Job Title: Information Security Engineer/Architect Location: Media, PA Looking for a Senior Technical architect which very good technical knowledge on AWS and DevSecOps. Ability to automate configuration management. Have broad understanding of programming languages, DB, Application security (SAST DAST), container security, scripting knowledge.
Basic Qualifications:
- Bachelor’s degree in Information Technology or a technical discipline (e.g., engineering) preferred, or technical certifications, or related experience
- Certified in one or more of the following preferred: CISSP, CISA, CISM, CEH, technology specific (proxy, data loss prevention, firewall, etc).
- Minimum of 7+ years working in Information Technology Security.
- Working knowledge of information security concepts and technologies such as: least privilege, networking, network segmentation, firewalls, IPS\IDS, network analyzers, encryption technologies, proxies, etc.
- Proven work experience as a system engineer or system security engineer
- Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocol
- Cloud security (AWS - Azure) architecture, environment, and WAF experience
- Experience with container management and containerization technology.
- Experience on Authentication, Single Sign-On Infrastructure (AD, Azure AD, VDS, Ping Federate); Experience implementing multi-factor authentication, single sign-on, identity management or related technologies
- Extensive experience on authentication and authorization strategies using SAML/OpenID/OAuth;
- Extensive experience in usage related Identity & Access Management & defining standards around data at & data in transit - encryption, authorization, authentication, and security mechanisms, especially the foundational elements of the Public Key Infrastructure.
- Experience in building and maintaining security controls
- Detailed technical knowledge of application, network, database and operating system security
- Hands on experience in security systems, controls and concepts
- Experience with network security and networking technologies
- Working knowledge of sub netting, DNS, encryption technologies and standards, VPNs, VLANs, VoIP and other network routing methods
- Network and web related protocols (TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols, etc.)
- Advanced Persistent Threats (APT), phishing and social engineering, network access controllers (NAC), gateway anti-malware and enhanced authentication
- Thorough understanding of the latest security principles, techniques, and protocols
Kanika Malik
Lead IT Recruiter
Infinity, a Stamford Technology Company
Accelerating Customer Growth…
Global Locations: USA-Canada-India-EMEA
Phone: 973-536-1058
Email:**********
Web :www.infinitysts.com