Cloud Security Engineer I 5260

JOIN THE KEESLER FEDERAL CREDIT UNION TEAM!

Keesler Federal Credit Union team members enjoy competitive salaries and a wide

range of benefits, some of which include:

* Medical, dental, and vision insurance

* Section 125 Flexible Spending Accounts for Health Care and Dependent Care

expenses

* Employee and Dependent Life Insurance

* 401(k) Retirement Plan with 100% match on the first 5% contributed by you

* Paid Leave

* Tuition Reimbursement and Competitive Scholarships

* Short-Term & Long-Term Disability Benefits

* Employee Assistance Program

WE CURRENTLY DO NOT SPONSOR WORK RELATED VISAS

Position: Cloud Security Engineer I

Department: Enterprise Infrastructure

Reports To: VP - Enterprise Infrastructure

FLSA: Exempt Grade: IT

810

SUMMARY

Responsible for planning, designing, documenting, implementing, and maintaining

cybersecurity for the desktop, server and cloud infrastructure. Performs tasks

to enhance cybersecurity by protecting system boundaries and ensuring systems

are hardened against potential attacks on premise and cloud. Performs research

and troubleshooting to provide solutions for complex technical issues related to

the security of infrastructure systems and applications. Responsible for

managing cybersecurity related projects that impact the organization and the

security of mission-critical IT services. Contributes to policies and procedures

that ensure IT systems are in compliance with the organization’s cybersecurity

requirements. Performs a variety of other security engineering tasks to ensure

the security and protection of enterprise technology resources and support the

goals of the organization.

SUPERVISORY RESPONSIBILITIES

None

ESSENTIAL FUNCTIONS

* Assess IT security risk and exposure on existing and modern infrastructure

solutions on premise, hybrid, and cloud.

* Recommend, implement, maintain, and monitor security solutions to protect IT

Infrastructure systems including but not limited to Azure express routes,

virtual network edges, vnets, resource groups, load balancers, NSGs, ASR, and

various virtualized storage solutions across multiple regions.

* Recommend, implement, maintain, and monitor security solutions for virtual

desktop infrastructures both on premise and cloud, including but not limited

to Citrix, and Azure Virtual Desktop.

* Recommend, implement, maintain, and monitor security tools to determine risks

and protect organizational assets.

* Investigate and recommend appropriate corrective actions for IT security

incidents.

* Perform information security risk assessments and serve as internal resource

for information security processes.

* Write comprehensive reports and documents including assessment-based

findings, outcomes and propositions for further system security enhancement.

* Effectively manage and coordinate efforts with Security Operations Center

partners, and 3rd party providers.

* Administer, maintain, and enhance ACL’s, anti-malware, anti-spam, host-based

firewalls, internet content filtering, data loss prevention, patch

management, application whitelists, and various other cybersecurity

components.

* Research, identify, assess, and document security vulnerabilities and risks

for existing and forthcoming infrastructure systems and applications to

include on premise, hybrid and cloud systems.

* Recommend, design, and implement technical solutions to mitigate identified

security risks and vulnerabilities.

* Provide requested documentation for internal and external IT security audits

regarding the desktop, server, and cloud infrastructure.

* Design and maintain diagrams of the infrastructure as it relates to

cybersecurity.

* Collaborate with the Information Security Department and serve as a liaison

with the Enterprise Risk Management division to continuously enhance

cybersecurity for the desktop and server infrastructure.

* Harden, patch, and secure Windows, and Linux operating systems.

* Harden, patch, and secure various enterprise technologies including but not

limited to Microsoft Active Directory, SQL, Exchange, Office 365, Microsoft

Teams, Power BI, SharePoint, SCCM; VMware vSphere, ESXi; Citrix Cloud,

XenDesktop ,and ADCs

* Recommend, design, and implement solutions to meet established security

requirements and compliance baselines.

* Stay abreast of current cybersecurity trends, governance, issues, threats,

and best practices.

* Actively maintain security related service requests and provide thorough

documentation therein.

* Utilize approved change management procedures to implement changes and

cybersecurity enhancements.

* Responsible for compliance with all Federal regulations including Bank

Secrecy Act (BSA) and Office of Foreign Assets Control (OFAC

Other Duties and

Responsibilities

• * Assists in training new personnel.
• * Other duties as assigned.
• Knowledge & Skills
• To perform this job successfully, an individual must be able to perform each
• essential duty satisfactorily. The requirements listed below are representative
• of the knowledge, skills and/or abilities required. Reasonable accommodations
• may be made to enable individuals with disabilities to perform the essential
• functions.
• Education:
• * Equivalent to a college degree (BS or BA in a relevant field).
• *
• Experience and Other

Requirements

• * Three to Five years of similar or related experience.
• * CompTIA CASP, ISC2 SSCP, Microsoft Azure Security Engineer or the equivalent
• combination of training, education, and experience required.
• * Excellent communication and documentation skills.
• * Must be capable of working well with others and independently.
• * Must be able to perform all job functions with minimal supervision in a
• timely fashion.
• * Must be able to evaluate service requests and projects and prioritize as
• necessary.
• * Accuracy, attention to detail, and confidentiality required.
• * Requires after-hours, weekends and on-call work as needed.
• * Some travel is required.
• Interpersonal Skills:
• Courtesy, tact, and diplomacy are essential elements of the job. Work involves
• much personal contact with others inside and/or outside the organization for
• purposes of giving or obtaining information, building relationships, or
• soliciting cooperation.
• Computer Skills:
• (See Essential Functions, Education, and Experience Requirements above)
• Certificates, Licenses and Registrations:
• CompTIA CASP, ISC2 SSCP, Microsoft Azure Security Engineer or equivalent
• certification or must be willing to obtain certification within 12 months.
• PHYSICAL DEMANDS
• The physical demands described here are representative of those that must be met
• by an employee to successfully perform the essential functions of this job.
• Reasonable accommodations may be made to enable individuals with disabilities to
• perform the essential functions.
• While performing the duties of this job, the employee is regularly required to
• sit, kneel, stoop, and crouch; use hands to finger, handle or feel; reach with
• hands and arms; and talk or hear. The employee is frequently required to stand
• and walk. The employee frequently is required to lift and/or move up to 50
• pounds. The employee is occasionally required to climb a ladder to work in high
• places or work in confined spaces and occasionally required to drive a motor
• vehicle to perform job duties at a branch or remote location.
• WORK ENVIRONMENT
• The work environment characteristics described here are representative of those
• that must be met by an employee to successfully perform the essential functions
• of this job. Reasonable accommodations may be made to enable individuals with
• disabilities to perform the essential functions.
• Extensive use of desktop computer is required. The noise level is that of a
• normal office environment. When working in designated secured areas, elevated
• noise level may be present.
• DECLARATION
• The human resources department retains the sole rights and discretion to make
• changes to this job description.