DevSecOps Engineer - London - £75,000 - £85,000

DevSecOps Engineer 

London 

£75,000 - £85,000 

Job Description 

We are looking for a DevSecOps Engineer to help drive innovation and implement fit for purpose solution that will underpin our strategic technical platform.  This role will involve working across multiple teams to understand security requirements and progressively align our products and services to regulatory/compliance requirements and cyber security best practices.  

This role will require a person that is comfortable researching, implementing, mentoring, and presenting ideas and opportunities across teams in multiple locations globally. 

What you'll do 

• Develop software and infrastructure security best practices and implementations. 

• Outline and craft a comprehensive security profile to align Aristocrat products with regulatory compliance requirements. 

• Work directly with corporate InfoSec to ensure synergy and alignment with global security needs. 

• Perform complex analysis, consulting and providing recommendations to internal clients. 

• Define technical product requirements and create high-level architectural specifications, ensuring feasibility, functionality, and integration with existing systems/platforms. 

• Provide designs/blueprints and technical leadership to development and DevOps teams. 

• Review current system security measures, recommend, and implement enhancements. 

• Solid understanding of security protocols, cryptography, authentication, authorization, and security. 

• Experience implementing multi-factor authentication, single sign-on, identity management or related technologies. 

• Performs other duties as assigned. 

What we're looking for 

• Bachelor’s degree in computer science, information systems management or related field. 

• A strong background in DevOps, DevSecOps, working as a DevSecOps Consultant, Engineer, Architect or similar. 

• Expert level of Cyber Security experience. 

• Expert level of software security and development practices and implementations. 

• Expert level knowledge and experience of Kubernetes, on-prem and on cloud providers. 

• Proven track record creating a common architecture vision and implementing the strategic alignment across multiple teams. 

• 5+ years of demonstratable and significant experience of implementing Docker and Kubernetes in an enterprise environment. 

• Strong background on working with source code repository for 10+ years. 

• Should have experience with tools like Jenkins, InstallShield, SonarQube, JFrog etc.  

• Experience with design of proactive security for Micro Services. 

• 5+ years of experience of delivering CI/CD pipelines to automate everything. 

• Strong interpersonal, verbal, and written communication skills, with the ability to develop and conduct presentations to peers and management teams. 

• Self-directed with the ability manage own work and life balance. 

• Preferred security certification such as CISSP, CEH, OSCP. 

• Preferred experience in managing bug bounty programs. 

Senior Network Security Engineer -USA, Remote - $100,000 – 120,000

Senior Network Security Engineer
Remote Working
Full-Time, Permanent
$100,000 – 120,000

Our client has an opportunity for a Senior Network Engineer - Remote. The Senior Network Engineer establishes and maintains network performance by building net configurations and connections, troubleshooting network problem and overseeing Lifepoint’s vendor relationship with Parallon.

Our client is a leader in community-based care and driven by a mission of Making Communities Healthier. Our diversified healthcare delivery network spans 29 states and includes 63 community hospital campuses, 32 rehabilitation and behavioural health hospitals, and more than 170 additional sites of care across the healthcare continuum, such as acute rehabilitation units, outpatient centers and post-acute care facilities. We believe that success is achieved through talented people. We want to create places where employees want to work, with opportunities to pursue meaningful and satisfying careers that truly make a difference in communities across the country.

ESSENTIAL FUNCTIONS:  To perform this job, an individual must perform each essential function satisfactorily with or without a reasonable accommodation.

·        Act as primary point of contact for Lifepoint’s vendor relationship with Parallon, enforces contractual terms and ensures accountability.

·        Establish networking environment by system design configuration; direct system installation; define, document, and enforce system standards.

·        Maximize network performance through system performance monitoring; troubleshoot network problems and outages and schedule applicable upgrades with vendor.

·        Secure network system: establish and enforce standard policies and monitor processes.

·        Troubleshoot Level 3 issues and involve vendor as appropriate

·        Integrate newly acquired entities into LifePoint network environment.

·        Support Health Support Center (HSC) Health Informatics & Technology Services (HITS) department on various assigned projects.

·        Regular and reliable attendance.

·        Perform other duties as assigned.

Additional Information:

·        Position serves both internal co-workers and external customers, clients, patients, contractors, and vendors.

·        Access to and / or works with sensitive and / or confidential information.

·        Exhibit a comprehensive understanding of healthcare regulatory and compliance (e.g., HIPAA).

