Apex Technology Corporation
Cornelius, North Carolina
Job Description Summary The Senior Systems Engineer is Apex's highest-level technical resource - a deeply experienced engineer responsible for designing, scoping, and delivering complex IT infrastructure projects for managed services clients. This role leads project engineering from design through implementation, writes technical scopes, and serves as the senior technical authority across Microsoft, networking, and systems environments. While project work is the primary focus, the Senior Systems Engineer also serves as an escalation resource for the most complex issues the service desk team cannot resolve. Beyond individual technical contributions, this role is expected to mentor and develop the engineers and technicians around them, raising the technical standard of the entire team. Primary Responsibilities Project Engineering & Design Design and engineer complex IT infrastructure solutions tailored to each client's environment, business needs, and risk profile Lead solution design across Microsoft server environments, virtualization (Hyper-V), Microsoft 365, Azure, networking, and security Architect WAN/LAN infrastructure, firewall configurations, VPN and remote access solutions, and network security implementations Evaluate client environments to identify gaps, risks, and opportunities for improvement and translate findings into actionable project designs Ensure all designs are technically sound, scalable, and aligned with Apex's standards and best practices Project Delivery Lead the end-to-end delivery of infrastructure projects from kickoff through completion Design and deploy IT infrastructure solutions including server builds, network deployments, cloud migrations, and system upgrades Collaborate closely with the Project Manager, Account Manager, and vCIO to ensure projects are delivered on time, on scope, and to client expectations Communicate proactively with clients throughout project delivery - keeping them informed of progress, changes, and any issues that arise Coordinate with Network/Systems Engineers and other technical resources on project execution tasks Scope Writing & Technical Documentation Create detailed project scopes that accurately capture client needs, mitigate risks, and define clear deliverables and boundaries Ensure scopes are written with enough specificity to protect Apex and set clear expectations with clients Maintain and create detailed technical documentation in IT Glue for all project work and system configurations Document all client environment changes, configurations, and implementations thoroughly and accurately Escalation Support Serve as the senior technical escalation point for complex issues that exceed the scope of the Network/Systems Engineer Diagnose and resolve advanced technical problems across Microsoft environments, networking, and infrastructure Provide guidance to the service desk team on difficult issues without taking over tickets that should remain at lower tiers Note: escalation support is a secondary function - project engineering is the primary focus of this role Leadership & Mentoring Set the technical standard for Apex's engineering and service desk teams through demonstrated excellence Actively mentor and develop Network/Systems Engineers, Field Technicians, and Service Desk Technicians Share knowledge proactively - through documentation, informal coaching, and formal training Identify skill gaps on the technical team and work with the Engineering Manager and Director of Operations to address them Contribute to the continuous improvement of Apex's technical standards, tools, and processes Ticket Management Log all work accurately and in real time in ConnectWise Work through the assigned ticket queue in priority order Keep ticket notes clear, complete, and useful for anyone who picks up the ticket after you Meet defined response time and resolution SLAs consistently Documentation Adherence Follow all standard operating procedures documented in IT Glue Adhere to Apex's security best practices on every ticket Never bypass documented processes - if a process is unclear or missing, flag it Contribute to documentation improvements when gaps or outdated procedures are identified Customer Service Excellence Keep clients informed of ticket progress and resolution status throughout the support process Communicate professionally and clearly in all client interactions Identify patterns and recurring issues within client environments and flag them to the Service Desk Manager Work collaboratively with dispatchers, service managers, and engineers Represent Apex professionally in every client interaction Required Qualifications 10+ years of IT experience, with significant time spent in systems/network engineering or infrastructure project delivery Deep hands-on expertise with Microsoft server environments including Windows Server, Active Directory, Group Policy, DNS/DHCP, and Hyper-V Strong Microsoft 365 and Azure administration experience - including Exchange Online, Teams, SharePoint, Intune, and Azure AD Advanced networking knowledge - routing, switching, VLANs, VPNs, WAN/LAN architecture, and firewall configuration Experience with enterprise firewall platforms (Fortinet, SonicWall, Meraki, or similar) Demonstrated experience designing and delivering complex infrastructure projects end-to-end Experience writing technical scopes, project plans, or statements of work Strong communication skills - able to present technical recommendations clearly to both technical and executive audiences Experience mentoring or developing junior technical staff Bachelor's degree in Computer Science, Information Technology, or a related field; equivalent experience considered Valid driver's license and ability to travel to client sites as needed Preferred Qualifications MSP experience strongly preferred Microsoft certifications: MD-102, AZ-104, AZ-305, MS-700, or equivalent CompTIA Network+, Security+, or similar certifications Experience with backup and disaster recovery platforms (Datto, Veeam, or similar) Familiarity with cybersecurity frameworks and tools relevant to the SMB market Experience with ConnectWise Manage, ScreenConnect, and IT Glue MBA or Master's degree in a related field What This Role Is Not Not a service desk or helpdesk role - day-to-day ticket work is primarily handled by the service desk team Not a purely reactive escalation role - project engineering and design are the primary focus Not a project management role - project coordination and client scheduling are owned by the Project Manager Not a role for someone who wants to specialize narrowly - breadth across Microsoft, networking, and systems is required What Makes Someone Successful Here Designs solutions that actually work in the real world - technically excellent and practically deliverable Writes scopes that protect Apex and give clients confidence - clear, specific, and complete Delivers projects cleanly - on scope, well-documented, and with clients who feel taken care of Raises the technical bar around them - the team is better because this person is on it Stays current on the technologies Apex supports and brings that knowledge back to the team Communicates with clients at a level that builds trust - credible, clear, and never condescending Self-directed and self-motivated - doesn't need to be managed through complex work Benefits Competitive salary based on experience and qualifications Comprehensive benefits (Medical, Dental, Vision, 401k, Paid Time Off, Paid Holidays) Quarterly incentives based on individual and team KPIs On-the-job training and support Team-based work environment Schedule Monday-Friday, 8:00 AM-5:00 PM. May require work outside of normal business hours on occasion. On call rotation required after 90 days Work Location Onsite in Cornelius, NC Local travel required for onsite client project work and escalation visits Hybrid work opportunity (up to 2 days/week) available after 90 days, based on performance This is a general overview of the role and does not constitute a comprehensive list of all duties and responsibilities.
11/11/2026
Full time
Job Description Summary The Senior Systems Engineer is Apex's highest-level technical resource - a deeply experienced engineer responsible for designing, scoping, and delivering complex IT infrastructure projects for managed services clients. This role leads project engineering from design through implementation, writes technical scopes, and serves as the senior technical authority across Microsoft, networking, and systems environments. While project work is the primary focus, the Senior Systems Engineer also serves as an escalation resource for the most complex issues the service desk team cannot resolve. Beyond individual technical contributions, this role is expected to mentor and develop the engineers and technicians around them, raising the technical standard of the entire team. Primary Responsibilities Project Engineering & Design Design and engineer complex IT infrastructure solutions tailored to each client's environment, business needs, and risk profile Lead solution design across Microsoft server environments, virtualization (Hyper-V), Microsoft 365, Azure, networking, and security Architect WAN/LAN infrastructure, firewall configurations, VPN and remote access solutions, and network security implementations Evaluate client environments to identify gaps, risks, and opportunities for improvement and translate findings into actionable project designs Ensure all designs are technically sound, scalable, and aligned with Apex's standards and best practices Project Delivery Lead the end-to-end delivery of infrastructure projects from kickoff through completion Design and deploy IT infrastructure solutions including server builds, network deployments, cloud migrations, and system upgrades Collaborate closely with the Project Manager, Account Manager, and vCIO to ensure projects are delivered on time, on scope, and to client expectations Communicate proactively with clients throughout project delivery - keeping them informed of progress, changes, and any issues that arise Coordinate with Network/Systems Engineers and other technical resources on project execution tasks Scope Writing & Technical Documentation Create detailed project scopes that accurately capture client needs, mitigate risks, and define clear deliverables and boundaries Ensure scopes are written with enough specificity to protect Apex and set clear expectations with clients Maintain and create detailed technical documentation in IT Glue for all project work and system configurations Document all client environment changes, configurations, and implementations thoroughly and accurately Escalation Support Serve as the senior technical escalation point for complex issues that exceed the scope of the Network/Systems Engineer Diagnose and resolve advanced technical problems across Microsoft environments, networking, and infrastructure Provide guidance to the service desk team on difficult issues without taking over tickets that should remain at lower tiers Note: escalation support is a secondary function - project engineering is the primary focus of this role Leadership & Mentoring Set the technical standard for Apex's engineering and service desk teams through demonstrated excellence Actively mentor and develop Network/Systems Engineers, Field Technicians, and Service Desk Technicians Share knowledge proactively - through documentation, informal coaching, and formal training Identify skill gaps on the technical team and work with the Engineering Manager and Director of Operations to address them Contribute to the continuous improvement of Apex's technical standards, tools, and processes Ticket Management Log all work accurately and in real time in ConnectWise Work through the assigned ticket queue in priority order Keep ticket notes clear, complete, and useful for anyone who picks up the ticket after you Meet defined response time and resolution SLAs consistently Documentation Adherence Follow all standard operating procedures documented in IT Glue Adhere to Apex's security best practices on every ticket Never bypass documented processes - if a process is unclear or missing, flag it Contribute to documentation improvements when gaps or outdated procedures are identified Customer Service Excellence Keep clients informed of ticket progress and resolution status throughout the support process Communicate professionally and clearly in all client interactions Identify patterns and recurring issues within client environments and flag them to the Service Desk Manager Work collaboratively with dispatchers, service managers, and engineers Represent Apex professionally in every client interaction Required Qualifications 10+ years of IT experience, with significant time spent in systems/network engineering or infrastructure project delivery Deep hands-on expertise with Microsoft server environments including Windows Server, Active Directory, Group Policy, DNS/DHCP, and Hyper-V Strong Microsoft 365 and Azure administration experience - including Exchange Online, Teams, SharePoint, Intune, and Azure AD Advanced networking knowledge - routing, switching, VLANs, VPNs, WAN/LAN architecture, and firewall configuration Experience with enterprise firewall platforms (Fortinet, SonicWall, Meraki, or similar) Demonstrated experience designing and delivering complex infrastructure projects end-to-end Experience writing technical scopes, project plans, or statements of work Strong communication skills - able to present technical recommendations clearly to both technical and executive audiences Experience mentoring or developing junior technical staff Bachelor's degree in Computer Science, Information Technology, or a related field; equivalent experience considered Valid driver's license and ability to travel to client sites as needed Preferred Qualifications MSP experience strongly preferred Microsoft certifications: MD-102, AZ-104, AZ-305, MS-700, or equivalent CompTIA Network+, Security+, or similar certifications Experience with backup and disaster recovery platforms (Datto, Veeam, or similar) Familiarity with cybersecurity frameworks and tools relevant to the SMB market Experience with ConnectWise Manage, ScreenConnect, and IT Glue MBA or Master's degree in a related field What This Role Is Not Not a service desk or helpdesk role - day-to-day ticket work is primarily handled by the service desk team Not a purely reactive escalation role - project engineering and design are the primary focus Not a project management role - project coordination and client scheduling are owned by the Project Manager Not a role for someone who wants to specialize narrowly - breadth across Microsoft, networking, and systems is required What Makes Someone Successful Here Designs solutions that actually work in the real world - technically excellent and practically deliverable Writes scopes that protect Apex and give clients confidence - clear, specific, and complete Delivers projects cleanly - on scope, well-documented, and with clients who feel taken care of Raises the technical bar around them - the team is better because this person is on it Stays current on the technologies Apex supports and brings that knowledge back to the team Communicates with clients at a level that builds trust - credible, clear, and never condescending Self-directed and self-motivated - doesn't need to be managed through complex work Benefits Competitive salary based on experience and qualifications Comprehensive benefits (Medical, Dental, Vision, 401k, Paid Time Off, Paid Holidays) Quarterly incentives based on individual and team KPIs On-the-job training and support Team-based work environment Schedule Monday-Friday, 8:00 AM-5:00 PM. May require work outside of normal business hours on occasion. On call rotation required after 90 days Work Location Onsite in Cornelius, NC Local travel required for onsite client project work and escalation visits Hybrid work opportunity (up to 2 days/week) available after 90 days, based on performance This is a general overview of the role and does not constitute a comprehensive list of all duties and responsibilities.
