Security Operations Engineer

Fisher Dynamics•St. Clair Shores, MI

28d•Onsite

About The Position

Fisher Dynamics is seeking a Security Operations Engineer to join their corporate IT department in Saint Clair Shores, MI. This position is responsible for executing security controls, compliance frameworks, and infrastructure hardening for Fisher Dynamics' custom ERP platform. The role involves translating security architecture into operational reality by configuring firewalls, implementing ISO 27001/TISAX controls, hardening switches, deploying GRC tooling, and ensuring compliance readiness. The Security Operations Engineer will be the hands-on implementer responsible for making security work in production.

Requirements

Bachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, or related field or equivalent professional experience (5+ years)
5-8 years hands-on cybersecurity implementation (not just planning/architecture)
ISO 27001 implementation experience — Led control implementation, not just audits
Firewall & network infrastructure hardening — Palo Alto, FortiGate, Check Point, Juniper
Cloud security implementation — AWS, GCP, or Azure IAM, logging, monitoring
MSP or managed services background — Comfortable with operational discipline, SLAs, documentation
Expert firewall configuration and hardening
Network segmentation, VLAN design, routing protocols
VPN, proxy, DMZ architecture
Switch/router configuration and hardening
Cloud infrastructure (AWS VPC, GCP VPC, Azure networking)
Identity management systems (Okta, Azure AD, Entra ID)
Multi-factor authentication (MFA) deployment
Privileged access management (PAM)
RBAC/ABAC design and implementation
ISO 27001 controls mapping and implementation
Audit evidence collection and remediation tracking
Control testing and validation
SIEM configuration and log management
Vulnerability scanning and remediation
Incident response procedures
Security monitoring and alerting
Firewall platforms (Palo Alto Networks, Fortinet, Check Point, Juniper)
Cloud security platforms (AWS Security Hub, GCP Security Command Center, Azure Security Center)
SIEM/logging (Splunk, ELK, Datadog)
Configuration management and IaC (Terraform, Ansible)

Nice To Haves

TISAX/manufacturing compliance strongly preferred
GRC tooling experience — ServiceNow, Archer, Compliance.ai, or similar (preferred)
TISAX/manufacturing compliance requirements
GRC/compliance tools (ServiceNow, Archer, Tenable, Qualys)
Security+, CISSP, or CCSK (preferred)
CompTIA Network+ or CCNA (for network depth)
Firewall certifications (Palo Alto, Fortinet) (preferred)

Responsibilities

Implement ISO 27001 and TISAX controls across the ERP platform
Deploy and configure GRC tooling for control tracking, evidence collection, and audit documentation
Map security requirements to technical controls (access control, encryption, logging, monitoring)
Maintain control inventory and track implementation status
Support compliance audits with evidence gathering and remediation tracking
Configure and deploy firewalls (Palo Alto, Check Point, Fortinet, etc.) for ERP protection
Implement firewall rules aligned with zero-trust architecture and network segmentation
Harden network infrastructure: switches, routers, VPN endpoints
Implement network access controls, rate limiting, DDoS protection
Troubleshoot and optimize firewall performance without compromising security
Implement cloud security controls on AWS/GCP/Azure (security groups, NACLs, WAF)
Configure cloud IAM, MFA, logging, monitoring aligned with compliance requirements
Implement secrets management, key rotation, and encryption controls in cloud environment
Perform cloud security configuration reviews and remediation
Deploy identity and access management systems (RBAC, ABAC)
Configure multi-factor authentication (MFA) and conditional access policies
Implement privileged access management (PAM) for administrator accounts
Maintain user access reviews and certification workflows
Configure segregation of duties controls in ERP system
Configure centralized logging and SIEM systems for security event monitoring
Implement alerts for suspicious activity, policy violations, and anomalies
Maintain audit trails for compliance and forensics
Support incident response: investigation, containment, remediation
Produce security monitoring dashboards and reports
Execute vulnerability scanning and assessment programs
Coordinate patch management and security updates
Remediate identified vulnerabilities with risk-based prioritization
Track remediation status and compliance with SLAs
Document security configurations, controls, and procedures
Maintain compliance evidence (control matrices, test results, audit logs)
Prepare for ISO 27001/TISAX audits with documentation and evidence
Write control testing procedures and validation scripts
Update risk registers and compliance status reports
Treat security implementation like managed service: reliable, repeatable, documented
Build runbooks and standard operating procedures for control execution
Monitor control effectiveness and optimize over time
Proactive identification of risks and recommendations for improvement