SecOps Engineer (#16063322)

N-iX is looking for a SecOps Engineer to join our team.

Responsibilities:

• Administration of Certificate Lifecycle Management Services and infrastructure
• Administration of Encryption and Key Management Services and infrastructure
• Administration of Key Vaults, Cloud Cryptographic and PKI Services
• Multi-cloud IAM integration and administration
• Integration, validation and automation across cryptographic frameworks
• Evaluate cryptographic tools, products and frameworks
• Troubleshoot cryptographic anomalies, and issues across the enterprise
• Negotiating and liaising with different technology teams within the organization
• Facilitate and embed security controls across our infrastructure and into our CI/CD pipelines
• Set up monitoring dashboards, alerts, log management, and other security operations capabilities by utilizing industry standard tools and platforms (SIEMs) alongside our currently deployed toolsets/platforms
• Help enhance Incident Response capabilities including Runbooks, reputation management, etc.

Requirements:

• Knowledge of IAM concepts, including but not limited to provisioning, RBAC, SCIM, LDAP, and governance and authorization standards
• Experience with identity governance platforms
• Experience with federated identity platforms/products
• Knowledge of current Identity providers and protocols such as Oauth 2.0, OpenID Connect, and SAML 2.0. Tokenization
• Experience with authorization protocols like XACML and UMA
• Experience with Privileged Access Management MFA, Duo, Okta SSO integration
• Experience with API security and public cloud APIs & integration
• Understanding of information security architecture, mitigation of threats, and compensating controls
• Deep familiarity with frameworks such as NIST 800-53, ISO 27001
• Experience with and proven methods for managing the information security incident lifecycle, including incident response, mitigation, after-action reporting, and mapping a path forward
• Strong understanding of static analysis, dynamic analysis and toolsets surrounding both
• Excellent oral and written communications skills for working with varying levels of technical experience
• Strong Programming experience in one of the high-level languages - Python/Perl/Go
• Proven ability to independently identify and resolve critical and complex issues through effective problem-solving skills
• Ability to combine information from various sources into clear, concise technical documents that explain the background and procedures for detecting and mitigating risks

Nice to have:

• Master's degree in Computer Science/Computer Engineering/Cyber security