Job Description Network Administrator Springfield, Missouri Full Time/Direct Hire Position Job Description The primary duties and job focus of this position will be to design, implement, and maintain all network and infrastructure and associated hardware and software relating to the company and to manage these systems to ensure a reliable, secure, and cost-effective Information Technology infrastructure and operation. Primary duties will include the company's network, servers, and associated hardware and software. Duties and Responsibilities Oversee the day-to-day operation of the network including hardware/software support, diagnostics, and special projects. Ensures 24/7 High Availability on all systems and applications. Develop relationships to build confidence and trust in our direction, and create experience and communicating value. Assist in defining and developing technology roadmap including tool usage: Balance and understanding of resources, funding and risk to set technology goals that are achievable. Evaluate and align existing tools. Give guidance based on user experience and risk. Execute on the approved strategies for your team. Escalation for technical issues - available to assist technically. Ensuring future and existing technologies are fiscally responsible. Outline cost, value and risk of new technologies, and identify gaps in knowledge. Collaborates with Web Services development engineers and provides technical and procedural direction regarding network design and selection as well as other areas as needed and requested to ensure proper functionality of software applications and programs. Builds, and maintains the network, infrastructure, and associated hardware and software required for development work, internal testing, customer testing and production environments. Documents maintain and enhance existing network and associated hardware and software including but not limited to: Local switches, firewalls, wireless systems, analyzes and troubleshoots the company's networking and security logs and tracks the nature and resolution of problems; monitors usage to ensure security of data and access privileges. Provides direction in complex problem-solving situations and participates in direct interaction with internal staff as required. Establishes and maintains network admin/user accounts, profiles, access privileges and security. Performs and/or oversees network and associated server software and application installation and upgrades. Maintains site licenses for department / organization. Maintains backup / restore systems & disaster recovery preparedness. Responsible for all of the company's system backups. Establishes and performs maintenance programs following company and vendor standards. Ensures timely user notification of maintenance requirements and effects on system availability. Documents network and infrastructure problems and resolutions for future reference. Assists as needed and as requested by the Executive Director of Information Technology with the design, maintenance, and enhancement of existing network and associated hardware and software. Maintains proficiency and stays abreast of all current technology and opportunities concerning IT related hardware, software, and security news. Observes and adheres to the company's Data Classification Standard. Observes company policies. Continuously finds processes that create improved efficiency while maintaining conformance to requirements. Acknowledges responsibility to satisfy the customer, reduce cycle time and eliminate waste. May perform related duties or fill in for others in the department or other departments when requested. May train or instruct fellow workers regarding their own duties. Monitoring all services and ensuring uptime and performance targets are met. Coordinate and manage incidents, changes, and ensure that all aspects of the event are executed successfully per process. Ensure the availability, security and scalability of IT systems to meet business needs. Implement and enforce cybersecurity measures to protect the organizations' intellectual property and systems Qualifications Bachelor's degree or equivalent experience in Computer Information Systems. 10 years of hands-on experience and strong proven background in network design and management, enterprise wireless systems design and management, firewall and security administration. Experience must include building and deploying networks, installing, maintaining and patching major brand hardware systems, and supporting production applications in a 24x7 environment. Strong working knowledge of complex web hosting configuration components, including firewalls, load balancers, web and database servers. Advanced knowledge in creating and maintaining disaster recovery plans and implementing such plans in practical applications. Experience with virtual, on-prem and in the cloud backup and disaster recovery replication technologies. Ability to maintain, enhance and create scripting and automation tools. Knowledge of controller-based WIFI networks and diagnostic tools. Sound understanding of the operational process coupled with proven business and analytical skills. Ability to manage multiple projects with ensuring that commitments and timetables are met. Ability to partner with internal stakeholders to design operational solutions. Skill in organizing resources and establishing priorities. Ability to manage multiple projects, while ensuring that commitments and timetables are met. Ability to learn and support new systems and applications. Goal oriented, forward thinker that can provide solutions for complex technical problems. Be punctual, have a good work attitude, and work cooperatively with others in the department and company. Any other relevant, equivalent combination of training and experience. Ability to document technology roadmaps, timelines, and associated cost vs benefit analysis. Excellent communication skills to include: Composure and confidence for executive customer support role Seeks prompt feedback to ensure accurate communication Active listening to input from client/user/staff/peer Expresses ideas effectively to various organizational levels Communicates in a solution-oriented fashion Accept and benefit from constructive criticism Professional and diplomatic communication skills, verbal and written Ability to manage 3rd party vendors, managed service providers. Ability to negotiate costs and develop cost comparisons. Ability to identify opportunities for cost savings and optimization of IT related expenditures. Strong understanding and development of capacity planning, cyber security, disaster recovery, process, tools and documentation. Pay & Benefits Summary Pay is commensurate with experience.
11/11/2026
Full time
Job Description Network Administrator Springfield, Missouri Full Time/Direct Hire Position Job Description The primary duties and job focus of this position will be to design, implement, and maintain all network and infrastructure and associated hardware and software relating to the company and to manage these systems to ensure a reliable, secure, and cost-effective Information Technology infrastructure and operation. Primary duties will include the company's network, servers, and associated hardware and software. Duties and Responsibilities Oversee the day-to-day operation of the network including hardware/software support, diagnostics, and special projects. Ensures 24/7 High Availability on all systems and applications. Develop relationships to build confidence and trust in our direction, and create experience and communicating value. Assist in defining and developing technology roadmap including tool usage: Balance and understanding of resources, funding and risk to set technology goals that are achievable. Evaluate and align existing tools. Give guidance based on user experience and risk. Execute on the approved strategies for your team. Escalation for technical issues - available to assist technically. Ensuring future and existing technologies are fiscally responsible. Outline cost, value and risk of new technologies, and identify gaps in knowledge. Collaborates with Web Services development engineers and provides technical and procedural direction regarding network design and selection as well as other areas as needed and requested to ensure proper functionality of software applications and programs. Builds, and maintains the network, infrastructure, and associated hardware and software required for development work, internal testing, customer testing and production environments. Documents maintain and enhance existing network and associated hardware and software including but not limited to: Local switches, firewalls, wireless systems, analyzes and troubleshoots the company's networking and security logs and tracks the nature and resolution of problems; monitors usage to ensure security of data and access privileges. Provides direction in complex problem-solving situations and participates in direct interaction with internal staff as required. Establishes and maintains network admin/user accounts, profiles, access privileges and security. Performs and/or oversees network and associated server software and application installation and upgrades. Maintains site licenses for department / organization. Maintains backup / restore systems & disaster recovery preparedness. Responsible for all of the company's system backups. Establishes and performs maintenance programs following company and vendor standards. Ensures timely user notification of maintenance requirements and effects on system availability. Documents network and infrastructure problems and resolutions for future reference. Assists as needed and as requested by the Executive Director of Information Technology with the design, maintenance, and enhancement of existing network and associated hardware and software. Maintains proficiency and stays abreast of all current technology and opportunities concerning IT related hardware, software, and security news. Observes and adheres to the company's Data Classification Standard. Observes company policies. Continuously finds processes that create improved efficiency while maintaining conformance to requirements. Acknowledges responsibility to satisfy the customer, reduce cycle time and eliminate waste. May perform related duties or fill in for others in the department or other departments when requested. May train or instruct fellow workers regarding their own duties. Monitoring all services and ensuring uptime and performance targets are met. Coordinate and manage incidents, changes, and ensure that all aspects of the event are executed successfully per process. Ensure the availability, security and scalability of IT systems to meet business needs. Implement and enforce cybersecurity measures to protect the organizations' intellectual property and systems Qualifications Bachelor's degree or equivalent experience in Computer Information Systems. 10 years of hands-on experience and strong proven background in network design and management, enterprise wireless systems design and management, firewall and security administration. Experience must include building and deploying networks, installing, maintaining and patching major brand hardware systems, and supporting production applications in a 24x7 environment. Strong working knowledge of complex web hosting configuration components, including firewalls, load balancers, web and database servers. Advanced knowledge in creating and maintaining disaster recovery plans and implementing such plans in practical applications. Experience with virtual, on-prem and in the cloud backup and disaster recovery replication technologies. Ability to maintain, enhance and create scripting and automation tools. Knowledge of controller-based WIFI networks and diagnostic tools. Sound understanding of the operational process coupled with proven business and analytical skills. Ability to manage multiple projects with ensuring that commitments and timetables are met. Ability to partner with internal stakeholders to design operational solutions. Skill in organizing resources and establishing priorities. Ability to manage multiple projects, while ensuring that commitments and timetables are met. Ability to learn and support new systems and applications. Goal oriented, forward thinker that can provide solutions for complex technical problems. Be punctual, have a good work attitude, and work cooperatively with others in the department and company. Any other relevant, equivalent combination of training and experience. Ability to document technology roadmaps, timelines, and associated cost vs benefit analysis. Excellent communication skills to include: Composure and confidence for executive customer support role Seeks prompt feedback to ensure accurate communication Active listening to input from client/user/staff/peer Expresses ideas effectively to various organizational levels Communicates in a solution-oriented fashion Accept and benefit from constructive criticism Professional and diplomatic communication skills, verbal and written Ability to manage 3rd party vendors, managed service providers. Ability to negotiate costs and develop cost comparisons. Ability to identify opportunities for cost savings and optimization of IT related expenditures. Strong understanding and development of capacity planning, cyber security, disaster recovery, process, tools and documentation. Pay & Benefits Summary Pay is commensurate with experience.
Job Description Job Description POSITION SUMMARY: The Senior Manager, Network Infrastructure & Services is responsible for the strategy, architecture, security, availability, and lifecycle management of all network and connectivity services supporting LBCT's critical business and terminal operations. This position provides leadership and oversight for enterprise networking, telecommunications, wireless infrastructure, operational technology (OT) connectivity, carrier services, network security platforms, and managed service providers. The Senior Manager oversees Cisco networking, Fortinet and Palo Alto security platforms, enterprise wireless infrastructure, network segmentation, carrier services, and managed service provider governance. The role ensures highly available, secure, and resilient network services capable of supporting 24x7 marine terminal operations. The Senior Manager develops technology roadmaps, establishes engineering standards, manages vendor relationships, and drives continuous improvement through automation, analytics, and emerging technologies. This position works closely with Cyber Security, Systems Administration, Operations, and business stakeholders to ensure infrastructure services meet operational and strategic business requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES Maintain a safe and secure working environment while promoting IT Operational excellence throughout the organization. Develop and maintain the terminal's network architecture, standards, technology roadmap, and lifecycle strategy. Architect highly available LAN, WAN, wireless, Internet, data center, cloud, and remote-access connectivity. Design networks for environments requiring extremely high availability and rapid recovery from infrastructure failures. Establish architecture and engineering standards for enterprise and outdoor wireless infrastructure. Establish network segmentation and security architectures separating corporate IT, OT, vendors, Internet-facing systems, and other security zones. Develop standards for switching, routing, firewalls, wireless, IP addressing, DNS/DHCP, network access control, and connectivity services. Evaluate emerging technologies and determine their applicability to terminal operations. Ensure infrastructure capacity supports growth in automation, IoT/OT devices, video, telemetry, mobile equipment, and cloud services. Participate in operational change management to minimize disruption to terminal activities. Provide technical leadership and governance for the terminal's Cisco environment. Maintain configuration, architecture, lifecycle, and resilience standards across the network environment. Lead network-security architecture and operations using technologies including Fortinet and Palo Alto Networks, as applicable. Maintain compliance with industry regulations and standards, including those specific to maritime and port operations. Partner with cybersecurity team to implement Zero Trust principles and strengthen protection of critical IT and operational infrastructure. Assist cyber team with regular security audits and vulnerability assessments. Own the performance and governance of network-related managed service providers, telecommunications carriers, contractors, and technology vendors. Maintain appropriate records of vendor issues, decisions, commitments, and outstanding actions. Enforce and monitor contractual service level agreements (SLAs) with IT vendors and assigned independent contractors. Foster a culture of accountability, technical excellence, continuous improvement, and customer service. With other IT management, contribute to the development and implementation of the IT strategy for the terminal. Perform other related duties as assigned. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES : Strong managerial, supervisory, and decision-making skills to achieve department and company goals. Excellent interpersonal skills. Ability to interact with a variety of people throughout the corporation. Ability to remain calm and professional during confrontational situations. Effective public speaking and presentation skills. Be able to present and defend a point of view. Possess excellent communication, written, oral, and interpersonal and teamwork skills, communicate constructively and confidently, listen openly, and collaborate well with staff and others in different groups. Ability to relate information from a multitude of sources. Capability to turn theoretical information into practical applications. Convey a professional and positive attitude with action/results orientation to problem solving and elimination of backlogs. Proven ability and experience in exercising good judgment and discretion in handling confidential materials and matters. Possess strong organizational and analytical skills in managing daily, weekly, monthly, quarterly, or annual deadlines, but flexible to a changing list of priorities, sometimes daily. Excellent attention to detail with a high degree of accuracy. Ability to handle multiple demands; prioritize workloads; establish and maintain positive, cooperative, and productive working relationships. Advanced understanding and familiarity with Microsoft: Server, SQL, Office Suite, Azure, Active Directory, and DNS. Advanced understanding of and familiarity with VMWare and Dell EMC storage solutions. Experience with vulnerability scanning solutions. Familiarity with the NIST Cybersecurity Framework, CIS Controls, and relevant cybersecurity frameworks. In-depth knowledge of Routing and switching, TCP/IP, BGP and OSPF, VLANs and VRFs, Wireless networking, Firewalls, VPN technologies, Network segmentation, DNS/DHCP, Network monitoring, and High-availability architecture. Network automation using APIs, scripting, orchestration platforms, or infrastructure as code. Knowledge of marine terminal technology is highly desirable, including Terminal Operating Systems, Gate systems, OCR, RFID, GPS/location technologies, and truck appointment systems (NAVIS experience a plus). Stay informed about emerging technologies and trends and make recommendations for future IT investments. EDUCATION AND/OR EXPERIENCE Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field. Seven (7+) years of progressive experience in network engineering, telecommunications, or infrastructure operations. Five (5+) years of leadership experience managing technical teams or critical infrastructure services. Advanced experience with Cisco networking technologies. Significant experience with enterprise firewall and security technologies, Palo Alto and/or Fortinet preferred. Experience in a marine container terminal or similar industrial environment is preferred Experience working in a unionized environment, a plus. PHYSICAL REQUIREMENTS The ability to work any days or hours, including weekends and holidays. The ability to walk and stand for extended periods of time. The ability to use a computer and keyboard. The ability to sit and work at a desk and/or computer for extended periods of time. The ability to lift 30-50 pounds with or without assistance. The ability to drive a company owned pickup truck. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORKING ENVIRONMENT The work is performed both inside and outside at LBCT sites, various marine terminal locations, in temporary offices and in classrooms. Position is based in Long Beach, CA; work assignments may require travel to other marine terminal sites or travel to other offices. TWIC: You will be required to apply and successfully obtain a TWIC (Transportation Worker's Identification Credential). NOTE: This job description is not all-inclusive. An Employee may perform other related duties as required to meet the ongoing needs of LBCT LLC. LBCT LLC is an equal opportunity employer committed to equity and inclusion in the workplace. Compensation details: 00 Yearly Salary PI8967c5-
