Senior Security Administrator

About the Company:

Headquartered in Santa Ana California, Veros (www.veros.com) is an established and growing technology company that develops, operates, and maintains custom software and business analytic solutions for the financial services industry. We are looking for a self-motivated, independent person to play a critical role, supporting the company’s end user technology needs. 

Veros offers a unique opportunity that encourages creativity and professional growth along with a competitive salary and benefits package including medical, dental, vision, life, 401(k), paid vacation, holidays, and more. 

Position Summary: 

Reporting to the Director of IT Security, the primary objective of this position will be expected to provide front line support for cybersecurity for Veros’ portfolio of financial services solutions, all aspects of IBM’s Identity and Access Management (IAM) stack, and security the public-facing production technology infrastructure, including both primary and backup data centers, as well as internal production and development systems. The role is also expected to provide senior-level subject matter expertise and guidance to Veros’ internal software architecture, design, and development functions. 

Principal Responsibilities:

Cybersecurity:

• Plan, coordinate, and implement cybersecurity measures to protect data, software, and hardware
• Support the design, development, and automation of Cloud security architecture on internal/external systems with various cloud providers (such as Azure and AWS)
• Actively support the application vulnerability assessment, third-party risk assessments, compliance, audits, and due diligence
• Proactively monitor Veros’ infrastructure for security breaches, take appropriate action to mitigate risks, implement cybersecurity measures to protect data, and provide root cause analysis for security incidents
• Strong understanding of networking concepts including encryption, switching, routing, security, and load-balancing, including SSL VPN, P2P and various routing protocols
• Experience with IT Security to include anti-virus, mail security, IDS/IPS systems, etc
• Work closely with the development team to review existing applications and system enhancements to ensure protection against the OWASP Top 10 and other common security vulnerabilities
• Support assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes
• Maintain Internal Certificate Authority and PKI implementation
• Conduct security review for cloud product(s) and service provider(s) during vendor selection and solution architecture

Identity and Access Management (IAM):

• Install, configure, update, upgrade, administer, and support IBM Tivoli suite of products i.e., SIM, SAM, SFIM, SAM E-SSO, SDS, and/or SDI and other IAM solutions
• Proactively monitor IBM Tivoli performance and implement best practices
• Successfully troubleshoot integrations, configure policies, workflows, and access controls
• Understand high availability concepts, load balancers, clustering, and firewalls
• Interpret requirements and assist in producing solution designs in the areas of administration process and user provisioning, identification and authentication, authorization, identity centralization/directory services, federation, single sign on, and compliance reporting
• Work closely with software architects to design and develop product enhancements related to the integration with the IAM platform
• Monitor infrastructure using enterprise-class systems monitoring software
• Develop custom monitoring solutions for specific components as required
• Develop and maintain effective automation procedures using shell scripting and similar techniques
• Support disaster recovery events with switchover, validation, and switchback

Qualifications and Requirements:

• Bachelor’s degree in Computer Science or related discipline (or equivalent career experience)
• 5+ years of progressive hands-on security experience in security tools and programs and successfully executing security initiatives across the organization
• Support the development and implementation of enterprise cloud and hybrid cloud architecture
• Experience with service-oriented architecture and architecting solution for cloud-based services such as Azure, AWS - Required
• Working knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms (OAuth, OpenID, etc.)
• Experience performing threat modeling and design reviews to assess se