Senior Webseal - Security Engineer

The Senior Security Systems Engineer will be part of a leading edge, security systems team transforming a modern day enterprise infrastructure to an agile, agnostic, and highly trusted computing platform. This position will be responsible for the design, implementation and support of the security Platforms, as well as any other existing security toolsets necessary to protect the financial future of companies Customers

Primary responsibilities will include:

• Platform engineering responsibilities for supported platforms including:
• Design requirements
• Configuration to enable value to the enterprise
• Oversite of day-to-day operational support responsibilities
• Integration of the technical tools with other technical platforms
• Adoption of the technical tools deeper into the enterprise
• Assisting in defining of standards, guidelines, leading practices, metrics and continuous validation of system and capabilities
• Troubleshooting unique and complex problems related to processes, infrastructure, & encryption
• Expected to learn and implement new security products as needed
• Develop pioneering approaches to emerging Information Security industry trends and assist with automation of the environment

The ideal candidate should have:

• Bachelors degree or number of years of experience as alternate.
• 5+ years of experience with an enterprise level IT environment
• 3-5 years of experience in monitoring, developing and implementation of information security systems
• Prior experience working with Vormetric and Venafi platforms
• Experience in the consultative approach and support the cross organizational implementation of IT services
• Strong Unix Bash shell scripting experience
• Experience maintaining and operating a Public Key Infrastructure
• Experience maintaining, installing, and upgrading certificates from Enterprise Certificate Authorities.
• Working understanding of Asymmetric & Symmetric Key Cryptography.
• Working understanding of Encryption, Hashing and Digital Signatures.
• Understanding of PKI Policy, Life Cycle management and Auditing of PKI Infrastructure
• Experience with Private Key Protection Safenet or Thales Hardware Security Modules (HSMs) a plus
• Experience with Certificate Policies and Certification Practice Statements
• Experience effectively working directly with clients, team members, technical experts, professional staff, and management as needed to provide operational support
• Experience planning and executing software and/or infrastructure upgrades with minimal service disruption
• Experiencing using ServiceNow preferred
• Unix/Windows/VMWare hands on experience
• Familiarity with IP/Network/Cloud infrastructure components
• Information Security Principles & Technologies
• Strong knowledge of digital certificates and encryption
• Disciplined in documentation maintenance
• Java scripting experience is a bonus

Understanding of how PKI is integrated into HSM and Key Management for some of the following: Basic TLS Encryption, load Balancers, IBM WebSeal, IBM Datapower, BlueCoat, Web Servers (e.g., Apache and IIS), Splunk, Ironport, Cisco Content Switches and Active Directory Certificate Services (ADCS) JVM Keystores on Linux