11/11/2026
Full time
Job Description Job Description POSITION SUMMARY: The Senior Manager, Network Infrastructure & Services is responsible for the strategy, architecture, security, availability, and lifecycle management of all network and connectivity services supporting LBCT's critical business and terminal operations. This position provides leadership and oversight for enterprise networking, telecommunications, wireless infrastructure, operational technology (OT) connectivity, carrier services, network security platforms, and managed service providers. The Senior Manager oversees Cisco networking, Fortinet and Palo Alto security platforms, enterprise wireless infrastructure, network segmentation, carrier services, and managed service provider governance. The role ensures highly available, secure, and resilient network services capable of supporting 24x7 marine terminal operations. The Senior Manager develops technology roadmaps, establishes engineering standards, manages vendor relationships, and drives continuous improvement through automation, analytics, and emerging technologies. This position works closely with Cyber Security, Systems Administration, Operations, and business stakeholders to ensure infrastructure services meet operational and strategic business requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES Maintain a safe and secure working environment while promoting IT Operational excellence throughout the organization. Develop and maintain the terminal's network architecture, standards, technology roadmap, and lifecycle strategy. Architect highly available LAN, WAN, wireless, Internet, data center, cloud, and remote-access connectivity. Design networks for environments requiring extremely high availability and rapid recovery from infrastructure failures. Establish architecture and engineering standards for enterprise and outdoor wireless infrastructure. Establish network segmentation and security architectures separating corporate IT, OT, vendors, Internet-facing systems, and other security zones. Develop standards for switching, routing, firewalls, wireless, IP addressing, DNS/DHCP, network access control, and connectivity services. Evaluate emerging technologies and determine their applicability to terminal operations. Ensure infrastructure capacity supports growth in automation, IoT/OT devices, video, telemetry, mobile equipment, and cloud services. Participate in operational change management to minimize disruption to terminal activities. Provide technical leadership and governance for the terminal's Cisco environment. Maintain configuration, architecture, lifecycle, and resilience standards across the network environment. Lead network-security architecture and operations using technologies including Fortinet and Palo Alto Networks, as applicable. Maintain compliance with industry regulations and standards, including those specific to maritime and port operations. Partner with cybersecurity team to implement Zero Trust principles and strengthen protection of critical IT and operational infrastructure. Assist cyber team with regular security audits and vulnerability assessments. Own the performance and governance of network-related managed service providers, telecommunications carriers, contractors, and technology vendors. Maintain appropriate records of vendor issues, decisions, commitments, and outstanding actions. Enforce and monitor contractual service level agreements (SLAs) with IT vendors and assigned independent contractors. Foster a culture of accountability, technical excellence, continuous improvement, and customer service. With other IT management, contribute to the development and implementation of the IT strategy for the terminal. Perform other related duties as assigned. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES : Strong managerial, supervisory, and decision-making skills to achieve department and company goals. Excellent interpersonal skills. Ability to interact with a variety of people throughout the corporation. Ability to remain calm and professional during confrontational situations. Effective public speaking and presentation skills. Be able to present and defend a point of view. Possess excellent communication, written, oral, and interpersonal and teamwork skills, communicate constructively and confidently, listen openly, and collaborate well with staff and others in different groups. Ability to relate information from a multitude of sources. Capability to turn theoretical information into practical applications. Convey a professional and positive attitude with action/results orientation to problem solving and elimination of backlogs. Proven ability and experience in exercising good judgment and discretion in handling confidential materials and matters. Possess strong organizational and analytical skills in managing daily, weekly, monthly, quarterly, or annual deadlines, but flexible to a changing list of priorities, sometimes daily. Excellent attention to detail with a high degree of accuracy. Ability to handle multiple demands; prioritize workloads; establish and maintain positive, cooperative, and productive working relationships. Advanced understanding and familiarity with Microsoft: Server, SQL, Office Suite, Azure, Active Directory, and DNS. Advanced understanding of and familiarity with VMWare and Dell EMC storage solutions. Experience with vulnerability scanning solutions. Familiarity with the NIST Cybersecurity Framework, CIS Controls, and relevant cybersecurity frameworks. In-depth knowledge of Routing and switching, TCP/IP, BGP and OSPF, VLANs and VRFs, Wireless networking, Firewalls, VPN technologies, Network segmentation, DNS/DHCP, Network monitoring, and High-availability architecture. Network automation using APIs, scripting, orchestration platforms, or infrastructure as code. Knowledge of marine terminal technology is highly desirable, including Terminal Operating Systems, Gate systems, OCR, RFID, GPS/location technologies, and truck appointment systems (NAVIS experience a plus). Stay informed about emerging technologies and trends and make recommendations for future IT investments. EDUCATION AND/OR EXPERIENCE Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field. Seven (7+) years of progressive experience in network engineering, telecommunications, or infrastructure operations. Five (5+) years of leadership experience managing technical teams or critical infrastructure services. Advanced experience with Cisco networking technologies. Significant experience with enterprise firewall and security technologies, Palo Alto and/or Fortinet preferred. Experience in a marine container terminal or similar industrial environment is preferred Experience working in a unionized environment, a plus. PHYSICAL REQUIREMENTS The ability to work any days or hours, including weekends and holidays. The ability to walk and stand for extended periods of time. The ability to use a computer and keyboard. The ability to sit and work at a desk and/or computer for extended periods of time. The ability to lift 30-50 pounds with or without assistance. The ability to drive a company owned pickup truck. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORKING ENVIRONMENT The work is performed both inside and outside at LBCT sites, various marine terminal locations, in temporary offices and in classrooms. Position is based in Long Beach, CA; work assignments may require travel to other marine terminal sites or travel to other offices. TWIC: You will be required to apply and successfully obtain a TWIC (Transportation Worker's Identification Credential). NOTE: This job description is not all-inclusive. An Employee may perform other related duties as required to meet the ongoing needs of LBCT LLC. LBCT LLC is an equal opportunity employer committed to equity and inclusion in the workplace. Compensation details: 00 Yearly Salary PI8967c5-
Job Description Senior Systems & Network Engineer is a highly skilled Tier 3 Technician to serve as the top escalation point for our helpdesk and NOC teams. This is an onsite position and requires the employee to work from our Boise, Idaho location. This role is for a deep technical expert who thrives on solving complex, ambiguous problems that Tier 1 and Tier 2 staff cannot resolve. You will own the hardest tickets, drive root cause analysis, and play a key role in mentoring junior staff and improving our technical processes. Key Responsibilities Serve as the final escalation point for complex infrastructure, networking, and systems issues Perform root cause analysis and document findings to reduce repeat incidents Design, implement, and support advanced solutions across networking, server, and cloud environments Lead troubleshooting of enterprise-level issues involving multi-vendor environments Collaborate with vendors and third parties on escalated cases and hardware/software issues Contribute to internal knowledge base articles, runbooks, and technical documentation Mentor Tier 1 and Tier 2 technicians through knowledge transfer and hands-on coaching Participate in architecture and engineering discussions for new client deployments or infrastructure changes Support change management processes and assist with after-hours maintenance windows as needed Required Qualifications 5+ years of hands-on experience in IT infrastructure support or systems/network engineering Advanced troubleshooting skills across the following: Networking: Firewalls (Fortinet, Cisco, Palo Alto, SonicWall), switching, routing, VPNs, VLANs, Wi-Fi Windows Server: Active Directory, Group Policy, DNS, DHCP, DFS, RDS Virtualization: VMware vSphere/ESXi or Microsoft Hyper-V Microsoft 365: Exchange Online, Teams, SharePoint, Intune, Conditional Access Experience with backup and disaster recovery solutions (Veeam, Datto, Acronis, or similar) Strong diagnostic and analytical skills with the ability to work independently on complex problems Excellent written communication for documentation and ticket notes Preferred Qualifications CCNP, MCSE, VCP, or equivalent advanced certifications Experience in an MSP or multi-client support environment Exposure to Azure or AWS (IaaS/PaaS administration, not just SaaS) Scripting/automation experience (PowerShell strongly preferred) Familiarity with SIEM tools, endpoint security, and basic cybersecurity concepts Experience with RMM tools (ConnectWise Automate, NinjaRMM, Kaseya, etc.) Experience leveraging AI tools in a technical context - prompt engineering, AI-assisted troubleshooting, automation with LLM APIs, or deploying/managing local AI models Active homelab practice - candidates who self-host, test new technologies, and experiment outside of work hours bring a level of curiosity and depth that translates directly to this role Other Requirements: Physical demands include sits, squats, bends, lifts and moves during working hours. Responsibilities may change from time to time. Allied Business Solutions reserves the right to add or delete duties and responsibilities at the discretion of ABS and its executives. This job description is intended to describe the general level of work being performed. It is not intended to be all-inclusive.
11/11/2026
Full time
Job Description Senior Systems & Network Engineer is a highly skilled Tier 3 Technician to serve as the top escalation point for our helpdesk and NOC teams. This is an onsite position and requires the employee to work from our Boise, Idaho location. This role is for a deep technical expert who thrives on solving complex, ambiguous problems that Tier 1 and Tier 2 staff cannot resolve. You will own the hardest tickets, drive root cause analysis, and play a key role in mentoring junior staff and improving our technical processes. Key Responsibilities Serve as the final escalation point for complex infrastructure, networking, and systems issues Perform root cause analysis and document findings to reduce repeat incidents Design, implement, and support advanced solutions across networking, server, and cloud environments Lead troubleshooting of enterprise-level issues involving multi-vendor environments Collaborate with vendors and third parties on escalated cases and hardware/software issues Contribute to internal knowledge base articles, runbooks, and technical documentation Mentor Tier 1 and Tier 2 technicians through knowledge transfer and hands-on coaching Participate in architecture and engineering discussions for new client deployments or infrastructure changes Support change management processes and assist with after-hours maintenance windows as needed Required Qualifications 5+ years of hands-on experience in IT infrastructure support or systems/network engineering Advanced troubleshooting skills across the following: Networking: Firewalls (Fortinet, Cisco, Palo Alto, SonicWall), switching, routing, VPNs, VLANs, Wi-Fi Windows Server: Active Directory, Group Policy, DNS, DHCP, DFS, RDS Virtualization: VMware vSphere/ESXi or Microsoft Hyper-V Microsoft 365: Exchange Online, Teams, SharePoint, Intune, Conditional Access Experience with backup and disaster recovery solutions (Veeam, Datto, Acronis, or similar) Strong diagnostic and analytical skills with the ability to work independently on complex problems Excellent written communication for documentation and ticket notes Preferred Qualifications CCNP, MCSE, VCP, or equivalent advanced certifications Experience in an MSP or multi-client support environment Exposure to Azure or AWS (IaaS/PaaS administration, not just SaaS) Scripting/automation experience (PowerShell strongly preferred) Familiarity with SIEM tools, endpoint security, and basic cybersecurity concepts Experience with RMM tools (ConnectWise Automate, NinjaRMM, Kaseya, etc.) Experience leveraging AI tools in a technical context - prompt engineering, AI-assisted troubleshooting, automation with LLM APIs, or deploying/managing local AI models Active homelab practice - candidates who self-host, test new technologies, and experiment outside of work hours bring a level of curiosity and depth that translates directly to this role Other Requirements: Physical demands include sits, squats, bends, lifts and moves during working hours. Responsibilities may change from time to time. Allied Business Solutions reserves the right to add or delete duties and responsibilities at the discretion of ABS and its executives. This job description is intended to describe the general level of work being performed. It is not intended to be all-inclusive.
Job Description Job Description ETHIC - Excellence, Teamwork, Hospitality, Integrity, and Compassion - steadfastly characterizes our mission to continually enrich the daily lives of residents. We practice these principles with every task and interaction, from personal caregiver assistance to mowing the grass. At Touchmark, we say: I AM AN ALLY • I AM A FRIEND • I AM A GIVER Touchmark is seeking a Systems Engineer to support and evolve our enterprise infrastructure across a multi-state environment serving 3,000+ employees. This role is responsible for designing, implementing, and maintaining server, virtualization, and cloud environments while ensuring performance, security, and operational excellence. You will serve as a key technical resource driving infrastructure modernization, automation, and reliability across all locations What You Will Do • Design, implement, and manage enterprise server infrastructure across distributed sites; support both physical and virtual environments including VMware and cloud-based systems; ensure high availability, performance, and lifecycle management of infrastructure assets • Lead cloud and hybrid initiatives including Azure infrastructure, migrations, and connectivity; manage identity services (Active Directory, Entra ID), DNS, DHCP, and certificate services; optimize environments for cost, scalability, and reliability • Strengthen infrastructure security through system hardening, patching, vulnerability management, and HIPAA-aligned controls; support identity governance, access management, and compliance standards across all systems • Drive monitoring and operational excellence through observability tools, alerting, and incident response; manage backup and disaster recovery strategies including testing, documentation, and RTO/RPO alignment • Advance automation and efficiency through scripting, configuration management, and Infrastructure-as-Code; maintain accurate documentation, support change management processes, and contribute to long-term technology roadmap planning The Ideal Candidate Will • Have 5-7+ years of experience in systems engineering or enterprise infrastructure roles; bring hands-on expertise with Windows Server, Linux, virtualization (VMware/Hyper-V), enterprise storage, and Microsoft Azure • Demonstrate strong experience designing, implementing, and supporting enterprise network infrastructure; understand LAN/WAN architecture across distributed environments; support routing, switching, firewalls, VPNs, and SD-WAN technologies • Have working knowledge of hybrid network connectivity including site-to-site VPNs, Azure VPN Gateway, ExpressRoute, and secure cloud integration patterns; ensure reliable and secure connectivity between on-prem and cloud environments • Apply modern network security principles including Zero Trust and SASE; support network segmentation, access controls, and secure traffic flow across systems and users • Bring strong expertise in identity and access management including Active Directory and Entra ID; understand how identity integrates with network and cloud security models • Have experience monitoring both systems and network performance using enterprise observability tools; proactively identify latency, throughput, and connectivity issues across infrastructure • Be skilled in troubleshooting complex infrastructure issues spanning servers, networks, and cloud environments; operate as a Tier 2/3 escalation point and drive root cause resolution • Have experience supporting compliance-driven environments (HIPAA preferred); understand how infrastructure and network design impacts data security and regulatory requirements • Bring strong automation capabilities using PowerShell, Python, or similar tools; apply automation to both infrastructure and network operations where applicable • Communicate effectively across technical and non-technical teams; collaborate with helpdesk, network, cybersecurity, and application teams to deliver reliable, secure, and scalable infrastructure solutions • Operate with a proactive, ownership-driven mindset; contribute to continuous improvement, documentation, and long-term infrastructure strategy Preferred Qualifications • Relevant certifications such as Azure Administrator or Solutions Architect, VMware VCP, Security+, CISSP, or ITIL • Experience in healthcare, senior living, or other regulated environments • Exposure to containerization (Docker/Kubernetes), endpoint management (Intune), or emerging technologies such as AI/ML infrastructure Benefits: Touchmark is dedicated to providing the best for our residents, and it all begins with providing the best for our employees. That's why we offer a competitive compensation and benefits package to our team members who work 30+ hours per week which includes: • Paid time off (including holidays) • Health, dental, and vision insurance plans for employees and eligible dependents • Education assistance • Bonus and retirement plans • Health care, dependent care, and commuter Flexible Spending Accounts • On-Demand Pay allows you to access pay as you earn it • Employee Assistance Program • Supplemental insurance options We are looking to hire individuals whose values align with ours and who believe in doing everything they can to lead by example in safety, compassion, and empathy. If that sounds like you, we encourage you to apply. Check us out at . We're growing. Are you?
