Sr IT Systems & Security Engineer

Essential Functions (Other Duties as Assigned)

Cloud Services Management

• Administer and optimize cloud environments, primarily focusing on Microsoft 365 and Azure, ensuring scalable, secure, and efficient operations.
• Implement and manage cloud-based applications and services, including integrations with on-premises or other cloud systems.
• Oversee cloud data storage, backup, and recovery processes, ensuring data integrity and compliance with data protection standards.

 

POS System Security

• Ensure the security and integrity of POS systems, implementing cybersecurity measures to protect against threats and unauthorized access.
• Coordinate with the applications team to ensure that POS systems are seamlessly integrated with cloud services and other IT systems.
• Monitor and maintain POS software and hardware, including regular updates and patches to address security vulnerabilities.

 

Cybersecurity Implementation and Management

• Deploy and manage advanced cybersecurity tools and processes to safeguard IT systems and sensitive data.
• Conduct regular security assessments and audits to identify vulnerabilities and implement remediation strategies.
• Keep up to date with the latest cybersecurity threats and countermeasures, continuously improving the organization's security posture.

 

Data Protection and Compliance

• Implement robust data protection strategies, focusing on both cloud-based and on-premises environments.
• Ensure compliance with relevant regulations and standards like PCI DSS, HIPAA and NIST CSF, adapting practices to meet the needs of different environments (cloud, hybrid, on-site).
• Collaborate with legal and compliance teams to ensure adherence to data privacy laws and guidelines.

 

Systems Administration

• Manage and maintain essential IT systems, with a particular focus on cloud-based environments and POS systems.
• Perform routine system maintenance tasks, including system monitoring, performance tuning, and troubleshooting.
• Coordinate with vendors and service providers to resolve complex system issues and optimize performance.

 

User Support and Security Training

• Provide high-level technical support for cloud and security-related issues.
• Develop and deliver training and awareness programs focusing on cybersecurity best practices and secure use of cloud services.

 

Project Involvement

• Actively participate in IT projects, ensuring cloud and cybersecurity considerations are integrated from the outset.
• Collaborate with various IT teams to align system and security objectives with broader organizational goals.

 

Education and Experience

Required:

• Bachelor's degree; or equivalent level of advanced schooling + experience
• 7+ years of relevant work experience in IT Infrastructure
• Familiar with IT Systems & Security concepts, design principles, best practices, standards, and processes
• Excellent analytical, statistical, quantitative, and deduction skills.
• Ability to represent information in graphical forms including creating data, infrastructure, and topology diagrams, etc.
• Experience implementing controls for Cybersecurity regulation such as: PCI-DSS, SOX, or CCPA
• Flexible and adaptable to changing priorities, based on business needs.
• Must be able to work occasional varied hours, including nights, weekends and holidays.

Preferred:

• Regular work exposure to Python and Git version control
• Exposure to JSON (arm) and XML
• Industry Certifications preferred (ITIL, CISSP, Azure, etc.)
• Working understanding of POS systems architecture

 

Knowledge, Skills, and Abilities

• Strong understanding of architecting and configuring Microsoft Windows OS technology
• Background in scripting and automation in widely used languages such as Python, JavaScript, PowerShell, etc.
• Systems management & deployment software such as SCCM, M365 Intune, JAMF, etc.
• Vulnerability scanning technologies such as VikingCloud, Rapid7, Qualys
• Understanding of change management processes associated with technology implementations.
• Understanding of project management principles.
• Strong knowledge of cloud platforms (e.g., AWS, Azure, Google Cloud) and associated security controls.
• In-depth understanding of SSO protocols and standards (e.g., SAML, OAuth, OpenID Connect) and their implementation.
• Execute data migrations from legacy/competing platforms into M365
• Familiarity with Endpoint Detection and Response (EDR) and Network Detec