Information Security Engineer (Identity Access Management Engineer)

Synovus•Franklin, TN

12h

About The Position

Consults at a senior level and provides professional support for major components of the firm’s information security program. Supports technical analysis, security design consulting, and product review; leads the identification of new tools and techniques; and researches innovative solutions to broad and complex security challenges. Manages project components through completion and works with corporate teams in Information Technology and business environments to define security solutions. The role helps develop, implement, monitor, maintain, and ensure compliance with information security architecture, standards, policies, procedures, and guidelines across diverse platforms and systems. It evaluates and implements emerging technologies, conducts security assessments and risk analyses, supports security tools and infrastructure, investigates violations, monitors vulnerabilities, and advises management on critical issues. The position also supports security awareness and education, produces security and network reporting, and participates in an on-call rotation providing 24x7 coverage of corporate security infrastructure and network environments. Employees are expected to understand and report risks and suspected violations within their functional area, comply with applicable policies and regulations, help meet clients’ financial needs and refer them to specialty areas as appropriate, and assist colleagues in delivering service. Other related duties may be assigned. The description is intended to indicate the general nature and level of work, not to provide a comprehensive inventory of duties or qualifications.

Requirements

Bachelor’s degree in Information Technology, Business Administration, or a related field, or an equivalent combination of education and experience.
Eight years of information security experience.
Background in multiple information security technologies, such as intrusion detection, penetration testing, and identity and access management.
Robust operational knowledge of the TCP/IP stack, network protocols, network topology and architecture, Windows and Unix operating systems, system log events, antivirus technologies, authentication systems (AD, LDAP, RADIUS, RACF), DNS, DHCP, SNMP, NetFlow, IP, and application development processes and lifecycles.
Ability to stand or walk regularly.
Ability to talk and hear regularly.
Ability to see objects up close or at a distance, use peripheral vision, and identify basic colors.
Use of hands and ability to reach.

Nice To Haves

Certified Information Systems Security Professional (CISSP).
Microsoft Certified Systems Engineer (MCSE).
Certified Network Engineer (CNE).

Responsibilities

Support the development and implementation of security architecture, standards, procedures, and guidelines for multiple platforms and diverse system environments.
Ensure security concerns are addressed and mitigated, and that appropriate standards are defined and published.
Drive evaluation, testing, and implementation of emerging technologies and information systems security solutions; present proposed enhancements to management for approval, funding, and implementation.
Perform security assessments and review networking initiatives for security compliance.
Prepare security status reports and informational metrics, and develop risk-analysis scenarios and response procedures.
Serve as a resource on the security of data networks and centralized data frameworks, coordinating with business units, users, and external networks.
Provide input on information security architecture design, implementation, and maintenance; analyze technical requirements and determine measures to mitigate security risks.
Implement and maintain required security tools; investigate information security violations and monitor and communicate technical vulnerabilities.
Identify where existing security policies and procedures need revision or new policies and procedures are needed.
Conduct risk assessments and security briefings, and advise management of critical issues.
Evaluate products and procedures to improve productivity and effectiveness, provide direct security support to the firm and IT staff, and consult on security issues involving new and existing systems.
Coordinate security awareness programs and educate employees on security policies and practices.
Monitor IT assets for security requirements, including procedures, software, and integrity.
Help build and maintain a security-conscious culture within the firm.
Participate in major projects and initiatives with a low level of management oversight.
Participate in the on-call rotation providing 24x7 coverage of corporate security infrastructure and network environments, resolving or escalating issues during the assigned on-call period.
Generate security- and network-related management information for internal reporting, including high-level analysis of emerging trends.
Observe applicable policies, procedures, laws, regulations, and risk limits; promptly raise and report known or suspected violations to the appropriate company authority.
Meet clients’ business and personal financial needs and refer them to specialty areas such as Trust, Investments, Insurance, or Treasury Management as appropriate.
Assist other team members as needed to ensure delivery of distinctive service.
Perform other related duties as required.