11/11/2026
Full time
Job Description Job Description ETHIC - Excellence, Teamwork, Hospitality, Integrity, and Compassion - steadfastly characterizes our mission to continually enrich the daily lives of residents. We practice these principles with every task and interaction, from personal caregiver assistance to mowing the grass. At Touchmark, we say: I AM AN ALLY • I AM A FRIEND • I AM A GIVER Touchmark is seeking a Systems Engineer to support and evolve our enterprise infrastructure across a multi-state environment serving 3,000+ employees. This role is responsible for designing, implementing, and maintaining server, virtualization, and cloud environments while ensuring performance, security, and operational excellence. You will serve as a key technical resource driving infrastructure modernization, automation, and reliability across all locations What You Will Do • Design, implement, and manage enterprise server infrastructure across distributed sites; support both physical and virtual environments including VMware and cloud-based systems; ensure high availability, performance, and lifecycle management of infrastructure assets • Lead cloud and hybrid initiatives including Azure infrastructure, migrations, and connectivity; manage identity services (Active Directory, Entra ID), DNS, DHCP, and certificate services; optimize environments for cost, scalability, and reliability • Strengthen infrastructure security through system hardening, patching, vulnerability management, and HIPAA-aligned controls; support identity governance, access management, and compliance standards across all systems • Drive monitoring and operational excellence through observability tools, alerting, and incident response; manage backup and disaster recovery strategies including testing, documentation, and RTO/RPO alignment • Advance automation and efficiency through scripting, configuration management, and Infrastructure-as-Code; maintain accurate documentation, support change management processes, and contribute to long-term technology roadmap planning The Ideal Candidate Will • Have 5-7+ years of experience in systems engineering or enterprise infrastructure roles; bring hands-on expertise with Windows Server, Linux, virtualization (VMware/Hyper-V), enterprise storage, and Microsoft Azure • Demonstrate strong experience designing, implementing, and supporting enterprise network infrastructure; understand LAN/WAN architecture across distributed environments; support routing, switching, firewalls, VPNs, and SD-WAN technologies • Have working knowledge of hybrid network connectivity including site-to-site VPNs, Azure VPN Gateway, ExpressRoute, and secure cloud integration patterns; ensure reliable and secure connectivity between on-prem and cloud environments • Apply modern network security principles including Zero Trust and SASE; support network segmentation, access controls, and secure traffic flow across systems and users • Bring strong expertise in identity and access management including Active Directory and Entra ID; understand how identity integrates with network and cloud security models • Have experience monitoring both systems and network performance using enterprise observability tools; proactively identify latency, throughput, and connectivity issues across infrastructure • Be skilled in troubleshooting complex infrastructure issues spanning servers, networks, and cloud environments; operate as a Tier 2/3 escalation point and drive root cause resolution • Have experience supporting compliance-driven environments (HIPAA preferred); understand how infrastructure and network design impacts data security and regulatory requirements • Bring strong automation capabilities using PowerShell, Python, or similar tools; apply automation to both infrastructure and network operations where applicable • Communicate effectively across technical and non-technical teams; collaborate with helpdesk, network, cybersecurity, and application teams to deliver reliable, secure, and scalable infrastructure solutions • Operate with a proactive, ownership-driven mindset; contribute to continuous improvement, documentation, and long-term infrastructure strategy Preferred Qualifications • Relevant certifications such as Azure Administrator or Solutions Architect, VMware VCP, Security+, CISSP, or ITIL • Experience in healthcare, senior living, or other regulated environments • Exposure to containerization (Docker/Kubernetes), endpoint management (Intune), or emerging technologies such as AI/ML infrastructure Benefits: Touchmark is dedicated to providing the best for our residents, and it all begins with providing the best for our employees. That's why we offer a competitive compensation and benefits package to our team members who work 30+ hours per week which includes: • Paid time off (including holidays) • Health, dental, and vision insurance plans for employees and eligible dependents • Education assistance • Bonus and retirement plans • Health care, dependent care, and commuter Flexible Spending Accounts • On-Demand Pay allows you to access pay as you earn it • Employee Assistance Program • Supplemental insurance options We are looking to hire individuals whose values align with ours and who believe in doing everything they can to lead by example in safety, compassion, and empathy. If that sounds like you, we encourage you to apply. Check us out at . We're growing. Are you?
Job Description Job Description Senior Cloud Security Specialist 100% ONSITE in Washington DC Per Federal contract U.S. Citizenship Required Must be able to pass enhanced FBI background screening (criminal, financial and finger printing) for Public Trust clearance Performance Period: June 2026- Dec , with the possibility of multi-year extension based on performance W-2 or C2C Deadline to apply May 5th PROJECT DESCRIPTION: The IT Security Engineering team is seeking a Senior Cloud Security Specialist with deep expertise in AWS cloud services, cloud-native security tools and services. BACKGROUND: We are seeking a Senior Cloud Security Specialist to support the Security Engineering team within the IT division. This team is responsible for the strategy, design, deployment, and maintenance of effective security solutions in cloud, local, and hybrid environments. REQUIREMENTS: The candidate shall also demonstrate the knowledge and experience below: Required Experience: Minimum 5 years hands-on AWS security experience Personnel Qualifications AWS Certified Security - Specialty (strongly preferred) AWS Certified Solutions Architect - Professional or Associate Demonstrated experience implementing secure, scalable AWS cloud architectures following industry best security practices and security frameworks. Demonstrated federal experience and comprehensive knowledge in adopting and implementing federal cybersecurity requirements, including but not limited to the NIST Cybersecurity Framework, OMB Memorandum M-22-09, NIST SP 800-53 Possess deep analytical, problem-solving, and troubleshooting experience, to independently resolve complex security challenges. Proven ability to provide technical security consultation and advisory services with a proactive approach to identifying potential issues, raising questions, and engaging in open dialogue with team members and stakeholders to ensure security objectives are met. Strong understanding of security concepts and technologies related to Identity and Access Management (IAM), security engineering, network security design, security operations, security architecture, general engineering processes, cloud security, data loss protection, zero trust, DevSecOps and vulnerability management. Technical skills in AWS cloud security, security engineering, DevSecOps, scripting, and Infrastructure-as-code (IaC) Self-motivated and able to work independently Strong attention to detail The Consultant shall deliver, but not limited to, the following: Conduct regular security reviews of cloud infrastructure deployed by engineering teams Evaluate infrastructure-as-code against security standards Review and validate compliance with security policies and best practices Assess adherence to AWS Well-Architected Framework security pillar Identify and document security misconfigurations and non-compliant controls Develop and maintain security posture dashboards Create or update security configuration guides and playbooks Offer technical consultation to engineering teams on secure implementation Implement AWS security controls and services to ensure proper security hardening and other security engineering tasks. Develop and update AWS security configuration standards Conduct security training sessions for engineering teams Present findings and recommendations in team meetings Identify opportunities to automate security assessments Recommend security tooling improvements PLACE OF PERFORMANCE: On-site at FRB locations, Washington, DC CITIZEN STATUS: U.S. Citizenship is required per Federal Contract INTERVIEW: Selected candidates will participate in a phone screening. Those that pass the phone screening may be invited to an in-person interview. The use of video conference tools (e.g., MS Teams or WebEx) can be used in accordance with agency guidelines. Ref:
11/11/2026
Full time
Job Description Job Description Senior Cloud Security Specialist 100% ONSITE in Washington DC Per Federal contract U.S. Citizenship Required Must be able to pass enhanced FBI background screening (criminal, financial and finger printing) for Public Trust clearance Performance Period: June 2026- Dec , with the possibility of multi-year extension based on performance W-2 or C2C Deadline to apply May 5th PROJECT DESCRIPTION: The IT Security Engineering team is seeking a Senior Cloud Security Specialist with deep expertise in AWS cloud services, cloud-native security tools and services. BACKGROUND: We are seeking a Senior Cloud Security Specialist to support the Security Engineering team within the IT division. This team is responsible for the strategy, design, deployment, and maintenance of effective security solutions in cloud, local, and hybrid environments. REQUIREMENTS: The candidate shall also demonstrate the knowledge and experience below: Required Experience: Minimum 5 years hands-on AWS security experience Personnel Qualifications AWS Certified Security - Specialty (strongly preferred) AWS Certified Solutions Architect - Professional or Associate Demonstrated experience implementing secure, scalable AWS cloud architectures following industry best security practices and security frameworks. Demonstrated federal experience and comprehensive knowledge in adopting and implementing federal cybersecurity requirements, including but not limited to the NIST Cybersecurity Framework, OMB Memorandum M-22-09, NIST SP 800-53 Possess deep analytical, problem-solving, and troubleshooting experience, to independently resolve complex security challenges. Proven ability to provide technical security consultation and advisory services with a proactive approach to identifying potential issues, raising questions, and engaging in open dialogue with team members and stakeholders to ensure security objectives are met. Strong understanding of security concepts and technologies related to Identity and Access Management (IAM), security engineering, network security design, security operations, security architecture, general engineering processes, cloud security, data loss protection, zero trust, DevSecOps and vulnerability management. Technical skills in AWS cloud security, security engineering, DevSecOps, scripting, and Infrastructure-as-code (IaC) Self-motivated and able to work independently Strong attention to detail The Consultant shall deliver, but not limited to, the following: Conduct regular security reviews of cloud infrastructure deployed by engineering teams Evaluate infrastructure-as-code against security standards Review and validate compliance with security policies and best practices Assess adherence to AWS Well-Architected Framework security pillar Identify and document security misconfigurations and non-compliant controls Develop and maintain security posture dashboards Create or update security configuration guides and playbooks Offer technical consultation to engineering teams on secure implementation Implement AWS security controls and services to ensure proper security hardening and other security engineering tasks. Develop and update AWS security configuration standards Conduct security training sessions for engineering teams Present findings and recommendations in team meetings Identify opportunities to automate security assessments Recommend security tooling improvements PLACE OF PERFORMANCE: On-site at FRB locations, Washington, DC CITIZEN STATUS: U.S. Citizenship is required per Federal Contract INTERVIEW: Selected candidates will participate in a phone screening. Those that pass the phone screening may be invited to an in-person interview. The use of video conference tools (e.g., MS Teams or WebEx) can be used in accordance with agency guidelines. Ref:
Job Description Job Description Senior Cloud Security Specialist Washington, DC - 100% Onsite Per Federal contract U.S. citizenship is required Must be able to obtain Public Trust clearance W2 or C2C Application Deadline: Sept 15th We are seeking a Senior Cloud Security Specialist to support the Security Engineering team within the IT division at the Board of Governors of the Federal Reserve. This team is responsible for the strategy, design, deployment, and maintenance of effective security solutions in cloud, local, and hybrid environments. REQUIREMENTS: The candidate shall also demonstrate the knowledge and experience below: • Required Experience: o Minimum 5 years hands-on AWS security experience • Personnel Qualifications o AWS Certified Security - Specialty (strongly preferred) o AWS Certified Solutions Architect - Professional or Associate • Demonstrated experience implementing secure, scalable AWS cloud architectures following industry best security practices and security frameworks. • Demonstrated federal experience and comprehensive knowledge in adopting and implementing federal cybersecurity requirements, including but not limited to the NIST Cybersecurity Framework, OMB Memorandum M-22-09, NIST SP 800-53 • Possess deep analytical, problem-solving, and troubleshooting experience, to • independently resolve complex security challenges. • Proven ability to provide technical security consultation and advisory services with a proactive approach to identifying potential issues, raising questions, and engaging in open dialogue with team members and stakeholders to ensure security objectives are met. • Strong understanding of security concepts and technologies related to Identity and Access Management (IAM), security engineering, network security design, security operations, security architecture, general engineering processes, cloud security, data loss protection, zero trust, DevSecOps and vulnerability management. • Technical skills in AWS cloud security, security engineering, DevSecOps, scripting, and Infrastructure-as-code (IaC) • Self-motivated and able to work independently • Strong attention to detail The Consultant shall deliver, but not limited to, the following: • Conduct regular security reviews of cloud infrastructure deployed by engineering teams • Evaluate infrastructure-as-code against security standards • Review and validate compliance with security policies and best practices • Assess adherence to AWS Well-Architected Framework security pillar • Identify and document security misconfigurations and non-compliant controls • Develop and maintain security posture dashboards • Create or update security configuration guides and playbooks • Offer technical consultation to engineering teams on secure implementation • Implement AWS security controls and services to ensure proper security hardening and other security engineering tasks. • Develop and update AWS security configuration standards • Conduct security training sessions for engineering teams • Present findings and recommendations in team meetings • Identify opportunities to automate security assessments • Recommend security tooling improvements Ref:
11/11/2026
Full time
Job Description Job Description Senior Cloud Security Specialist Washington, DC - 100% Onsite Per Federal contract U.S. citizenship is required Must be able to obtain Public Trust clearance W2 or C2C Application Deadline: Sept 15th We are seeking a Senior Cloud Security Specialist to support the Security Engineering team within the IT division at the Board of Governors of the Federal Reserve. This team is responsible for the strategy, design, deployment, and maintenance of effective security solutions in cloud, local, and hybrid environments. REQUIREMENTS: The candidate shall also demonstrate the knowledge and experience below: • Required Experience: o Minimum 5 years hands-on AWS security experience • Personnel Qualifications o AWS Certified Security - Specialty (strongly preferred) o AWS Certified Solutions Architect - Professional or Associate • Demonstrated experience implementing secure, scalable AWS cloud architectures following industry best security practices and security frameworks. • Demonstrated federal experience and comprehensive knowledge in adopting and implementing federal cybersecurity requirements, including but not limited to the NIST Cybersecurity Framework, OMB Memorandum M-22-09, NIST SP 800-53 • Possess deep analytical, problem-solving, and troubleshooting experience, to • independently resolve complex security challenges. • Proven ability to provide technical security consultation and advisory services with a proactive approach to identifying potential issues, raising questions, and engaging in open dialogue with team members and stakeholders to ensure security objectives are met. • Strong understanding of security concepts and technologies related to Identity and Access Management (IAM), security engineering, network security design, security operations, security architecture, general engineering processes, cloud security, data loss protection, zero trust, DevSecOps and vulnerability management. • Technical skills in AWS cloud security, security engineering, DevSecOps, scripting, and Infrastructure-as-code (IaC) • Self-motivated and able to work independently • Strong attention to detail The Consultant shall deliver, but not limited to, the following: • Conduct regular security reviews of cloud infrastructure deployed by engineering teams • Evaluate infrastructure-as-code against security standards • Review and validate compliance with security policies and best practices • Assess adherence to AWS Well-Architected Framework security pillar • Identify and document security misconfigurations and non-compliant controls • Develop and maintain security posture dashboards • Create or update security configuration guides and playbooks • Offer technical consultation to engineering teams on secure implementation • Implement AWS security controls and services to ensure proper security hardening and other security engineering tasks. • Develop and update AWS security configuration standards • Conduct security training sessions for engineering teams • Present findings and recommendations in team meetings • Identify opportunities to automate security assessments • Recommend security tooling improvements Ref:
