** NO Corp-to-Corp**

Must be local or willing to relocate at your own expense.

Position Summary:

• Design, deploy, operate and maintain CDM tools and capabilities in enterprise on premise and Cloud environments including: ForeScout CounterAct, Cisco ISE, McAfee ePO (MVM and Application Control), IBM Big Fix, Service Now, Carbon Black, Rapid 7, RedHat FUSE, Splunk, RSA Archer, Tenable Security Center, Vormetric, SailPoint, CyberArk, Venafi, CA-PAM, SolarWinds, or equivalent security tools and products as required
• Develop installation, configuration, and deployment methods including scripting, use of APIs, orchestration, automation, and database services to support the integration and configuration of CDM applications and security technologies
• Identify, analyze, and maintain PKI infrastructure tools for asymmetric and symmetric encryption including elements and tools use in public/private key generation, key stores, CAs, hashing algorithms, and related NIST standards
• Work with architects, integration engineers, and developers to design solutions and improve data quality, security, and compliance or extend current capabilities and offerings to customers
• Work closely with management support teams and customer network and operations teams to establish and document requirements to complete implementation and configuration tasks
• Assess system designs to validate them against expected technical parameters
• Identify, analyze, define, and coordinate user, customer, and stakeholder needs and translates them into hardware and software requirements
• Identify and manage solution dependencies with other systems and elements of the enterprise IT infrastructure
• Identify technical risks and develop mitigation strategies
• Perform data validation, analysis, warehousing, and data mining
• Develop and maintain detailed installation documentation and SOPs as required
• Experience working with databases (Microsoft SQL Server), understanding of DB structures, data types, and creating complex SQL DB queries
• Ability to troubleshoot broad-ranging issues (operating systems, network, firewall, COTS products, access and authentication
• Provide tool operations and maintenance support, Tier 3 customer support, and act as the subject matter expert
• Provide mentoring and support to other engineers

Position Requirements:

• Bachelors Degree in MIS, Computer Science or related field or equivalent technical/vocational certification and a combination of experience preferred
• 13-15 years IT experience with a High School Diploma, 07-09 years’ with a Bachelor’s Degree, 04-06 years’ with a Master’s Degree
• Minimum of 2 years’ experience as a subject matter expert for one or more of the following tools: ForeScout CounterAct, Cisco ISE, McAfee ePO (MVM and Application Control), IBM Big Fix, Carbon Black, Rapid 7, RedHat FUSE, Splunk, RSA Archer, Tenable Security Center, Vormetric, SailPoint, CyberArk, Venafi, CA-PAM, or equivalent security tools and products
• Applicable Vendor Certified Administration certification is a plus
• Security and/or equivalent related IT Certification
• Effective communications skills, both oral and written
• Experience leading technical discussions with internal and external customers
• Understanding of Relational Database Management System (RDBMS) and query language, scripting and APIs
• Experience with enterprise device types and operating systems (Windows and UNIX) to include, Active Directory and Windows domain management including patch and configuration management, group policy objects, UNIX security including SUDO
• Experience and use of the key technologies relevant to API and application configuration or integration including SSL, DHCP, Active Directory, LDAP, JDBC, ODBC
• Understanding and use of Microsoft SQL database, database definition, procedures, and advanced SQL
• Understanding of PKI for asymmetric and symmetric encryption including elements and tools use in public/private key generation, key stores, CAs, hashing algorithms, deployment methods for enterprise software and endpoints, and related NIST standards
• Understanding of networking technologies including LAN/WAN, wireless, and VPN.
• Understanding of security design, network security architecture, network topology, and understanding of TCP/IP protocols; OSI model
• Understanding and use of network diagnostic commands and tools (ping, netstat, traceroute, ifconfig, nmap, tcpdump, Wireshark, VI, Notepad , etc.)

Preferred:

• CISSP Certification is preferred
• Experience in enterprise hardware and/or software asset management tools and inventory methods
• Experience deploying and configuring software in federal enterprise IaaS or Cloud environments
• Experience supporting Incident response and handling; scanning for malicious content, automation, and aggregation of intelligence data
• Experience using with Microsoft Office and other file types: PDF, XML, etc.
• Experience using Virtualization Technologies, such as VMware, vSphere, Xen
• Ability to perform ETL operations to retrieve enrichment content from existing hardware, software, system boundary inventories
• Knowledge of CPEs, CVEs, CCEs, and CWEs
• Knowledge of NIST RMF or CDM Framework
• Understanding of Domain-Forest trusts, DNS, and DHCP