Director, IT Security

Bluebird Network•Kansas City, KS

15h

About The Position

Bluebird Fiber is seeking an experienced IT Security Director to secure the organization’s infrastructure, communications, data, and other assets as the business grows. The role designs the organization’s cybersecurity strategy, including a defense-in-depth platform, and leads the team that implements and monitors security defenses. It also manages security vendors, leads security audits, develops policies and procedures, and helps ensure systems remain secure, reliable, safe, and accessible for business-critical functions. The Director works with stakeholders across the business to understand existing systems, networks, and technologies and to incorporate security into new technology discovery, design, and implementation. This is a full-time, benefit-eligible position in the Kansas City, Missouri area. Bluebird Fiber is a growing Midwest fiber telecommunications provider serving carriers, businesses, schools, hospitals, and other enterprises.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related technical field.
10+ years of hands-on experience in Cybersecurity, IT Service Management, Network Engineering, or a related field, with a proven track record of building secure, friction-less experiences.
5+ years of experience designing and implementing enterprise-level cloud environments, preferably through Terraform.
5+ years of experience managing Microsoft InTune and Purview environments.
5+ years of experience managing Palo Alto firewalls and related technology.
5+ years of experience managing Tenable.io or other Nessus vulnerability scanners.
5+ years of scripting experience with Python and Powershell to automate Microsoft 365 or internal processes.
5+ years of experience with AWS technologies, including EC2, EKS, Fargate, and Cloudwatch.
At least 1 year of experience with Generative AI governance and security design.
5+ years of experience developing Security Policy documentation.
Excellent written and verbal communication skills, with the ability to influence and build consensus with other business units.
Highly motivated, self-starting, and possessing a strong sense of duty.
Continual learner who engages with industry trends and new technologies.
Critical thinking, analytical, problem-solving, and troubleshooting skills, including the ability to devise corrective actions.
Ability to hold people accountable and keep teams focused.
Highly organized and efficient, able to multitask and prioritize tasks appropriately.
Ability to solve complex problems and deliver productive work without sacrificing quality, maintainability, accessibility, or performance.
Ability to perform duties with a high degree of accuracy.
Willingness to give and receive feedback positively and respectfully.

Nice To Haves

Knowledge of designing and implementing network device access using HPE Aruba Clearpass Policy Manager.
Professional certifications in cybersecurity, networking, AWS, or Microsoft systems management.
Telecommunications industry experience.

Responsibilities

Lead the IT Security team and protect company employees, customers, data, networks, and other assets from internal and external threats.
Manage IT security vendor and partner relationships, including managed security service providers (MSSPs).
Determine Palo Alto Firewall deployment design and remote access solutions.
Design and administer a vulnerability management program.
Develop and maintain a vendor management program.
Create and sustain responsible Generative AI usage policies.
Manage on-premises and cloud Identity & Access Management platforms.
Design and implement Multi-Factor Authentication (MFA) and Single Sign-On (SSO) for systems where possible.
Design and manage the security posture of on-premises and cloud infrastructure.
Lead required compliance audits and perform regular access and system log reviews.
Research and plan the implementation of advanced information security techniques.
Create and maintain Information Security policy documentation.
Work with stakeholders during discovery, design, and implementation of new technologies to ensure security is considered from the outset.
Provide advanced-level support to internal users for security-related IT Service Management trouble tickets.
Create and maintain Disaster Recovery procedures and documentation.
Budget and plan IT Security expenditures.
Design current backup and restore procedures for company systems.
Select and use tools to safeguard company resources and data.
Design and lead internal security awareness training programs.