The Depository Trust & Clearing Corporation (DTCC)
Job Description The Impact you will have in this role: Being a member of CISO team and as a Security Architect for the Cybersecurity Architecture Team, you will be an ambassador for the shift in the technology culture at DTCC to a Security-First culture, interacting with stakeholders to create, collaborate, and influence changes in control standards, creating design architecture documentation and evaluating PoC (Proof of Concept) of candidate designs prior to deployment, and furthering the maturity of DTCC's security tooling. This role will work closely with application development and engineering teams across the organization to integrate security into the product lifecycle from design through deployment. The Security Architect is a subject matter expert in defining security requirements, performing security assessments, and providing remediation guidance and advice. The Security Architect should expect to be pulled in at short notice to evaluate a new system, review a proposed application change, or supply guidance on application security/coding best practices. Your Primary Responsibilities: Embed security architecture into Azure-native and hybrid cloud solutions from design through deployment. Define and publish reusable security patterns across Microsoft ecosystems (Azure, Power Platform, Copilot Studio). Partner with platform and engineering teams to ensure secure adoption of AI, low-code, and data governance capabilities . Mentor engineering teams on security architecture, secure coding, and cloud-native control implementations. Drive consistency through governed, scalable security patterns that reduce the need for per-integration reviews. NOTE: The Primary Responsibilities of this role are not limited to the details above. Qualifications: 5+ years of cybersecurity work experience Strong background in cloud security architecture, with emphasis on Microsoft Azure. Experience working with enterprise engineering teams in agile and DevSecOps environments. Bachelor's degree preferred (or equivalent experience). Talents Needed for Success: Cloud & Platform Security Deep experience with Microsoft Azure security architecture (IAM, networking dependencies, PaaS security, RBAC, Conditional Access). Experience implementing security controls across hybrid and multi-cloud environments. Microsoft Ecosystem Expertise Microsoft Purview (data governance, data classification, DLP, insider risk concepts). Power Platform security model: Environment strategy, tenant isolation, connector governance Data loss prevention (DLP) policies Copilot Studio / AI platform security considerations: Secure plugin/integration design Prompt and data protection considerations Identity-aware access control patterns Application & API Security Strong understanding of authentication, authorization (OAuth2/OIDC), and token-based access models. Secure API and integration patterns, including RESTful services and event-driven architectures. Knowledge of OWASP Top 10, SAMM, and application security testing approaches (SAST, DAST, SCA). DevSecOps & Engineering Practices Experience integrating security into CI/CD pipelines and cloud-native development workflows. Familiarity with infrastructure-as-code security and policy-as-code enforcement. Architecture & Governance Experience creating reusable security patterns and reference architectures. Ability to define enforceable standards that align with governance bodies (e.g., Architecture Review Boards). Strong ability to translate risk into actionable engineering guidance. Core Competencies Strong analytical and problem-solving skills. Ability to communicate complex technical concepts to both technical and non-technical stakeholders. Excellent written, presentation, and collaboration skills. The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
11/11/2026
Full time
Job Description The Impact you will have in this role: Being a member of CISO team and as a Security Architect for the Cybersecurity Architecture Team, you will be an ambassador for the shift in the technology culture at DTCC to a Security-First culture, interacting with stakeholders to create, collaborate, and influence changes in control standards, creating design architecture documentation and evaluating PoC (Proof of Concept) of candidate designs prior to deployment, and furthering the maturity of DTCC's security tooling. This role will work closely with application development and engineering teams across the organization to integrate security into the product lifecycle from design through deployment. The Security Architect is a subject matter expert in defining security requirements, performing security assessments, and providing remediation guidance and advice. The Security Architect should expect to be pulled in at short notice to evaluate a new system, review a proposed application change, or supply guidance on application security/coding best practices. Your Primary Responsibilities: Embed security architecture into Azure-native and hybrid cloud solutions from design through deployment. Define and publish reusable security patterns across Microsoft ecosystems (Azure, Power Platform, Copilot Studio). Partner with platform and engineering teams to ensure secure adoption of AI, low-code, and data governance capabilities . Mentor engineering teams on security architecture, secure coding, and cloud-native control implementations. Drive consistency through governed, scalable security patterns that reduce the need for per-integration reviews. NOTE: The Primary Responsibilities of this role are not limited to the details above. Qualifications: 5+ years of cybersecurity work experience Strong background in cloud security architecture, with emphasis on Microsoft Azure. Experience working with enterprise engineering teams in agile and DevSecOps environments. Bachelor's degree preferred (or equivalent experience). Talents Needed for Success: Cloud & Platform Security Deep experience with Microsoft Azure security architecture (IAM, networking dependencies, PaaS security, RBAC, Conditional Access). Experience implementing security controls across hybrid and multi-cloud environments. Microsoft Ecosystem Expertise Microsoft Purview (data governance, data classification, DLP, insider risk concepts). Power Platform security model: Environment strategy, tenant isolation, connector governance Data loss prevention (DLP) policies Copilot Studio / AI platform security considerations: Secure plugin/integration design Prompt and data protection considerations Identity-aware access control patterns Application & API Security Strong understanding of authentication, authorization (OAuth2/OIDC), and token-based access models. Secure API and integration patterns, including RESTful services and event-driven architectures. Knowledge of OWASP Top 10, SAMM, and application security testing approaches (SAST, DAST, SCA). DevSecOps & Engineering Practices Experience integrating security into CI/CD pipelines and cloud-native development workflows. Familiarity with infrastructure-as-code security and policy-as-code enforcement. Architecture & Governance Experience creating reusable security patterns and reference architectures. Ability to define enforceable standards that align with governance bodies (e.g., Architecture Review Boards). Strong ability to translate risk into actionable engineering guidance. Core Competencies Strong analytical and problem-solving skills. Ability to communicate complex technical concepts to both technical and non-technical stakeholders. Excellent written, presentation, and collaboration skills. The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
Job Description About the Role Tokio Marine Highland is seeking an experienced Senior Security Engineer for an approximate 6-month contract to help strengthen and mature key components of our information security program. This role will design and implement security improvements, develop enterprise security standards, assess cloud security controls, and drive engineering initiatives that reduce risk while supporting business objectives. This is an ideal opportunity for a hands-on security professional who enjoys solving complex technical challenges, improving security operations, and delivering measurable results in a collaborative environment. Location: Chicago, IL (Hybrid, 3 days per week in office) What You'll Accomplish During this engagement, you will: Develop and publish enterprise security standards for applications, APIs, and web services, including authentication, authorization, encryption, logging, vulnerability management, and secure development practices. Conduct a comprehensive review of cloud security controls, identify security gaps, and deliver a prioritized remediation roadmap. Design and implement security automation, integrations, or engineering improvements that improve security visibility, strengthen controls, and reduce manual effort. Key Responsibilities Design, implement, and enhance security controls, technologies, and engineering solutions across cloud, application, and infrastructure environments. Provide technical security guidance to IT, business, and project teams. Evaluate security architectures, technologies, and vendor solutions and recommend improvements to reduce risk and improve operational effectiveness. Assess and improve cloud security configurations, identity and access management controls, and overall security posture. Coordinate security assessments, penetration testing activities, and remediation efforts. Support incident response activities through threat analysis, investigation, and remediation guidance. Develop and maintain security standards, technical requirements, procedures, and related documentation. Collaborate with internal and external stakeholders to ensure security requirements are incorporated into technology initiatives. What We're Looking For 7+ years of experience in cybersecurity, information security, security engineering, or related technical disciplines. Strong background in security engineering, cloud security, application security, and security controls implementation. Hands-on experience securing AWS environments. Experience with Microsoft Entra ID and identity and access management principles. Knowledge of application security, API security, secure development practices, and application security testing. Experience with security automation, integrations, scripting, or process improvement initiatives. Strong understanding of networking, operating systems, virtualization, firewalls, segmentation, and remote access technologies. Experience supporting penetration testing, vulnerability remediation, incident response, and threat analysis. Ability to assess technical risk and translate findings into practical recommendations. Strong communication skills with the ability to explain complex technical concepts to a variety of audiences. Preferred Qualifications Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent professional experience. Industry certifications such as CISSP, CCSP, GIAC, AWS, Microsoft Security, or similar credentials. Why Join Us? This role offers the opportunity to make a meaningful impact by helping shape security standards, strengthen cloud security controls, and deliver high-value security engineering improvements. The successful candidate will play a key role in advancing the organization's security capabilities while working on initiatives that have visible and lasting business value. Work Authorization / Eligibility Vendors or independent contractors must be legally authorized to perform services in the United States. This contract opportunity is not eligible for visa sponsorship or company-sponsored work authorization now or in the future. About Tokio Marine Highland Tokio Marine Highland is a managing general agency that offers distinct specialty risk management solutions, including private flood, fine art, specialty property, real estate investment, and lender-placed insurance. Founded in 1962, Tokio Marine Highland is a wholly owned subsidiary of Tokio Marine Kiln (TMK), a leading specialist insurance underwriting business operating in the Lloyd's insurance market and part of one of the world's largest insurance groups, Tokio Marine. As one of the largest Lloyd's syndicates, TMK benefits from Lloyd's financial strength, including an A+ rating from AM Best. Tokio Marine Highland has office locations in Chicago, IL, Frisco, TX, Miami, FL, New York City, NY, and South Pasadena, CA. For more information, visit our website at . Tokio Marine Highland, LLC (TMH) is an Equal Opportunity Employer. TMH's success depends heavily on the effective utilization of qualified people, regardless of their race, ancestry, religion, color, sex, national origin, sexual orientation, gender identity and/or expression, disability, veteran status, or any characteristic protected by law. As a company, we adhere to and promote equal employment opportunities for all. Consistent with the Americans with Disabilities Act (ADA) and applicable state and local laws, it is TMH's policy to provide reasonable accommodation when requested by qualified individuals with disabilities during the recruitment process, unless such accommodation would cause an undue hardship. To make an accommodation request, please contact .
11/11/2026
Full time
Job Description About the Role Tokio Marine Highland is seeking an experienced Senior Security Engineer for an approximate 6-month contract to help strengthen and mature key components of our information security program. This role will design and implement security improvements, develop enterprise security standards, assess cloud security controls, and drive engineering initiatives that reduce risk while supporting business objectives. This is an ideal opportunity for a hands-on security professional who enjoys solving complex technical challenges, improving security operations, and delivering measurable results in a collaborative environment. Location: Chicago, IL (Hybrid, 3 days per week in office) What You'll Accomplish During this engagement, you will: Develop and publish enterprise security standards for applications, APIs, and web services, including authentication, authorization, encryption, logging, vulnerability management, and secure development practices. Conduct a comprehensive review of cloud security controls, identify security gaps, and deliver a prioritized remediation roadmap. Design and implement security automation, integrations, or engineering improvements that improve security visibility, strengthen controls, and reduce manual effort. Key Responsibilities Design, implement, and enhance security controls, technologies, and engineering solutions across cloud, application, and infrastructure environments. Provide technical security guidance to IT, business, and project teams. Evaluate security architectures, technologies, and vendor solutions and recommend improvements to reduce risk and improve operational effectiveness. Assess and improve cloud security configurations, identity and access management controls, and overall security posture. Coordinate security assessments, penetration testing activities, and remediation efforts. Support incident response activities through threat analysis, investigation, and remediation guidance. Develop and maintain security standards, technical requirements, procedures, and related documentation. Collaborate with internal and external stakeholders to ensure security requirements are incorporated into technology initiatives. What We're Looking For 7+ years of experience in cybersecurity, information security, security engineering, or related technical disciplines. Strong background in security engineering, cloud security, application security, and security controls implementation. Hands-on experience securing AWS environments. Experience with Microsoft Entra ID and identity and access management principles. Knowledge of application security, API security, secure development practices, and application security testing. Experience with security automation, integrations, scripting, or process improvement initiatives. Strong understanding of networking, operating systems, virtualization, firewalls, segmentation, and remote access technologies. Experience supporting penetration testing, vulnerability remediation, incident response, and threat analysis. Ability to assess technical risk and translate findings into practical recommendations. Strong communication skills with the ability to explain complex technical concepts to a variety of audiences. Preferred Qualifications Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent professional experience. Industry certifications such as CISSP, CCSP, GIAC, AWS, Microsoft Security, or similar credentials. Why Join Us? This role offers the opportunity to make a meaningful impact by helping shape security standards, strengthen cloud security controls, and deliver high-value security engineering improvements. The successful candidate will play a key role in advancing the organization's security capabilities while working on initiatives that have visible and lasting business value. Work Authorization / Eligibility Vendors or independent contractors must be legally authorized to perform services in the United States. This contract opportunity is not eligible for visa sponsorship or company-sponsored work authorization now or in the future. About Tokio Marine Highland Tokio Marine Highland is a managing general agency that offers distinct specialty risk management solutions, including private flood, fine art, specialty property, real estate investment, and lender-placed insurance. Founded in 1962, Tokio Marine Highland is a wholly owned subsidiary of Tokio Marine Kiln (TMK), a leading specialist insurance underwriting business operating in the Lloyd's insurance market and part of one of the world's largest insurance groups, Tokio Marine. As one of the largest Lloyd's syndicates, TMK benefits from Lloyd's financial strength, including an A+ rating from AM Best. Tokio Marine Highland has office locations in Chicago, IL, Frisco, TX, Miami, FL, New York City, NY, and South Pasadena, CA. For more information, visit our website at . Tokio Marine Highland, LLC (TMH) is an Equal Opportunity Employer. TMH's success depends heavily on the effective utilization of qualified people, regardless of their race, ancestry, religion, color, sex, national origin, sexual orientation, gender identity and/or expression, disability, veteran status, or any characteristic protected by law. As a company, we adhere to and promote equal employment opportunities for all. Consistent with the Americans with Disabilities Act (ADA) and applicable state and local laws, it is TMH's policy to provide reasonable accommodation when requested by qualified individuals with disabilities during the recruitment process, unless such accommodation would cause an undue hardship. To make an accommodation request, please contact .
