Job Description:
• Developing, implementing, and maintaining IAM systems and solutions
• Troubleshooting, identifying, and resolving technical IAM related issues
• Ensuring that solutions protect information resources against unauthorized use, inappropriate degrees of access, disclosure, damage and/or loss
• Identifying, analyzing and resolving system design weaknesses
• Develop a complete understanding of US LBM’s technology and information systems
• Build, implement and support enterprise-class security systems
• Align organizational security strategy and infrastructure with overall business and technology strategy
• Identify and communicate current and emerging security threats
• Implement and maintain security infrastructure elements to mitigate threats as they emerge
• Identify security design gaps in existing and proposed architectures and recommend changes or enhancements
• Create solutions that balance business requirements with information and cybersecurity requirements
• Validates IT infrastructure and other reference architectures for security best practices and recommend changes to enhance security and reduce risks, where applicable
• Conducts or facilitate threat modeling of services and applications that tie to the risk and data associated with the service or application
• Test security systems to ensure they behave as expected
• Use current programming language and technologies to writes code, complete programming and performs testing and debugging of applications
• Define, implement and maintain corporate security policies and procedures
• Respond immediately to security-related incidents and provide thorough remedial solutions and analysis
• Regularly communicate vital information, security needs and priorities to upper management
Requirements:
• Bachelor’s degree in information systems or equivalent experience required.
• 3-4 years of IT security experience required.
• 5-7 years of IT systems engineering experience, with broad understanding of Windows Domain environment, networking, and some Cloud experience, particularly Microsoft Azure.
• Demonstrated ability leading security-based project.
• Must have technical competency in IT/Systems, combined with business acumen to understand and translate between business and technical requirements.
• Experience and strong understanding of security frameworks and concepts such as Zero Trust model, NIST Cybersecurity Framework, and Microsoft Cloud Security Benchmark.
• Able to support multiple efforts in parallel, in a highly matrix, fast-paced, multi-site organization experiencing rapid growth.
• Proficient in performing risk, business impact, control and vulnerability assessments, and in defining treatment strategies.
• Strong interpersonal skills required, with a positive approach to collaboration and relationship building.
• Must have excellent written and verbal communication skills.
• Strong analytical, organizational and demonstrated problem solving and conflict resolution skills.
• Must be a self-starter with an attitude to 'get things done' and an excellent understanding of information security concepts, protocols, industry best practices and strategies.
• Travel required to various operating locations along with business-related meetings & conferences.
• Industry certifications related to Security, Systems and Network Engineering, such as Network +, Security +, CCNA, Microsoft Certified Azure Security Engineer Associate (AZ-500) .
Benefits:
• Comply with all policies and standards
• Adheres to Company’s commitment to workplace safety