Senior Systems Engineer (I.S.)

Sumitomo Electric Group•Farmington Hills, MI

3d•Hybrid

About The Position

This position provides operational administration, technical direction, and support for company information security systems. The Senior Systems Engineer supports the IT Security Manager in maintaining company-wide security controls and compliance with parent company policies, standards, and operating constraints. The role is directly responsible for administration, configuration, security, and support of company firewall, intrusion detection (IDS), and intrusion prevention (IPS) technologies, and administers key identity, network, cloud, and infrastructure security systems. The position works with the Network Administrator to securely configure and maintain Cisco network infrastructure. It provides security direction for endpoint protection and supports security controls for file sharing, email, databases, SharePoint, and other business systems where they intersect with network, operating system, or Active Directory security. The role manages integration of Office 365 and Azure security controls with company systems within parent company requirements. The Senior Systems Engineer leads or supports security incident response, audit activities, security standardization, vendor-managed security services, policy development, reporting, and technical coordination with North American affiliated companies. It also serves as a senior Computer Security Incident Response Team (CSIRT) resource. The position is based at the SEWS Farmington Hills, Michigan office and is hybrid. Associates are required to work in the office at least four days each week, with flexibility to work off-site.

Requirements

Bachelor’s degree required.
7–10 years of progressive professional experience.
Experience securing Active Directory, Group Policy, Windows Server, authentication, privileged access, and file sharing.
Experience with Microsoft 365, Exchange Online security, Azure security controls, and identity integration.
Experience administering FortiGate firewalls and related Fortinet security products.
Experience with firewalls, IDS/IPS, VPN, wireless, network segmentation, and security logging.
Experience developing security policies, procedures, standards, technical documentation, and audit evidence.
Experience with security incident response, CSIRT activities, vulnerability remediation, and security audits.
Experience managing third-party security providers, service contracts, projects, and outsourced resources.
Experience supporting multi-site, manufacturing, or affiliated-company IT environments.
Ability to communicate security risks and recommendations to technical teams, senior management, and end users.

Nice To Haves

Preferred certifications: CISSP, CISM, CompTIA Security+, Microsoft Azure, Microsoft 365, Cisco, or Fortinet.

Responsibilities

Manage security for firewalls, IDS/IPS, remote access, internet connectivity, network segmentation, and wireless security.
Lead CSIRT activities, coordinate security incident response, support security audits, and maintain required evidence and documentation.
Develop, maintain, and enforce security policies, procedures, standards, system configuration requirements, and documentation practices.
Manage the security integration of Office 365 and Azure with company systems within parent company policies, controls, and constraints.
Manage external security service providers, contracts, and outsourced security resources; monitor service delivery and improvement actions.
Work with the Network Administrator to review and improve the security of Cisco LAN/WAN, routing, switching, VLAN, and wireless configurations.
Provide security support to North American affiliated companies and communicate security status, risks, projects, and recommendations to management.
Administer and secure Active Directory, Group Policy, authentication, privileged access, and related Windows infrastructure security controls.
Provide security direction for endpoint protection and assist with security controls affecting file sharing, email, SQL, SharePoint, and other business systems.
Perform other duties as assigned.