Job Description We are At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron's progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our FinLabs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more. Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 17,000+, and has 58 offices in 22 countries within key global markets. Our challenge We are seeking a highly experienced Senior CyberArk EPM / PAM Engineer to design, implement, operate, and continuously improve our enterprise privileged-access management program. This role will be responsible for CyberArk engineering, PAM architecture, privileged-account governance, least-privilege controls, platform integrations, and automation across Windows, Linux, on-premises, and cloud environments. The ideal candidate has strong hands-on experience with CyberArk platforms and understands how privileged-access controls support security, audit, regulatory, and operational requirements within a financial-services environment . Additional Information The base salary for this position will vary based on geography and other factors. In accordance with law, the base salary for this role if filled within New York is $130k - $140k/year & benefits (see below). The Role Responsibilities: Design, implement, configure, and support CyberArk Privileged Access Management solutions across the enterprise. Engineer and administer CyberArk components, including as applicable:Enterprise Password Vault (EPV) Central Policy Manager (CPM) Privileged Session Manager (PSM) PSM for SSH (PSMP) Privileged Threat Analytics (PTA) Central Credential Provider (CCP) CyberArk Endpoint Privilege Manager (EPM) Develop and maintain PAM architecture, standards, operating procedures, and technical roadmaps. Establish and enforce privileged-access governance, including:Privileged -account onboarding and discovery Ownership and accountability Access approvals Credential rotation Session monitoring and recording Access reviews and recertification Account decommissioning Implement least-privilege policies for endpoints, servers, applications, service accounts, and administrative users. Manage the full privileged-account lifecycle from discovery and onboarding through modification, review, and retirement. Configure and maintain CyberArk integrations with Active Directory, LDAP, DNS, SIEM, ITSM, identity platforms, vulnerability-management tools, and other enterprise systems. Support privileged access across Windows and Linux/Unix environments. Develop secure solutions for application, database, service, robotic, and non-human account credential management. Build and maintain automation using PowerShell, Python, REST APIs, and CyberArk APIs. Integrate CyberArk with enterprise applications and cloud platforms, including AWS and Azure where applicable. Troubleshoot platform, connectivity, authentication, credential-management, session-management, and policy issues. Monitor platform health, capacity, availability, performance, and security events. Support incident response, audit requests, vulnerability remediation, disaster recovery, and business-continuity activities. Collaborate with Cybersecurity, Infrastructure, Cloud, IAM, DevOps, Application, Risk, Compliance, and Audit teams. Produce technical documentation, runbooks, diagrams, configuration standards, and operational metrics. Contribute to continuous improvement of PAM controls in alignment with financial-services regulatory and security requirements. Required Qualifications Strong hands-on experience engineering and administering CyberArk PAM and/or EPM solutions in an enterprise environment. Demonstrated experience with PAM architecture, privileged-access governance, and security control design. Strong understanding of least privilege, privilege elevation, application control, and privileged-account lifecycle management. Experience integrating CyberArk with enterprise technologies and security platforms. Solid knowledge of both Windows and Linux operating environments. Experience with Active Directory and LDAP integration, authentication, group policy, service accounts, and privileged groups. Experience with automation and integration using:PowerShell Python REST APIs CyberArk APIs or SDKs Ability to troubleshoot complex technical issues across identity, operating systems, networking, applications, and security tooling. Experience working within structured change-management, incident-management, and service-management processes. Strong understanding of security principles, access controls, credential protection, and operational risk. Excellent written and verbal communication skills. Ability to work effectively with technical teams, business stakeholders, auditors, and risk partners. We offer: A highly competitive compensation and benefits package. A multinational organization with 58 offices in 22 countries and the possibility to work abroad. 10 days of paid annual leave (plus sick leave and national holidays). Maternity & paternity leave plans. A comprehensive insurance plan including medical, dental, vision, life insurance, and long-/short-term disability (plans vary by region). Retirement savings plans. A higher education certification policy. Commuter benefits (varies by region). Extensive training opportunities, focused on skills, substantive knowledge, and personal development. On-demand Udemy for Business for all Synechron employees with free access to more than 5000 curated courses. Coaching opportunities with experienced colleagues from our Financial Innovation Labs (FinLabs) and Center of Excellences (CoE) groups. Cutting edge projects at the world's leading tier-one banks, financial institutions and insurance firms. A flat and approachable organization. A truly diverse, fun-loving, and global work culture. S YNECHRON'S DIVERSITY & INCLUSION STATEMENT Diversity & Inclusion are fundamental to our culture, and Synechron is proud to be an equal opportunity workplace and is an affirmative action employer. Our Diversity, Equity, and Inclusion (DEI) initiative 'Same Difference' is committed to fostering an inclusive culture - promoting equality, diversity and an environment that is respectful to all. We strongly believe that a diverse workforce helps build stronger, successful businesses as a global company. We encourage applicants from across diverse backgrounds, race, ethnicities, religion, age, marital status, gender, sexual orientations, or disabilities to apply. We empower our global workforce by offering flexible workplace arrangements, mentoring, internal mobility, learning and development programs, and more. All employment decisions at Synechron are based on business needs, job requirements and individual qualifications, without regard to the applicant's gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law.
11/11/2026
Full time
Job Description We are At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron's progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our FinLabs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more. Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 17,000+, and has 58 offices in 22 countries within key global markets. Our challenge We are seeking a highly experienced Senior CyberArk EPM / PAM Engineer to design, implement, operate, and continuously improve our enterprise privileged-access management program. This role will be responsible for CyberArk engineering, PAM architecture, privileged-account governance, least-privilege controls, platform integrations, and automation across Windows, Linux, on-premises, and cloud environments. The ideal candidate has strong hands-on experience with CyberArk platforms and understands how privileged-access controls support security, audit, regulatory, and operational requirements within a financial-services environment . Additional Information The base salary for this position will vary based on geography and other factors. In accordance with law, the base salary for this role if filled within New York is $130k - $140k/year & benefits (see below). The Role Responsibilities: Design, implement, configure, and support CyberArk Privileged Access Management solutions across the enterprise. Engineer and administer CyberArk components, including as applicable:Enterprise Password Vault (EPV) Central Policy Manager (CPM) Privileged Session Manager (PSM) PSM for SSH (PSMP) Privileged Threat Analytics (PTA) Central Credential Provider (CCP) CyberArk Endpoint Privilege Manager (EPM) Develop and maintain PAM architecture, standards, operating procedures, and technical roadmaps. Establish and enforce privileged-access governance, including:Privileged -account onboarding and discovery Ownership and accountability Access approvals Credential rotation Session monitoring and recording Access reviews and recertification Account decommissioning Implement least-privilege policies for endpoints, servers, applications, service accounts, and administrative users. Manage the full privileged-account lifecycle from discovery and onboarding through modification, review, and retirement. Configure and maintain CyberArk integrations with Active Directory, LDAP, DNS, SIEM, ITSM, identity platforms, vulnerability-management tools, and other enterprise systems. Support privileged access across Windows and Linux/Unix environments. Develop secure solutions for application, database, service, robotic, and non-human account credential management. Build and maintain automation using PowerShell, Python, REST APIs, and CyberArk APIs. Integrate CyberArk with enterprise applications and cloud platforms, including AWS and Azure where applicable. Troubleshoot platform, connectivity, authentication, credential-management, session-management, and policy issues. Monitor platform health, capacity, availability, performance, and security events. Support incident response, audit requests, vulnerability remediation, disaster recovery, and business-continuity activities. Collaborate with Cybersecurity, Infrastructure, Cloud, IAM, DevOps, Application, Risk, Compliance, and Audit teams. Produce technical documentation, runbooks, diagrams, configuration standards, and operational metrics. Contribute to continuous improvement of PAM controls in alignment with financial-services regulatory and security requirements. Required Qualifications Strong hands-on experience engineering and administering CyberArk PAM and/or EPM solutions in an enterprise environment. Demonstrated experience with PAM architecture, privileged-access governance, and security control design. Strong understanding of least privilege, privilege elevation, application control, and privileged-account lifecycle management. Experience integrating CyberArk with enterprise technologies and security platforms. Solid knowledge of both Windows and Linux operating environments. Experience with Active Directory and LDAP integration, authentication, group policy, service accounts, and privileged groups. Experience with automation and integration using:PowerShell Python REST APIs CyberArk APIs or SDKs Ability to troubleshoot complex technical issues across identity, operating systems, networking, applications, and security tooling. Experience working within structured change-management, incident-management, and service-management processes. Strong understanding of security principles, access controls, credential protection, and operational risk. Excellent written and verbal communication skills. Ability to work effectively with technical teams, business stakeholders, auditors, and risk partners. We offer: A highly competitive compensation and benefits package. A multinational organization with 58 offices in 22 countries and the possibility to work abroad. 10 days of paid annual leave (plus sick leave and national holidays). Maternity & paternity leave plans. A comprehensive insurance plan including medical, dental, vision, life insurance, and long-/short-term disability (plans vary by region). Retirement savings plans. A higher education certification policy. Commuter benefits (varies by region). Extensive training opportunities, focused on skills, substantive knowledge, and personal development. On-demand Udemy for Business for all Synechron employees with free access to more than 5000 curated courses. Coaching opportunities with experienced colleagues from our Financial Innovation Labs (FinLabs) and Center of Excellences (CoE) groups. Cutting edge projects at the world's leading tier-one banks, financial institutions and insurance firms. A flat and approachable organization. A truly diverse, fun-loving, and global work culture. S YNECHRON'S DIVERSITY & INCLUSION STATEMENT Diversity & Inclusion are fundamental to our culture, and Synechron is proud to be an equal opportunity workplace and is an affirmative action employer. Our Diversity, Equity, and Inclusion (DEI) initiative 'Same Difference' is committed to fostering an inclusive culture - promoting equality, diversity and an environment that is respectful to all. We strongly believe that a diverse workforce helps build stronger, successful businesses as a global company. We encourage applicants from across diverse backgrounds, race, ethnicities, religion, age, marital status, gender, sexual orientations, or disabilities to apply. We empower our global workforce by offering flexible workplace arrangements, mentoring, internal mobility, learning and development programs, and more. All employment decisions at Synechron are based on business needs, job requirements and individual qualifications, without regard to the applicant's gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law.
This job is with Aristocrat, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Network Engineer Join Aristocrat, a global leader in regulated gaming entertainment, where innovation, reliability, and alignment to regulations are essential to our operations. As an MSP Network Engineer, you will play a crucial role in developing and maintaining the network framework that supports MSP gaming operations. This position offers an exceptional opportunity to work in a highly regulated, 24x7 production environment. You will direct network builds and operational plans across our data centers and customer locations. Your knowledge will ensure the smooth performance and security of our vital systems, greatly influencing our worldwide gaming networks. What You'll Do Construct, align, and improve secure, scalable network builds for Class 3 MSP gaming systems. Take ownership for network build decisions from start to finish across primary and secondary data centers as well as customer environments. Define technical standards, reference architectures, and guidelines applicable to networking of MSP devices. Maintain high uptime, fault resistance, and efficiency of vital MSP network infrastructure. Lead complex triage efforts across routing, VPNs, firewalls, and Multi Site networks. Drive root cause analysis, corrective actions, and long-term reliability improvements. Analyze performance and resource trends; lead proactive efforts to improve resource use and efficiency. Build and maintain resilient network infrastructures aligned with cybersecurity guidelines and gaming regulatory requirements. Lead network change planning and risk assessment within formal change and configuration management processes. Partner with gaming regulators and internal compliance teams to ensure compliant system operation. Lead technical execution of new site deployments, infrastructure upgrades, and network modernization efforts. What We're Looking For Bachelor's degree in computer science, computer engineering, or equivalent experience. CCNA or equivalent networking certification preferred. 5+ years of hands-on enterprise network engineering experience. Expert-level understanding of routing and networking protocols (BGP, OSPF, IPSec, QoS, TCP/IP). Deep hands-on experience with enterprise Palo Alto firewalls, Arista Products, and F5 Products. Strong experience with network monitoring, diagnostics, and analytics platforms. Proven experience crafting and supporting highly available, regulated, or critically important environments. Strong security approach and experience implementing secure network architectures. Ability to work independently, lead technical initiatives, and influence cross-functional teams. Ability to obtain required Tribal Gaming licenses which may include providing fingerprints, background checks, financial statements, and any other applicable licensing requests. Travel Expectations None Additional Information This role is subject to mandatory background screening and regulatory approvals. As part of moving into this role, you may be required to complete a criminal background check, submit fingerprints, and obtain licenses or registrations with applicable gaming regulatory authorities. Aristocrat operates in a highly regulated environment and holds licenses in over 340 gaming jurisdictions worldwide. To meet our global compliance obligations, you will be required to provide the disclosure of relevant personal and background information to government agencies, sovereign nations/tribal regulators, and other applicable gaming regulatory bodies. This is a condition of Aristocrat's gaming licenses. The specific information required may vary depending on the jurisdiction and project assignment. This job description may have been reviewed and enhanced using AI-assisted tools to improve clarity, consistency, and inclusivity. All final content, role requirements and hiring decisions remain subject to human review and approval by Aristocrat. Compensation Philosophy We offer a comprehensive pay and benefits package designed to stay competitive in the market, support your wellbeing, and recognise your contribution to our success. Our approach is underpinned by a pay-for-performance belief in rewarding individual impact. Your specific compensation package will be determined by factors such as your skills, experience, qualifications, and location. Depending on your role and location, you may be eligible for annual bonuses and incentives, health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and other local or statutory benefits. Specific details about compensation and benefits for this position will be discussed during the recruitment process.
