Engineer, Information Security

Baltimore County Public Schools • Essex, MD

55d • Hybrid

About The Position

Plans, designs, and implements security solutions to protect Baltimore County Public Schools' hybrid IT environment. Reviews regulatory security policies, as well as best practices, and collaborates to optimize processes for user accounts, managing access permissions and collaborating with cross-functional teams to enhance the organization's security posture. Performs other duties as assigned.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Three years of experience in systems administration to include Identity and Access Management (IAM).
• Three years of experience with Microsoft Graph, PowerShell scripting, Microsoft Servers and Active Directory environments.
• Three years of experience with SQL and database integration.
• One or more of the following certifications is required: Microsoft Certified: Azure Administrator Associate Microsoft Certified: Azure Security Engineer Associate CompTIA Security+ Certified Information Systems Security Professional (CISSP) Oracle certifications related to ERP SAAS solutions preferred.
• Possession of a valid driver's license equivalent to a non-commercial class C Maryland driver's license is required.
• Skill in scripting and programming languages such as Python, PowerShell, SQL, and VBA, with knowledge of C++ desirable.
• Skill in analysis and problem-solving, particularly in IAM and user lifecycle management.
• Knowledge of Single Sign-On (SSO) and federation solutions, including Azure AD, Azure B2C, Microsoft Graph, and Google Workspace.
• Knowledge of information security principles, vulnerabilities, and threat mitigation strategies.
• Ability to automate and optimize processes using tools like Power Automate and Power BI.
• Strong organizational, collaboration, and communication skills, with the ability to work in agile or iterative environments.
• Ability to interface effectively with HR, Finance, and Enterprise teams for security and user management needs.

Nice To Haves

• Experience with Oracle Cloud ERP account management and Oracle/AD integration.
• Experience with Business Objects report development.
• Familiarity with Zero Trust and Cloud Identity federation models.
• One year of supervisory or team lead experience.

Responsibilities

• Manage identity and access systems across Active Directory, Google Workspace, Azure, and Oracle Cloud ERP platforms.
• Integrate log sources from multiple platforms into the enterprise security information and event management (SIEM) and monitor security incidents.
• Develop and implement single sign-on (SSO) solutions and enforce security policies, standards, and procedures.
• Create scripts and automation tools to streamline identity and access management workflows and reduce manual effort.
• Assess and report on risks related to Active Directory and Privileged Access Management (PAM), ensuring compliance with regulatory requirements.
• Administer user accounts, manage Microsoft licensing, and coordinate account lifecycle processes including creation, modification, and offboarding.
• Leverage Power Automate, Power BI, and Business Objects for data analysis, reporting, and process automation.
• Conduct regular audits of user accounts and access logs to maintain compliance with security standards.
• Apply NIST Cybersecurity Framework (CSF) controls to identify, protect, detect, respond to, and recover from security threats across the organization's IT infrastructure.
• Perform server hardening and maintenance activities including security configuration, patch management, and implementation of baseline security standards for Windows and Linux environments.
• Perform other duties as assigned.

Benefits

• BCPS offers a comprehensive benefits program for eligible employees including options for medical plans, dental plans, vision, life insurance, flexible spending accounts, disability coverage, and 403(b)/457 plans.
• Other benefits include paid holidays, sick, personal business, and bereavement days, and flexible leave options such as FMLA, sick bank, and board approved leaves.
• All new hires will attend a benefits meeting upon hire.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level