Description

CTG is seeking to fill a Senior Technical Engineer opening for our client in Buffalo, NY.

Location: Buffalo, NY

Duration: 12 months

Overview:

Provides technical solutions, designs, documentation, and guidance, specifies solutions, and provides technical guidance at the highest level of technical direction in the development and deployment of new or existing technical solutions.

As a Workforce IAM - PAM - Cyber Security Engineer, you will play a crucial role in implementing and supporting Privileged Access Management Solutions in alignment with Company’s identity and access management strategy. You will work closely with cross-functional teams to ensure the effective management of privileged access rights, enforce security policies, and maintain regulatory compliance. This role functions with a moderate level of autonomy, leveraging team peer connections and support from more senior members of the WIAM team.

Primary Responsibilities:

• Work closely with Technology management, customers, and support teams on a regular basis to lead the design, development, and execution of technical solutions that meet or exceed the current and future needs of the organization.
• Primary responsibilities may include infrastructure architecture and design, research and development of new or expanded systems, creation of technology standards and policies, thorough analysis of user requirements and operational constraints, unit test and system integration, and user acceptance testing.
• Regularly and independently interact with business partners of varying associate and management levels to ensure clarity of the problem/opportunity and elicit business requirements. Estimate the size of the effort required to complete complex, moderate to large scale projects where applicable.
• Coordinate vendor interactions and manage contract and/or vendor resources as needed.
• Mentor and coach less experienced engineers, technicians, and integrators. Review documentation, proposals, and changes proposed by less experienced staff.
• Seek to expand knowledge and understanding of Financial Services trends, practices, and technologies on a continuous basis.
• Follow and promote use of industry best practices, standards and procedures.
• Maintain an expert level of technical aptitude and expert working knowledge of supporting application(s), development environments and the supported client environment. Maintain an expert level understanding of vendor products, services, and future updates.
• Assist in developing expense and capital budgets.
• Understand and adhere to the Company's risk and regulatory standards, policies, and controls in accordance with the Company's Risk Appetite. Identify risk-related issues needing escalation to management.
• Promote an environment that supports diversity and reflects the Company brand.
• Maintain internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.
• Implementation of PAM Solutions that aligns with industry best practices, regulatory requirements, and organizational policies.
• Collaborate with internal and external auditors to ensure compliance with IAM-related regulatory requirements, manage audits, and respond to audit inquiries.
• Adhere to applicable operational risk controls in accordance with Company or regulatory standards and policies and standards.
• Develop, implement, and enforce privileged access management policies, procedures, and guidelines, ensuring compliance with relevant regulatory bodies.
• Establish processes for privileged user provisioning, de-provisioning, and modification of access rights across critical infrastructure, platforms, and applications, ensuring timely and accurate access management.
• Define and maintain Privilege Access Security Models, Role-Based Access Control (RBAC) models, mapping roles and responsibilities to access privileges, and ensuring segregation of duties (SoD) and least privilege principles are enforced.
• Monitor, report, develop and address anomalies of key performance indicators (KPIs) and key risk indicators (KRIs).
• PAM Engineering role includes:
  • Designing and implementing privileged access management solutions: They develop strategies and architectures to securely manage, monitor, and control privileged access to critical systems and data.
  • Configuration and customization: They configure PAM tools according to the organization's specific requirements and integrate them with existing systems and workflows.
  • Policy development and enforcement: They define and enforce policies for privileged access, ensuring compliance with industry regulations and security best practices.
  • Monitoring and auditing: They monitor privileged access activities, detect anomalies or suspicious behavior, and conduct regular audits to ensure adherence to security policies.
  • Incident response and resolution: In the event of security incidents or breaches involving privileged accounts, they lead the response efforts, investigate the root causes, and implement corrective actions to prevent future occurrences.
  • Collaboration and training: They collaborate with cross-functional teams, including IT, security, and compliance departments, to ensure alignment of PAM initiatives with organizational goals. Additionally, they provide training and awareness programs to educate users about the importance of privileged access management and best practices for securing sensitive resources.

Supervisory/Managerial Responsibilities:

• Not Applicable.

Skills:

