An Unrealistic Job Posting? - IT Security Engineer III - Active Directory
So i just came across this.. and when i read it...I was just stunned. You really gotta watch out for stuff like this.. Googling some of this description, listed a few Staffing agencies who have " tried to fill the position. " Which further tells me, this post is even more questionable..
a few things...
1) Who in the world is experienced in Coding or basically a Programmer, and has Security experience?
2) Why would anyone with a Security related certification, have any know-how of Active Directory? I mean the 2 just dont mix.
3) On top of all of that, who would have Unix, Linux, BSD, or Cisco iOS experience to go along with it?
4) No mention of a Linux+, Cisco Cert or Microsoft Cert, which in reality is what they are really after?
5) They want someone with HIPPA and SLA experience but they dont even mention ITIL?
Just a terrible, horrible job posting.
JOB SUMMARY
Designs, develops, configures, and implements solutions to resolve complex and highly complex technical and business issues related to related to information security, identity management, user access authentication, authorization, user provisioning, and role-based access control.
Designs, develops, and implements solutions to successfully integrate new information security and identity management systems with the existing architecture.
Provides end-user support as directed by management and works on multiple functions of high complexity. Identifies and recommends functional, technological and/or control solutions.
May drive one or more projects as part of a Security or Security Risk Management team.
Acts as a subject matter expert (SME) for one or more security, IDM, or risk management areas.
May act as team-lead for other security or risk management personnel.
ESSENTIAL FUNCTIONS
Coaches and trains engineers integration of systems, including but not limited to databases, applications, network elements and devices, and data storage
Guides an mentors engineers on the development of custom scripts, programs, and application interfaces to enhance existing monitoring infrastructure as part of project team efforts
Pursue continuing education to maintain advanced knowledge of best practices, compliance requirements, and threats and trends in identity management and information security, translating into operational action items, policies, procedures, standards and guidelines as part of the IT Security team
Develop root-cause analysis strategies to determine improvement opportunities when failures occur. Contribute as lead and SME on incident research and resolution when appropriate, mentoring incident team members
Assist in Continual Service Improvement efforts by identifying, and sometimes leading, opportunities for process improvement
Manage workload, prioritizing tasks and documenting time, and other duties.
Provides training, coaching, and mentoring for Engineers and Senior Engineers in the IT Security organization
Assists management in the definition of cross-platform information security and/or identity management policies and procedures as well as a senior contributor on departmental (IT Security) standard operating procedures, processes and guidelines.
Drive and participate in the collection and documentation of departmental knowledge artifacts; key participant in the development, population, and championing of knowledge management and collaboration systems for the IT Security team.
Communicates complex technical information to team members and all levels of management.
Provides identity management advice and support for network systems and applications
Act as a security advocate for IT operations team"s adherence to Dignity Health policies and industry best practices
Mentors and guides fellow engineers in the selection, installation, integration, configuration, and maintenance of information security systems.
Defines Information Security frameworks for existing and new systems.
Review and perfect diagrams, maps, and documentation of interrelated architecture and systems, pro-actively review solutions to determine possible failure points, coaching engineers accordingly.
EXPERIENCE
6+ years" experience in enterprise-scale information security engineering and operations required.
Experience evaluating and implementing new hardware and software solutions and managing vendor support/SLA required.
Experience with UNIX/Linux/BSD operating systems preferred.
4+ years technical project experience designing, developing, integrating, and implementing solutions to resolve complex technical and business issues preferred.
Coding experience and proficiency (e.g. Python, Perl, Ruby, PowerShell, Java, bash, etc) preferred
Experience in Windows Office (Work, Excel, etc) required.
Experience in UNIX/Linux OS and/or Cisco IOS strongly preferred.
EDUCATION
Bachelor"s Degree in Computer Science, Information Security, Information Systems, or related field, or equivalent professional experience required.
TRAINING/CERTIFICATIONS
Two or more relevant technical/professional security certifications (such as: COMP-TIA Network+ , Security+, SANS GIAC, CISSP, CRISC, CISA, or vendor-specific) required.
SPECIAL SKILLS
Proficient understanding of regulatory and compliance mandates, including but not limited to HIPAA, HITECH, PCI, Sarbanes-Oxley preferred.