11/11/2026
Full time
This job is with Aristocrat, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Network Engineer Join Aristocrat, a global leader in regulated gaming entertainment, where innovation, reliability, and alignment to regulations are essential to our operations. As an MSP Network Engineer, you will play a crucial role in developing and maintaining the network framework that supports MSP gaming operations. This position offers an exceptional opportunity to work in a highly regulated, 24x7 production environment. You will direct network builds and operational plans across our data centers and customer locations. Your knowledge will ensure the smooth performance and security of our vital systems, greatly influencing our worldwide gaming networks. What You'll Do Construct, align, and improve secure, scalable network builds for Class 3 MSP gaming systems. Take ownership for network build decisions from start to finish across primary and secondary data centers as well as customer environments. Define technical standards, reference architectures, and guidelines applicable to networking of MSP devices. Maintain high uptime, fault resistance, and efficiency of vital MSP network infrastructure. Lead complex triage efforts across routing, VPNs, firewalls, and Multi Site networks. Drive root cause analysis, corrective actions, and long-term reliability improvements. Analyze performance and resource trends; lead proactive efforts to improve resource use and efficiency. Build and maintain resilient network infrastructures aligned with cybersecurity guidelines and gaming regulatory requirements. Lead network change planning and risk assessment within formal change and configuration management processes. Partner with gaming regulators and internal compliance teams to ensure compliant system operation. Lead technical execution of new site deployments, infrastructure upgrades, and network modernization efforts. What We're Looking For Bachelor's degree in computer science, computer engineering, or equivalent experience. CCNA or equivalent networking certification preferred. 5+ years of hands-on enterprise network engineering experience. Expert-level understanding of routing and networking protocols (BGP, OSPF, IPSec, QoS, TCP/IP). Deep hands-on experience with enterprise Palo Alto firewalls, Arista Products, and F5 Products. Strong experience with network monitoring, diagnostics, and analytics platforms. Proven experience crafting and supporting highly available, regulated, or critically important environments. Strong security approach and experience implementing secure network architectures. Ability to work independently, lead technical initiatives, and influence cross-functional teams. Ability to obtain required Tribal Gaming licenses which may include providing fingerprints, background checks, financial statements, and any other applicable licensing requests. Travel Expectations None Additional Information This role is subject to mandatory background screening and regulatory approvals. As part of moving into this role, you may be required to complete a criminal background check, submit fingerprints, and obtain licenses or registrations with applicable gaming regulatory authorities. Aristocrat operates in a highly regulated environment and holds licenses in over 340 gaming jurisdictions worldwide. To meet our global compliance obligations, you will be required to provide the disclosure of relevant personal and background information to government agencies, sovereign nations/tribal regulators, and other applicable gaming regulatory bodies. This is a condition of Aristocrat's gaming licenses. The specific information required may vary depending on the jurisdiction and project assignment. This job description may have been reviewed and enhanced using AI-assisted tools to improve clarity, consistency, and inclusivity. All final content, role requirements and hiring decisions remain subject to human review and approval by Aristocrat. Compensation Philosophy We offer a comprehensive pay and benefits package designed to stay competitive in the market, support your wellbeing, and recognise your contribution to our success. Our approach is underpinned by a pay-for-performance belief in rewarding individual impact. Your specific compensation package will be determined by factors such as your skills, experience, qualifications, and location. Depending on your role and location, you may be eligible for annual bonuses and incentives, health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and other local or statutory benefits. Specific details about compensation and benefits for this position will be discussed during the recruitment process.
Intro Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you'll travel the world, grow your expertise, and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop onboard! Why you'll love this job As part of the Identity Services team, you'll help deliver secure digital products that support a reliable and profitable airline. You will design, implement, and care for cybersecurity solutions that protect users, systems, operations, and data, by ensuring strong identity controls such as role based access, authentication, authorization, and governance. This role requires attention to detail, strong problem solving, and high ethical responsibility. The fast paced global airline environment offers opportunities for professional development, continuous growth, and meaningful impact. As a Manager for Identity Services, you will lead a team responsible for Identity Services technology assets. This includes managing daily activities of the engineering team, security tooling implementation and upgrades, ongoing support of services, quality and testing, and meeting the engineering standards of American Airlines. You will be expected to balance technical oversight, and business alignment to keep the organization's assets safe while maintaining operational stability. You will be responsible for the collaboration with system administrators, developers, HR, and security teams to seamlessly integrate and support IDM/IGA capabilities across the organization. As a leader, you will be responsible for ensuring the systems are resilient, running effectively, and smoothly for our customers while empowering and motivating your team. What you'll do This list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Your community of practice or your Managers/Leaders will iterate on the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. Identity and Access Management (IAM) Implementation: Oversee the deployment and configuration of IAM solutions to manage user identities, roles, and system access across the organization's systems and applications. Identity Platform and Design Implementation: Lead the design and deployment of identity management solutions, ensuring they meet security, scalability, and performance requirements, while integrating with existing infrastructure and applications. Resource and Project Management: Effectively coordinate resources and manage project progress, addressing issues and risks to ensure successful delivery. Monitoring and Auditing: Direct the continuous monitoring of IAM systems for suspicious activities, perform regular audits to ensure compliance with security policies, and generate comprehensive reports on access controls and user activities. Leadership and Development: Provide visionary leadership and mentorship to a team of cybersecurity professionals specializing in identity & access products, fostering a culture of excellence and continuous development through targeted training opportunities. Audit and Compliance: Lead and ensure the execution of regular audits of access controls and directory services to ensure compliance with internal policies and external regulations, while addressing any identified issues or gaps. Product and Portfolio Management: Direct the planning, execution, and delivery of critical projects related to identity & access products, ensuring they meet strategic objectives, are completed on time, and within budget. Ensuring Regulatory Compliance: Monitoring and ensuring adherence to cybersecurity regulations and standards, implementing necessary compliance measures. Communication: Clearly convey project risks and strategies to senior management and stakeholders, ensuring transparency and informed decision-making. Operational Management and Monitoring: Develop and implement monitoring strategies to ensure the continuous availability, performance, and reliability of identity services, while managing day to day operations of the identity platform. Access Governance and Certification: Oversee adherence to regulatory scheduled reviews and certifications of user access rights to ensure compliance and prevent "privilege creep". Incident Response and Troubleshooting: Develop and oversee the response to identity-related security incidents, troubleshoot IAM platform issues, and provide guidance and support to users experiencing access problems. Collaboration: Work closely with senior leadership, project managers, and stakeholders to align cybersecurity initiatives with corporate objectives and ensure successful project delivery. Support and Troubleshooting: Develop and oversee the responses for issues related to certification campaigns and provide guidance and support to users during the campaign process. All you'll need for success Minimum Qualifications- Education & Prior Job Experience Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering, or a related technical discipline, or equivalent experience/training. 6+ years prior experience in cybersecurity management or a related field 3+ years in a people leadership role Preferred Qualifications- Education & Prior Job Experience Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; advanced degree preferred. 5+ years of experience in project management, with at least 3 years in a cybersecurity project management role. Proven track record of managing and delivering successful cybersecurity projects. Experience with project management methodologies and tools (e.g., Agile, Waterfall, MS Project). Experience with regulatory compliance and industry standards (e.g., GDPR, PCI-DSS, ISO 27001). Skills, Licenses & Certifications Relevant certifications including but not limited to CISSP, CISM, CISA, CompTIA Security+, Certified Identity and Access Manager (CIAM), and Microsoft Certified: Identity and Access Administrator Associate In-depth knowledge of IAM principles, technologies, and best practices. Knowledge of IAM principles and practices for managing user identities, roles, and access privileges Knowledge of regulatory compliance requirements related to access management (e.g., GDPR, HIPAA, SOX) Strong problem-solving and analytical skills to identify and address access management issues Strong verbal and written communication skills to effectively interact with technical and non-technical stakeholders Capability to manage IAM projects and initiatives, with experience working with various stakeholders, including technology teams, business teams, and end users. Ability to develop, update, and enforce comprehensive IAM strategies and policies. Proficiency in ensuring compliance with IAM standards and conducting risk assessments. Strong problem-solving and analytical skills to identify and address IAM-related security threats. Strong agile management skills to oversee the implementation and maintenance of IAM solutions Engage with customers to understand pain points with governance, compliance, and access management to identify opportunities where Saviynt can help What you'll get Feel free to take advantage of all that American Airlines has to offer: Travel Perks: Ready to explore the world? You, your family, and your friends can reach 365 destinations on more than 6,800 daily flights across our global network. Health Benefits: On day one, you'll have access to your health, dental, prescription and vision benefits to help you stay well. And that's just the start, we also offer virtual doctor visits, flexible spending accounts and more. Wellness Programs: We want you to be the best version of yourself - that's why our wellness programs provide you with all the right tools, resources and support you need. 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year. Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more. Feel free to be yourself at American From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Employee Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities, and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world. Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life's journey? Feel free to be yourself at American.
11/11/2026
Full time
Intro Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you'll travel the world, grow your expertise, and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop onboard! Why you'll love this job As part of the Identity Services team, you'll help deliver secure digital products that support a reliable and profitable airline. You will design, implement, and care for cybersecurity solutions that protect users, systems, operations, and data, by ensuring strong identity controls such as role based access, authentication, authorization, and governance. This role requires attention to detail, strong problem solving, and high ethical responsibility. The fast paced global airline environment offers opportunities for professional development, continuous growth, and meaningful impact. As a Manager for Identity Services, you will lead a team responsible for Identity Services technology assets. This includes managing daily activities of the engineering team, security tooling implementation and upgrades, ongoing support of services, quality and testing, and meeting the engineering standards of American Airlines. You will be expected to balance technical oversight, and business alignment to keep the organization's assets safe while maintaining operational stability. You will be responsible for the collaboration with system administrators, developers, HR, and security teams to seamlessly integrate and support IDM/IGA capabilities across the organization. As a leader, you will be responsible for ensuring the systems are resilient, running effectively, and smoothly for our customers while empowering and motivating your team. What you'll do This list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Your community of practice or your Managers/Leaders will iterate on the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. Identity and Access Management (IAM) Implementation: Oversee the deployment and configuration of IAM solutions to manage user identities, roles, and system access across the organization's systems and applications. Identity Platform and Design Implementation: Lead the design and deployment of identity management solutions, ensuring they meet security, scalability, and performance requirements, while integrating with existing infrastructure and applications. Resource and Project Management: Effectively coordinate resources and manage project progress, addressing issues and risks to ensure successful delivery. Monitoring and Auditing: Direct the continuous monitoring of IAM systems for suspicious activities, perform regular audits to ensure compliance with security policies, and generate comprehensive reports on access controls and user activities. Leadership and Development: Provide visionary leadership and mentorship to a team of cybersecurity professionals specializing in identity & access products, fostering a culture of excellence and continuous development through targeted training opportunities. Audit and Compliance: Lead and ensure the execution of regular audits of access controls and directory services to ensure compliance with internal policies and external regulations, while addressing any identified issues or gaps. Product and Portfolio Management: Direct the planning, execution, and delivery of critical projects related to identity & access products, ensuring they meet strategic objectives, are completed on time, and within budget. Ensuring Regulatory Compliance: Monitoring and ensuring adherence to cybersecurity regulations and standards, implementing necessary compliance measures. Communication: Clearly convey project risks and strategies to senior management and stakeholders, ensuring transparency and informed decision-making. Operational Management and Monitoring: Develop and implement monitoring strategies to ensure the continuous availability, performance, and reliability of identity services, while managing day to day operations of the identity platform. Access Governance and Certification: Oversee adherence to regulatory scheduled reviews and certifications of user access rights to ensure compliance and prevent "privilege creep". Incident Response and Troubleshooting: Develop and oversee the response to identity-related security incidents, troubleshoot IAM platform issues, and provide guidance and support to users experiencing access problems. Collaboration: Work closely with senior leadership, project managers, and stakeholders to align cybersecurity initiatives with corporate objectives and ensure successful project delivery. Support and Troubleshooting: Develop and oversee the responses for issues related to certification campaigns and provide guidance and support to users during the campaign process. All you'll need for success Minimum Qualifications- Education & Prior Job Experience Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering, or a related technical discipline, or equivalent experience/training. 6+ years prior experience in cybersecurity management or a related field 3+ years in a people leadership role Preferred Qualifications- Education & Prior Job Experience Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; advanced degree preferred. 5+ years of experience in project management, with at least 3 years in a cybersecurity project management role. Proven track record of managing and delivering successful cybersecurity projects. Experience with project management methodologies and tools (e.g., Agile, Waterfall, MS Project). Experience with regulatory compliance and industry standards (e.g., GDPR, PCI-DSS, ISO 27001). Skills, Licenses & Certifications Relevant certifications including but not limited to CISSP, CISM, CISA, CompTIA Security+, Certified Identity and Access Manager (CIAM), and Microsoft Certified: Identity and Access Administrator Associate In-depth knowledge of IAM principles, technologies, and best practices. Knowledge of IAM principles and practices for managing user identities, roles, and access privileges Knowledge of regulatory compliance requirements related to access management (e.g., GDPR, HIPAA, SOX) Strong problem-solving and analytical skills to identify and address access management issues Strong verbal and written communication skills to effectively interact with technical and non-technical stakeholders Capability to manage IAM projects and initiatives, with experience working with various stakeholders, including technology teams, business teams, and end users. Ability to develop, update, and enforce comprehensive IAM strategies and policies. Proficiency in ensuring compliance with IAM standards and conducting risk assessments. Strong problem-solving and analytical skills to identify and address IAM-related security threats. Strong agile management skills to oversee the implementation and maintenance of IAM solutions Engage with customers to understand pain points with governance, compliance, and access management to identify opportunities where Saviynt can help What you'll get Feel free to take advantage of all that American Airlines has to offer: Travel Perks: Ready to explore the world? You, your family, and your friends can reach 365 destinations on more than 6,800 daily flights across our global network. Health Benefits: On day one, you'll have access to your health, dental, prescription and vision benefits to help you stay well. And that's just the start, we also offer virtual doctor visits, flexible spending accounts and more. Wellness Programs: We want you to be the best version of yourself - that's why our wellness programs provide you with all the right tools, resources and support you need. 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year. Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more. Feel free to be yourself at American From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Employee Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities, and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world. Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life's journey? Feel free to be yourself at American.
