Cybersecurity Engineer III

Sierra Space•Centennial, CO

3d•$122,109 - $167,899

About The Position

The Cybersecurity Engineer III designs, implements, and maintains advanced security measures to protect the organization's information systems. The role works with security technologies including encryption, intrusion detection and prevention systems, and multi-factor authentication. It requires extensive knowledge of secure systems architecture, emerging technologies, threats, and regulatory requirements. The engineer works with senior engineers and cross-functional teams to protect the security and integrity of information systems, support complex security projects, and continuously improve the organization's security posture.

Requirements

Bachelor's degree in a related field, or equivalent work experience in lieu of a degree; alternatively, a master's degree plus 3 years of experience.
Typically 5 or more years of related experience.
One or more of the following certifications or training: GIAC certification, a network technology certification such as CCNP, or SANS level 300 courses.

Nice To Haves

Hands-on experience administering IAM platforms such as CyberArk, BeyondTrust, Okta, or comparable privileged access management tools.
Experience administering MFA platforms such as RSA SecurID, Cisco Duo, Okta MFA, or comparable systems.
Experience deploying multi-factor authentication at enterprise scale.
Experience with phishing analysis and simulation platforms such as Cofense, KnowBe4, Proofpoint, or comparable products.
Experience designing and running security awareness training and phishing simulation programs.
Experience with Microsoft Purview, Microsoft Azure, or Microsoft 365 data loss prevention and security administration.
CCSP, CISA, CISM, CISSP, or equivalent certification.
Proficiency in scripting languages such as Python, PowerShell, or Bash for automating security tasks.
Strong problem-solving skills, attention to detail, and excellent communication and teamwork skills.

Responsibilities

Administer the Identity and Access Management platform, including managing user access and maintaining the platform.
Maintain on-premises hardware hosting IAM platforms and plan and execute migrations away from end-of-life hardware and software.
Administer on-premises MFA implementations, including renewing token license keys.
Own enterprise MFA configuration and deployment, including the Duo admin portal, policies, and enrollment.
Administer the phishing email security platform, including tuning, maintenance, and updates for phishing analysis and reporting.
Maintain enterprise phishing reporting functionality and deploy updates as needed.
Lead the phishing simulation and security awareness training program, including campaign design, scheduling, and reporting.
Build, tune, and administer data loss prevention policies.
Develop and maintain security policies, procedures, and documentation.
Monitor and respond to security incidents and alerts, providing technical support and troubleshooting.
Collaborate with cross-functional teams to integrate security best practices into system designs and deployments.
Document operational procedures and institutional knowledge in writing to support team continuity.