Cloud Security Engineer I ONSITE 5260

JOIN THE KEESLER FEDERAL CREDIT UNION TEAM!

Keesler Federal Credit Union team members enjoy competitive salaries and a wide range of benefits, some of which include:

• Medical, dental, and vision insurance


• Section 125 Flexible Spending Accounts for Health Care and Dependent Care expenses


• Employee and Dependent Life Insurance


• 401(k) Retirement Plan with 100% match on the first 5% contributed by you


• Paid Leave


• Tuition Reimbursement and Competitive Scholarships


• Short-Term & Long-Term Disability Benefits


• Employee Assistance Program 

WE CURRENTLY DO NOT SPONSOR WORK RELATED VISAS  

Position:         Cloud Security Engineer I

Department:   Enterprise Infrastructure

Reports To:    VP - Enterprise Infrastructure

FLSA:               Exempt                                          Grade: IT 810                                 

SUMMARY

Responsible for planning, designing, documenting, implementing, and maintaining cybersecurity for the desktop, server and cloud infrastructure. Performs tasks to enhance cybersecurity by protecting system boundaries and ensuring systems are hardened against potential attacks on premise and cloud. Performs research and troubleshooting to provide solutions for complex technical issues related to the security of infrastructure systems and applications. Responsible for managing cybersecurity related projects that impact the organization and the security of mission-critical IT services. Contributes to policies and procedures that ensure IT systems are in compliance with the organization’s cybersecurity requirements. Performs a variety of other security engineering tasks to ensure the security and protection of enterprise technology resources and support the goals of the organization.

SUPERVISORY RESPONSIBILITIES

None

ESSENTIAL FUNCTIONS

• Assess IT security risk and exposure on existing and modern infrastructure solutions on premise, hybrid, and cloud. 


• Recommend, implement, maintain, and monitor security solutions to protect IT Infrastructure systems including but not limited to Azure express routes, virtual network edges, vnets, resource groups, load balancers, NSGs, ASR, and various virtualized storage solutions across multiple regions.


• Recommend, implement, maintain, and monitor security solutions for virtual desktop infrastructures both on premise and cloud, including but not limited to Citrix, and Azure Virtual Desktop.


• Recommend, implement, maintain, and monitor security tools to determine risks and protect organizational assets.


• Investigate and recommend appropriate corrective actions for IT security incidents.


• Perform information security risk assessments and serve as internal resource for information security processes.


• Write comprehensive reports and documents including assessment-based findings, outcomes and propositions for further system security enhancement.


• Effectively manage and coordinate efforts with Security Operations Center partners, and 3^rd party providers.


• Administer, maintain, and enhance ACL’s, anti-malware, anti-spam, host-based firewalls, internet content filtering, data loss prevention, patch management, application whitelists, and various other cybersecurity components.


• Research, identify, assess, and document security vulnerabilities and risks for existing and forthcoming infrastructure systems and applications to include on premise, hybrid and cloud systems.


• Recommend, design, and implement technical solutions to mitigate identified security risks and vulnerabilities.


• Provide requested documentation for internal and external IT security audits regarding the desktop, server, and cloud infrastructure.


• Design and maintain diagrams of the infrastructure as it relates to cybersecurity.


• Collaborate with the Information Security Department and serve as a liaison with the Enterprise Risk Management division to continuously enhance cybersecurity for the desktop and server infrastructure.


• Harden, patch, and secure Windows, and Linux operating systems.


• Harden, patch, and secure various enterprise technologies including but not limited to Microsoft Active Directory, SQL, Exchange, Office 365, Microsoft Teams, Power BI, SharePoint, SCCM; VMware vSphere, ESXi; Citrix Cloud, XenDesktop ,and ADCs


• Recommend, design, and implement solutions to meet established security requirements and compliance baselines.


• Stay abreast of current cybersecurity trends, governance, issues, threats, and best practices.


• Actively maintain security related service requests and provide thorough documentation therein.


• Utilize approved change management procedures to implement changes and cybersecurity enhancements. 

• Responsible for compliance with all Federal regulations including Bank Secrecy Act (BSA) and Office of Foreign Assets Control (OFAC

Other Duties and Responsibilities:

• Assists in training new personnel.

• Other duties as assigned.

Knowledge & Skills

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily.  The requirements listed below are representative of the knowledge, skills and/or abilities required.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

 Education:

• Equivalent to a college degree (BS or BA in a relevant field).


•  

Experience and Other Requirements:

• Three to Five years of similar or related experience.


• CompTIA CASP, ISC2 SSCP, Microsoft Azure Security Engineer or the equivalent combination of training, education, and experience required.


• Excellent communication and documentation skills.

• Must be capable of working well with others and independently.


• Must be able to perform all job functions with minimal supervision in a timely fashion.


• Must be able to evaluate service requests and projects and prioritize as necessary.


• Accuracy, attention to detail, and confidentiality required.


• Requires after-hours, weekends and on-call work as needed.


• Some travel is required.

Interpersonal Skills:

Courtesy, tact, and diplomacy are essential elements of the job.  Work involves much personal contact with others inside and/or outside the organization for purposes of giving or obtaining information, building relationships, or soliciting cooperation.

Computer Skills:

(See Essential Functions, Education, and Experience Requirements above)

 Certificates, Licenses and Registrations:

CompTIA CASP, ISC2 SSCP, Microsoft Azure Security Engineer or equivalent certification or must be willing to obtain certification within 12 months.

PHYSICAL DEMANDS

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to sit, kneel, stoop, and crouch; use hands to finger, handle or feel; reach with hands and arms; and talk or hear.  The employee is frequently required to stand and walk.  The employee frequently is required to lift and/or move up to 50 pounds. The employee is occasionally required to climb a ladder to work in high places or work in confined spaces and occasionally required to drive a motor vehicle to perform job duties at a branch or remote location.

WORK ENVIRONMENT

The work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Extensive use of desktop computer is required.  The noise level is that of a normal office environment.  When working in designated secured areas, elevated noise level may be present.

DECLARATION

The human resources department retains the sole rights and discretion to make changes to this job description.