Cyber Security Technical Lead

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose.

Position Overview:

We are seeking a Cybersecurity Tech Lead to join the Credential Management team within the Information Security of the Enterprise Operations and Technology Division. Technical lead will provide engineering, automation, implementation and operations of privileged access management and credential management technologies. This role also includes a monthly on-call rotation and will assist with level 3 troubleshooting.

Our Impact:

As a Technical Lead, you will be part of the Cybersecurity Engineering Team at Freddie Mac and will help fulfill the Information Security department’s vision of reducing information risk by ensuring and enhancing the Confidentiality, Availability, and Integrity of Information systems at Freddie Mac. You will lead the development and delivery of our technical solutions related to Privileged Access Management and Credential Management. You will build, develop, and maintain relationships with internal and external customers, and vendors to formulate remediation solutions for issues related with Cybersecurity.

Your Impact:

Technical Leadership and Engineering Management:

• Enhance privileged access management capability of blending the needs from enterprise wide technical & business groups

• Lead, design and collaborate with architecture teams to align with zero-trust roadmap and architecture standards.

• Mentor Engineers to ensure engagement and advancement of the overall Team

• Develop best practices for engineering and administration of PAM and Credential Management solutions.

Continuous process improvement and automation

• Always start from a view of automating as much of the overall process as possible.

• On a continuous basis review task, increase efficiency, and mark tasks for automation/transfer to delivery team.

• Utilize and drive project milestones through Jira to ensure clear communication/expectations with leadership and stakeholder.

Engineering-Driven Compliance & Best Practices:

• Ensure solutions align with regulatory and compliance requirements – specifically NIST, while maintaining scalability to meet evolving business needs

• Engineer solutions with the understanding FM is a highly regulated firm which requires control validation by non-technical team members.

• Assist in audits and ensure compliance with security standards.

• Utilize a problem-solving approach to design solutions that not only address immediate risks but also future-proof solutions/defenses against emerging threats.

Collaboration and Stakeholder Engagement:

• Collaborate with IT, Operations, End User Support, and software engineering teams to integrate security while keeping users experience as a key function of the solution.

• Work closely with senior leadership on the selection, design and delivery blueprint of new  security technologies and tools to address evolving threat landscape

Qualifications:

• 8+ years of professional IT experience with extensive experience in modernizing privileged access management at large enterprises along with credential and secrets management

• 4+ years of experience implementation and administration of Privileged Access Management, Credential Management, Privileged Session management, and Privileged Remote Access.

• Deep understanding of credential and secrets management, along with the ability to implement cutting-edge solutions such as Just-In-Time entitlements and zero-standing privileges using industry-leading technologies.

• Experience and understanding of Identity life cycle management tools.

• Experience and understanding of SEIM configuration and management

• Experience and understanding of platforms Such as Windows, Linux, Databases, and Mainframe

• Experience in implementing secrets management and PAM in hybrid and multi-cloud environments (AWS, GCP and Azure)

• Experience of AWS security and CFT

• Experience on Firewalls, VPNs and Network Segmentation

• Added advantage on Experience with infrastructure automation platform Ansible, terraform

• Experience with windows and Networking troubleshooting

• Ability to prioritize work without management direction and provide clear, documented status updates to the management and the te