·        Skilled in the application of policies and procedures. Knowledge of Business Office Standards and Recommended Practices.

Qualifications - External

KNOWLEDGE, SKILLS & ABILITIES: The requirements listed below are representative of the knowledge, skills and/or abilities required.

Education:  Bachelor’s Degree or equivalent relevant experience.

Experience: Minimum 5 years of relevant experience as Network Administration assisting Level 3 issues.

Minimum overnight travel (up to 10%) by land and/or air.

Azure Cloud Architect - USA, Remote $140,000 to $180,000

Azure Cloud Architect

USA, Remote

$140,000 to $180,000

Responsibilities 

• Architect and design solutions to meet functional and non-functional requirements  

• Create and review architecture and solution design artifacts 

• Evangelize re-use through the implementation of shared assets  

• Enforce adherence to architectural standards/principles, global product-specific guidelines, usability design standards, etc.  

• Proactively guide engineering methodologies, standards, and leading practices  

• Guidance of engineering staff and reviews of as-built configurations during the construction phase  

• Provide insight and direction on roles and responsibilities required for solution operations  

• Identify, communicate and mitigate Risks, Assumptions, Issues, and Decisions throughout the full lifecycle  

• Considers the art of the possible, compares various architectural options based on feasibility and impact, and proposes actionable plans  

• Demonstrate strong analytical and technical problem-solving skills  

• Ability to analyze and operate at various levels of abstraction  

• Ability to balance what is strategically right with what is practically realistic 

Minimum qualifications 

• Excellent technical architecture skills, enabling the creation of future-proof, complex global solutions  

• Excellent interpersonal communication and organizational skills are required to operate as a leading member of global, distributed teams that deliver quality services and solutions.  

• Ability to rapidly gain knowledge of the organizational structure of the firm to facilitate work with groups outside of the immediate technical team.  

• Knowledge and experience in IT methodologies and life cycles that will be used.  

• Familiar with solution implementation/management, service/operations management, etc.  

• Leadership skills can inspire others and persuade  

• Maintains close awareness of new and emerging technologies and their potential application for service offerings and products.  

• Bachelor’s Degree or equivalency (CS, CE, CIS, IS, MIS, or engineering discipline) or equivalent work experience  

• Experience in a solution architecture role using service and hosting solutions such as private/public cloud IaaS, PaaS, and SaaS platforms.  

• Experience in architecting and designing technical solutions for Microsoft-centric solutions based on industry standards using Azure IaaS, PaaS, and SaaS capabilities.  

• Experience with any of the following: Azure, Azure Stack, Azure AD  

• Must have hands-on experience on various services like ADF, ADLS, Security, Monitoring, Governance

• Must have experience to design platform on Azure.

• 3+ years of hands-on Experience to design and build Databricks based solution on Azure platform

• 1+ year of hands-on experience to design and build solution powered by DBT models and integrate with databricks.

• Must be very good designing End-to-End solution on Azure platform.

• Must have good knowledge of Data Engineering concept and related services of Azure

• Must have good experience in Python and Spark

• Must have good experience in setting up development best practices.

• Intermediate level knowledge is required for Data Modelling

• Good to have knowledge of docker and Kubernetes

• Experience with claims-based authentication (SAML/OAuth/OIDC), MFA, and RBAC  

• Knowledge of cloud security controls including tenant isolation, encryption at rest, encryption in transit, key management, vulnerability assessments, application firewalls, SIEM, etc.  

• Experience building and supporting mission-critical technology components with DR capabilities  

• Experience with multi-tier system and service design and development for large enterprises  

• Extensive, real-world experience designing technology components for enterprise solutions and defining solution architectures and reference architectures with a focus on cloud technologies.  

• Exposure to infrastructure and application security technologies and approaches  

• Familiarity with requirements gathering techniques.  

• Microsoft, TOGAF, Zachman, ITIL, CCNA, CISSP, PMP, etc. 

Preferred qualifications 

• Experience with configuration management and automation tools such as Ansible, DSC, Puppet, Chef, Salt, etc.  

• Experience with relational, graph and/or unstructured data technologies such as SQL Server, Azure SQL, Azure Data Lake, HD Insights, Hadoop, Cloudera, MongoDB, MySQL, Neo4j, Cassandra, Couchbase  

• Software development full lifecycle methodologies, patterns, frameworks, libraries, and tools  

• Knowledge of programming and scripting languages such as JavaScript, PowerShell, Bash, SQL, Java, Python, etc.  