• Security expertise: A strong understanding of cybersecurity principles, including authentication, logging and monitoring, authorization, encryption, and network security.
• Knowledge of PAM tools: Proficiency in using privileged access management tools such as CyberArk, BeyondTrust, Thycotic, or similar solutions.
• Identity and Access Management (IAM): Understanding of IAM concepts, including role-based access control (RBAC), least privilege access, and directory services, authentication services, IDp, MFA, Security Models (e.g., Active Directory).
• Networking: Knowledge of network protocols, firewall configurations, and VPN technologies to ensure secure access to privileged resources.
• Cloud Platforms: Understand of various aspects of Cloud technology, Understanding of Enterprise Hybrid-cloud environments. various cloud types and platforms (SaaS, PaaS, IaaS, Azure, AWS, GCP)
• Operating systems: Familiarity with various operating systems (e.g., Windows, Linux, Unix) and their security features to implement effective access controls.
• Scripting and automation: Proficiency in scripting languages (e.g., Python, PowerShell) to automate repetitive tasks, streamline processes, and integrate PAM solutions with existing systems. CIDI technology and source control, DEVSECOPS, Secrets Managements (e.g. GitLAB,)
• Risk management: Ability to assess risks associated with privileged access, prioritize mitigation efforts, and develop strategies to reduce the organization's exposure to security threats.
• Communication skills: Strong verbal and written communication skills to collaborate with cross-functional teams, document procedures, and communicate security requirements effectively.
• Problem-solving: Aptitude for troubleshooting technical issues, analyzing complex problems, and finding innovative solutions to address security challenges.
• Compliance knowledge: Familiarity with regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS) and industry standards related to privileged access management.
• Continuous learning: Willingness to stay updated on the latest cybersecurity trends, technologies, and best practices through ongoing training and professional development.
• Attention to detail: Thoroughness in implementing security controls, documenting configurations, and reviewing access policies to ensure accuracy and effectiveness.

Education and Experience Required:

• Bachelor's degree and a minimum of four years’ experience in PAM domain, cybersecurity, risk, and/or governance role. In lieu of a degree, a combined minimum of 8 years’ higher education and/or work experience.
• Thorough understanding of the system development and infrastructure lifecycle and architecture, vendor best practices, IT Service Management, and systems design.

Education and Experience Preferred:

• Bachelors degree in Computer Science or Computer Engineering.
• Minimum 12 years advanced experience in a technical engineering position involving infrastructure design technologies, data management and interchange, system design and/or development for complex applications.
• Ability to translate complex business and functional requirements into structured high quality implementations using any variety of industry standard approaches.
• Demonstrated ability to develop alternative solutions to complex problems and recommend the best solution to the technology business, and project teams.
• Advanced technical skills.
• Advanced analytical skills.
• Advanced troubleshooting skills.
• Advanced problem solving skills.
• Verifiable industry and/or vendor expertise in relative technologies.
• Able to meet with clients of varying levels to gather, document, and analyze system specifications and requirements, work closely with integrators, developers, and testers in the fast-paced environment.
• Ability to work independently and collaboratively with others in team environment.
• Ability to use effective facilitation skills and techniques to elicit and review requirements from a diverse range of stakeholders and group size.
• Understanding of how the people, processes and technology within an organization interact in relationships and patterns to create a feasible solution on projects of medium to high complexity.
• Excellent written and verbal communication skills.
• Possesses effective influencing skills.
• Process-oriented.
• Logical thinker.
• Strong knowledge of server/client and virtual technologies.
• Ability to master complex tasks with minimal supervision.
• Experience with project estimation and budget/planning activities.
• Adaptable.
• Able to learn quickly in a rapid pace environment.
• Detail-oriented with a commitment to accuracy and quality in work deliverables.
• Background in Identity and Access Management
• Background in control and risk governance
• Ability to work independently, manage multiple priorities, and meet deadlines in a dynamic, fast-paced environment.
• Strong problem-solving and critical-thinking abilities.
• Excellent documentation skills
• Strong interpersonal and communication skills, with the ability to collaborate effectively with stakeholders at all levels of the organization.

Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.

CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee based recruitment services for this role.

To Apply:

To be considered, please apply directly to this requisition using the link provided. For additional information, please contact Laura Dominguez at 716-887-7203 or Laura.Dominguez@ctg.com. Kindly forward this to any other interested parties. Thank you!

About Us

CTG is a leading provider of digital transformation solutions and services that accelerate clients' project momentum and achievement of their desired IT and business outcomes. Our vision is to be an indispensable partner to our clients and the preferred career destination for digital and technology experts. CTG has operations in North America, South America, Western Europe, and India. For more information, visit www.ctg.com.

Our culture is a direct result of the people who work at CTG, the values we hold, and the actions we take. In other words, our people are the culture. It's a living, breathing thing that is renewed every day through the ways we engage with each other, our clients, and our communities. Part of our mission is to cultivate a workplace that attracts and develops the best people, reflected by our recognition as a Great Place to Work-certified company in every country in which we operate.

CTG will consider for employment all qualified applicants including those with criminal histories in a manner consistent with the requirements of all applicable local, state, and federal laws.

CTG is an Equal Opportunity and Affirmative Action Employer. CTG will assure equal opportunity and consideration to all applicants and employees in recruitment, selection, placement, training, benefits, compensation, promotion, transfer, and release of individuals without regard to race, creed, religion, color, national origin, sex, sexual orientation, gender identity and gender expression, age, disability, marital or veteran status, citizenship status, or any other discriminatory factors as required by law. Our Affirmative Action program serves to promote occupational equality and diversity through good faith efforts. CTG is fully committed to promoting employment opportunities for members of protected classes.