Security Infrastructure Engineer

Position summary :

The Security Infrastructure Engineer role will be responsible for architecting, implementing, and the day-to-day administration activities respective to the Enterprise Security & Infrastructure Systems portfolio of applications and tools within TCH Operations and Technology, also providing oversight and governance for key systems administration initiatives ensuring the integrity of our customer facing applications and corporate systems portfolio.

Essential functions and responsibilities :
Provide subject matter expertise and support all aspects of the Security Infrastructure Engineer environment including administration and maintenance, business continuity, backup and recovery, capacity management, change management, security management, and installation\configuration management in production and non-production environments
Manage core technologies within the Enterprise Security & Infrastructure Systems portfolio including enterprise applications such as Forcepoint proxys, Guardium database security, Control-M Enterprise Scheduler, Entrust HSM appliances and software, Venafi, IBM APIConnect, and Jira/Confluence
Direct/Manage and implement TCH data security policies while utilizing encryption, tokenization, hashing and masking techniques.
Direct/Manage, implement TCH keys and certificates while using tools such as Enterprise Key Management Systems including Venafi, Entrust, Microsoft CA, Splunk, SolarWinds, and ServiceNow.
Provide operational direction and triage on cryptography and key management.
Provide oversight and governance for security risks affecting the business and be able to communicate to management and other business leaders.
Manage the cryptographic device lifecycle including commissioning, sanitizing, and decommissioning of devices through secure processes.
Work with other technical staff to coordinate activities and implementations, follow and document procedures, respond, track, and escalate systems incident
Follow change management and configuration management procedures and guidelines
Provide oversight for technical deployment plans and system utilization reports
Provide assistance and problem support to infrastructure partners, application developers, business analysts and business users while assessing impacts and communicating effectively
Recommend innovative solutions aligned with the organizational initiatives and recognized problem areas
Architect, deploy and champion adherence of an enterprise approach facilitating best practice methodologies to stakeholders across the estate
Collaborate with the Architecture department to ensure products and projects align to the TCH Reference Architecture guidelines
Ensure synchronicity between application lifecycle environments related to infrastructure components
Oversee and manage BAU projects such as infrastructure software upgrades and patch management
Coordinate with all stakeholders to ensure the continuity of the applications related to upgrades, versions, patches, and new releases
Serve as representative for all technical issues/discussion with peer support teams
Create, maintain and present detailed technical documentation and executive summaries for key stakeholders, including senior management
Executes the proper risk/issue disciplines to deliver the best outcomes for our customers, clients, and shareholders and to protect our company's reputation
Drive consensus and resolving conflicts quickly
Think broadly about interdependencies
Additional responsibilities include:

Work closely with internal and external partners to guarantee continuous infrastructure availability
Suggest and implement continuous improvement, automation efforts across the enterprise
Provide technical advice and industry best practices as first contact to stakeholders and clients pertaining to enterprise infrastructure related requests
Perform special projects and initiatives as assigned
Serve as technical lead/mentor/representative and act as proxy for manager when required
Qualifications required :

B.S. degree in Computer Science/Engineering, MIS or equivalent work-based experience
CISSP or equivalent InfoSec related certifications
UNIX/Linux engineering background with solid scripting (shell, perl, python, expect) experience and/or equivalent Windows/Powershell scripting skills
Must reside within 1 hour of Winston Salem Office/Datacenter
Ability to travel up to 10% (between NYC, NC, PA and TX) including for unplanned emergency support
Solid understanding of core infrastructure components such as high availability/hyper-converged/federation/replication
Knowledgeable within the Infrastructure ecosystem in execution of implementation initiatives, capacity management efforts, and design of high availability and backup & recover solutions
Positive track record of delivering large scale complex projects & initiatives
Strong facilitation skills and ability to communicate with highly technical as well as non-technical partners
Qualifications desired :

1-5 years as an infrastructure subject matter expert in IT/financial services and/or another highly regulated industy
1-3 years experience with Entrust HSM appliances including RFS and supporting software; experience with cloud HSM (AWS) and/or cloud Key Management (HashiCorp)
Proficient with the MS Office Suite with a focused ability to create concise and compelling presentations in PowerPoint in a demanding and quick paced environment including MS Project and Visio; Experience with M365/O365 and virtual desktop; ability to work efficiently onsite or remote
Collaborative team player that connects across groups with proven ability to influence stakeholders
Demonstrates commitment to excellence by anticipating needs, mitigating risks and minimizing challenges
Strong attention to detail
Communicates crisply and candidly
Proficient in multiple infrastructure disciplines and functions; ex: converged infrastructure engineer
Experience designing and developing enterprise software solutions
Understanding of agile development and product-oriented methodologies, CI/CD, scrum, etc
Technical Project and\or Product Management experience
Experience working across large infrastructure environments, distributed across multiple data centers
Experience with enterprise configuration tools such as Puppet and Terraform
Experience with cloud infrastructure deployment and security
Experience with VMWare infrastructure as well as physical appliances
Experience with CyberArk
Behavioral & Leadership Competencies:

Possesses and applies broad knowledge of concepts and principles while exhibiting technical expertise in core subject areas
Works well independently with minimal instruction\guidance, confident to escalate issues appropriately
Excellent team player and effectively engages external\internal partners across the enterprise portfolio
Strong analytical and problem-solving skills with a focus for continuous improvement
Ability to lead medium to complex projects as a department representative
Adhere to the corporate Code of Conduct and exude a lead by example approach

Physical demands and work environment :

Work is generally sedentary in nature but may require standing and walking. The working environment is generally favorable. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available. Travel may be required.