• Experience with data ingestion technologies such as Azure Data Factory, SSIS, Pentaho, Alteryx  

• Experience with visualization tools such as Tableau, Power BI

• Experience with analytics tools including SPSS.  

• Experience with machine learning tools such as Azure ML, IBM, AWS, etc.  

• Experience in distilling complex technical challenges to actionable decisions for stakeholders and guiding project teams by building consensus and mediating compromises when necessary.  

• Experience coordinating the intersection of complex system dependencies and interactions. 

• Experience in solution delivery using common methodologies especially SAFe Agile but also Waterfall, Iterative, etc.  

• Demonstrated knowledge of relevant industry trends and standards 

Why we're a great company
We are an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. We are committed to creating a dynamic work environment that values diversity and inclusion, respect and integrity, customer focus, and innovation.

Identity and Access Management Manager - USA, East Aurora New York - $130,000 to $160,000

Identity and Access Management Manager

USA, East Aurora New York

$130,000 to $160,000

Description

Our Company's Corporate Group is hiring an Identity and Access Management Manager

Job Summary:

The Identity and Access Management Manager (IAMM) is responsible for the team that will develop the framework and recommend an enterprise-wide strategy for the various directory and authentication services running operating systems such as Unix, Linux, and Windows. This individual will lead the team to perform the research, design, implementation, and on-going support plan of the proposed framework. The directory and authentication services support activities required to sustain the business activities globally including but not limited to engineering, manufacturing, operations, marketing, sales, and quality. These responsibilities include the design, documentation, and implementation of corporate identity and device access standards across all company subsidiaries globally. This team is also the expert level support (Tier 3) for several infrastructure applications like Active Directory (AD), Azure AD, Identity management, Device Management, and Certificate Management. 

Responsibilities:

·       Lead the team that will develop the framework and recommend an enterprise-wide strategy for the various directory and authentication services running operating systems such as Unix, Linux, and Windows.

·       Develop and monitor the individual training plans for direct reports.

·       Establish and oversee the work activities of direct reports.

·       Establish relationships will all groups and locations within the company to develop understanding of the requirements and impact of developing and implementing the directory and authentication services framework.

·       Effectively design and implement new technology in the company's server environment requires a though knowledge of the existing environment, a full understanding of industry standards, current technology trends, and new technology emerges.

·       Continuously develop and update leadership skills.

·       Design, document, implement, and audit corporate identity and access management standards for all company divisions and subsidiaries worldwide.

·       Plan, design, and implement, and provide on-going technical support (maintenance) and problem resolution of the company's AD, Azure AD, Identity and Device Management, and Certificate Authority systems and services.

·       Interface with key IT people worldwide to support the above activities and provide expert (Tier 3) support on an on-call basis for the operations staff which is 24 hour a day 7 day a week.

Directs the activities of all directory administrators from a technology perspective including all activities related to the Unix server activities (planning, design, documentation, implementation, administration), Windows server activities (planning, design, documentation, implementation, administration), Identity management systems, DNS, DHCP services, Unix services), and automation of the end user environment.

Implementation and support of remote access computing solutions.

Basic Qualifications:

·       Typically, a bachelor’s degree in MIS related discipline and 5 years’ relevant experience in hands on integration of applications using modern protocols (i.e., SAML, OIDC, Oauth 2.0, SCIM)

·       Experience with IAM systems - ADFS, Okta, Azure AD, Active Directory

·       Understanding of various authentication factors and risk-based authentication

·       Understanding of different access models – RBAC, ABAC, GBAC

·       Data analysis and reporting skills - Comparing user datasets across systems.

Preferred Skills:

·       Leadership of a small team

·       Strong communication skills verbally and written.

·       Understanding of LDAP queries, SQL and KQL

·       Experience Managing Security and Authentication Policies in Azure

·       Experience with Microsoft Identity Manager, Azure AD Connect

·       Knowledge of other authentication protocols - Kerberos, NTLM, LDAP, Basic

Desired Certifications (Not Required):

·       CISSP

·       CISM

·       Microsoft certs - AZ900, AZ800, AZ500, SC900, SC300

·       CompTIA Sec+

·       Certifications from IAM platforms and providers – Okta, Ping, Onelogin, Duo.