourced resources.
- Supporting multi-site, manufacturing, or affiliated-company IT environments.
- Preferred certifications: CISSP, CISM, CompTIA Security+, Microsoft Azure, Microsoft 365, Cisco, or Fortinet.
- Ability to communicate security risks and recommendations to technical teams, senior management, and end users.