Job Description Job Description Job Title: System Architect - Data Center Applications Location: Bethlehem, PA Onsite/ Remote: Hybrid with base location in Bethlehem, PA The pay range for this role is k- k per annum including any bonuses or variable pay. also offers benefits like medical, vision, dental, life, disability insurance and paid time off (including holidays, parental leave, and sick leave, as required by law). Ask our recruiters for more details on our Benefits package. The exact offer terms will depend on the skill level, educational qualifications, experience, and location of the candidate. JD: The System Architect will define, design and govern end-to-end architecture for data center control and automation platforms covering electrical power systems, cooling systems, Client, SCADA, PLC/RTU controls, DCIM, energy management, alarms, historian, network segregation and cybersecurity. The role requires strong practical exposure to control panels, industrial communication protocols, automation engineering, mission-critical redundancy concepts and data center operational requirements. 4. Key Responsibilities Own the overall technical architecture for data center control and automation systems from concept to commissioning. Develop system architecture for Client, SCADA, PLC/RTU, DCIM, historian and enterprise integrations. Define control philosophy, automation sequence of operations, fail-safe behavior, alarm priority and escalation logic. Prepare architecture diagrams covering power monitoring, cooling control, network topology, control panels and data flow. Perform interface definition between electrical systems, mechanical systems, OT networks, IT applications and cloud analytics. Lead design reviews for control panels, I/O allocation, field wiring, sensor selection, communication protocol mapping and redundancy. Ensure architecture supports high availability, maintainability, scalability, cybersecurity and operational continuity. Collaborate with electrical, mechanical, IT, cybersecurity, facility operations, OEMs and customer stakeholders. Review vendor/OEM proposals for Client, SCADA, DCIM, PLCs, gateways, meters, UPS and cooling system controllers. Provide technical guidance during FAT, SAT, integrated systems testing, commissioning and handover. 6. Deliverables Expected from the Role System Architecture Document covering logical, physical, network and deployment architecture. Control Philosophy and Functional Design Specification for power, cooling and facility automation systems. I/O list, signal list, data dictionary, communication matrix and integration register. Client/SCADA/DCIM integration architecture and interface control document. Alarm philosophy, alarm priority matrix, trend configuration and reporting requirements. Cybersecurity zoning and conduit diagram for OT/IT interfaces. FAT/SAT/IST test strategy, commissioning support documents and handover package. Risk register covering availability, safety, maintainability, cybersecurity and vendor dependency. 7. Qualification Experience Bachelor degree in Electrical, Electronics, Instrumentation, Control Systems, Automation, Computer Science or related engineering discipline. Master degree is desirable. 12 years of experience in automation, control systems, Client/SCADA, electrical controls or mission-critical infrastructure engineering. At least 3 to 5 years in system architecture, solution architecture or technical leadership role. Hands-on experience with data center, semiconductor facility, airport, hospital, power plant, industrial automation or high-availability infrastructure is preferred. Experience in customer-facing architecture reviews, technical proposals, vendor evaluation and engineering governance. Preferred Certifications / Standards Awareness TIA-942, Uptime Institute Tier concepts, ISO 27001, ISO 50001 and data center operational best practices. IEC 62443 OT cybersecurity concepts, IEC/UL electrical safety awareness and NFPA/NEC/IEC installation practices as applicable. PMP, TOGAF, ITIL, Certified Data Centre Professional, Certified Automation Professional or equivalent certifications are desirable. is an Equal Employment Opportunity employer. We promote and support a diverse workforce at all levels of the company. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex, age, national origin, or disability. All applicants will be evaluated solely based on their ability, competence, and performance of the essential functions of their positions with or without reasonable accommodations. Reasonable accommodations also are available in the hiring process for applicants with disabilities. Candidates can request a reasonable accommodation by contacting the company ADA Coordinator at .
11/11/2026
Full time
Job Description Job Description Job Title: System Architect - Data Center Applications Location: Bethlehem, PA Onsite/ Remote: Hybrid with base location in Bethlehem, PA The pay range for this role is k- k per annum including any bonuses or variable pay. also offers benefits like medical, vision, dental, life, disability insurance and paid time off (including holidays, parental leave, and sick leave, as required by law). Ask our recruiters for more details on our Benefits package. The exact offer terms will depend on the skill level, educational qualifications, experience, and location of the candidate. JD: The System Architect will define, design and govern end-to-end architecture for data center control and automation platforms covering electrical power systems, cooling systems, Client, SCADA, PLC/RTU controls, DCIM, energy management, alarms, historian, network segregation and cybersecurity. The role requires strong practical exposure to control panels, industrial communication protocols, automation engineering, mission-critical redundancy concepts and data center operational requirements. 4. Key Responsibilities Own the overall technical architecture for data center control and automation systems from concept to commissioning. Develop system architecture for Client, SCADA, PLC/RTU, DCIM, historian and enterprise integrations. Define control philosophy, automation sequence of operations, fail-safe behavior, alarm priority and escalation logic. Prepare architecture diagrams covering power monitoring, cooling control, network topology, control panels and data flow. Perform interface definition between electrical systems, mechanical systems, OT networks, IT applications and cloud analytics. Lead design reviews for control panels, I/O allocation, field wiring, sensor selection, communication protocol mapping and redundancy. Ensure architecture supports high availability, maintainability, scalability, cybersecurity and operational continuity. Collaborate with electrical, mechanical, IT, cybersecurity, facility operations, OEMs and customer stakeholders. Review vendor/OEM proposals for Client, SCADA, DCIM, PLCs, gateways, meters, UPS and cooling system controllers. Provide technical guidance during FAT, SAT, integrated systems testing, commissioning and handover. 6. Deliverables Expected from the Role System Architecture Document covering logical, physical, network and deployment architecture. Control Philosophy and Functional Design Specification for power, cooling and facility automation systems. I/O list, signal list, data dictionary, communication matrix and integration register. Client/SCADA/DCIM integration architecture and interface control document. Alarm philosophy, alarm priority matrix, trend configuration and reporting requirements. Cybersecurity zoning and conduit diagram for OT/IT interfaces. FAT/SAT/IST test strategy, commissioning support documents and handover package. Risk register covering availability, safety, maintainability, cybersecurity and vendor dependency. 7. Qualification Experience Bachelor degree in Electrical, Electronics, Instrumentation, Control Systems, Automation, Computer Science or related engineering discipline. Master degree is desirable. 12 years of experience in automation, control systems, Client/SCADA, electrical controls or mission-critical infrastructure engineering. At least 3 to 5 years in system architecture, solution architecture or technical leadership role. Hands-on experience with data center, semiconductor facility, airport, hospital, power plant, industrial automation or high-availability infrastructure is preferred. Experience in customer-facing architecture reviews, technical proposals, vendor evaluation and engineering governance. Preferred Certifications / Standards Awareness TIA-942, Uptime Institute Tier concepts, ISO 27001, ISO 50001 and data center operational best practices. IEC 62443 OT cybersecurity concepts, IEC/UL electrical safety awareness and NFPA/NEC/IEC installation practices as applicable. PMP, TOGAF, ITIL, Certified Data Centre Professional, Certified Automation Professional or equivalent certifications are desirable. is an Equal Employment Opportunity employer. We promote and support a diverse workforce at all levels of the company. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex, age, national origin, or disability. All applicants will be evaluated solely based on their ability, competence, and performance of the essential functions of their positions with or without reasonable accommodations. Reasonable accommodations also are available in the hiring process for applicants with disabilities. Candidates can request a reasonable accommodation by contacting the company ADA Coordinator at .
Job Description Job Description Shield AI is a venture-backed defense-tech company with the mission of protecting service members and civilians with intelligent systems. Its products include Hivemind autonomy software, V-BAT and X-BAT aircraft, and Aechelon simulation and synthetic reality technologies. With offices and facilities across the U.S., Europe, the Middle East, and Asia-Pacific, Shield AI's technology actively supports operations worldwide. For more information, visit . Follow Shield AI on LinkedIn, X, Instagram, and YouTube. Job Description: The Mission Systems Software Engineer will work on developing solutions of a real time system environment to provide mission computing support at the center of an autonomous aircraft with sensor and weapons. This role will work to establish a software architecture for a real time system that operates in a multi-level environment at real time. The role will require work with hardware, software and systems teams to come to a consensus design. This role will focus on development of new systems and software designs from PDR, CoDR, CDR to lab test, flight test and fielding. What you'll do: Serve as a software mission systems engineer for a safety- and mission-critical real-time mission-computing system aligned with A-GRA and AMS-GRA principles, profiles, interfaces, and data standards. Define and maintain the end-to-end software architecture, including mission applications, platform services, middleware, operating-system interfaces, hardware-abstraction layers, networking, data distribution, component boundaries, and APIs. Architect for deterministic real-time performance by addressing scheduling, latency, jitter, synchronization, throughput, resource utilization, distributed processing, and CPU/GPU/accelerator allocation. Develop architecture views, interface definitions, data-flow and deployment models, sequence and timing diagrams, resource budgets, trade studies, and technical decision records. Integrate sensors, effectors, communications, navigation, autonomy, mission management, command-and-control, data-processing, and vehicle services in collaboration with hardware, FPGA, cybersecurity, safety, systems, integration, and test teams. Design for mission resilience and assurance through fault detection and isolation, redundancy, graceful degradation, recovery, health monitoring, cybersecurity, airworthiness, certification, and requirements traceability. Establish engineering practices for concurrency, synchronization, memory and resource management, deterministic execution, interface control, configuration management, and predictable component integration. Define and execute verification strategies across HIL/SIL laboratories, simulations, test benches, flight-test environments, and deployed systems using automated, performance, stress, fault-injection, interface, and timing tests. Maintain technical ownership throughout the system lifecycle by evaluating enabling technologies and supplier designs, analyzing performance, managing technical debt and modernization roadmaps, promoting reuse, and communicating architectural decisions. Required qualifications: Bachelor's degree in Computer Science, Software Engineering, Computer Engineering, Systems Engineering, Aerospace Engineering, Electrical Engineering, or a related technical field. 8+ years of professional software-engineering experience, including 3+ years in software architecture, systems architecture, or technical leadership. Experience developing embedded, distributed, real-time, safety-critical, or mission-critical software systems. Proficiency in C, C++, Rust, or another strongly typed systems-programming language. Strong understanding of real-time software principles, including scheduling, concurrency, synchronization, latency, jitter, memory management, and deterministic execution. Experience with embedded operating systems or RTOSs, middleware, interprocess communication, networking, and data-distribution technologies. Experience defining software architectures, APIs, interface-control documents, data flows, deployment models, and system resource budgets. Experience integrating software with hardware, sensors, communications systems, navigation systems, effectors, or other mission-system components. Experience supporting software through requirements development, design reviews, implementation, integration, verification, system test, and deployment. Working knowledge of systems-engineering processes, requirements management, traceability, configuration management, and verification and validation. Ability to analyze system performance using instrumentation, telemetry, traces, profiling, network captures, timing data, and resource-utilization measurements. Strong cross-functional technical leadership, problem-solving, written communication, and presentation skills. Ability to obtain and maintain a U.S. Department of Defense security clearance; U.S. citizenship may be required for clearance eligibility. Preferred qualifications: Experience developing software for autonomous aircraft, unmanned aircraft systems, avionics, mission computers, robotics, or aerospace and defense platforms. Experience with A-GRA, AMS-GRA, OMS, UCI, FACE, or other government reference architectures and open-mission-system standards. Experience integrating autonomy, mission management, command-and-control, sensor processing, communications, navigation, and effector capabilities. Familiarity with airworthiness, safety-assurance, or certification standards such as DO-178C, DO-254, ARP4754A, or applicable military airworthiness guidance. Experience with CPU-, GPU-, FPGA-, or accelerator-based heterogeneous computing architectures. Experience with publish/subscribe middleware, quality-of-service controls, high-rate data distribution, precision timing, and distributed time synchronization. Experience designing cybersecurity controls for embedded or mission systems, including trust boundaries, least privilege, authentication, authorization, secure communications, and software integrity. Experience with HIL/SIL environments, simulation systems, laboratory integration, flight testing, or operational deployment. Experience evaluating supplier designs, RTOSs, middleware, computing platforms, or third-party software for architectural compliance and integration readiness. Active or previously held U.S. Department of Defense Secret clearance. Full-time regular employee offer package: Pay within range listed + Bonus + Benefits + Equity Temporary employee offer package: Pay within range listed above + temporary benefits package (applicable after 60 days of employment) Salary compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location. All offers are contingent on a cleared background and possible reference check. Military fellows and part-time employees are not eligible for benefits. Please speak to your talent acquisition representative for more information. Shield AI is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity or Veteran status. If you have a disability or special need that requires accommodation, please let us know. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
11/11/2026
Full time
Job Description Job Description Shield AI is a venture-backed defense-tech company with the mission of protecting service members and civilians with intelligent systems. Its products include Hivemind autonomy software, V-BAT and X-BAT aircraft, and Aechelon simulation and synthetic reality technologies. With offices and facilities across the U.S., Europe, the Middle East, and Asia-Pacific, Shield AI's technology actively supports operations worldwide. For more information, visit . Follow Shield AI on LinkedIn, X, Instagram, and YouTube. Job Description: The Mission Systems Software Engineer will work on developing solutions of a real time system environment to provide mission computing support at the center of an autonomous aircraft with sensor and weapons. This role will work to establish a software architecture for a real time system that operates in a multi-level environment at real time. The role will require work with hardware, software and systems teams to come to a consensus design. This role will focus on development of new systems and software designs from PDR, CoDR, CDR to lab test, flight test and fielding. What you'll do: Serve as a software mission systems engineer for a safety- and mission-critical real-time mission-computing system aligned with A-GRA and AMS-GRA principles, profiles, interfaces, and data standards. Define and maintain the end-to-end software architecture, including mission applications, platform services, middleware, operating-system interfaces, hardware-abstraction layers, networking, data distribution, component boundaries, and APIs. Architect for deterministic real-time performance by addressing scheduling, latency, jitter, synchronization, throughput, resource utilization, distributed processing, and CPU/GPU/accelerator allocation. Develop architecture views, interface definitions, data-flow and deployment models, sequence and timing diagrams, resource budgets, trade studies, and technical decision records. Integrate sensors, effectors, communications, navigation, autonomy, mission management, command-and-control, data-processing, and vehicle services in collaboration with hardware, FPGA, cybersecurity, safety, systems, integration, and test teams. Design for mission resilience and assurance through fault detection and isolation, redundancy, graceful degradation, recovery, health monitoring, cybersecurity, airworthiness, certification, and requirements traceability. Establish engineering practices for concurrency, synchronization, memory and resource management, deterministic execution, interface control, configuration management, and predictable component integration. Define and execute verification strategies across HIL/SIL laboratories, simulations, test benches, flight-test environments, and deployed systems using automated, performance, stress, fault-injection, interface, and timing tests. Maintain technical ownership throughout the system lifecycle by evaluating enabling technologies and supplier designs, analyzing performance, managing technical debt and modernization roadmaps, promoting reuse, and communicating architectural decisions. Required qualifications: Bachelor's degree in Computer Science, Software Engineering, Computer Engineering, Systems Engineering, Aerospace Engineering, Electrical Engineering, or a related technical field. 8+ years of professional software-engineering experience, including 3+ years in software architecture, systems architecture, or technical leadership. Experience developing embedded, distributed, real-time, safety-critical, or mission-critical software systems. Proficiency in C, C++, Rust, or another strongly typed systems-programming language. Strong understanding of real-time software principles, including scheduling, concurrency, synchronization, latency, jitter, memory management, and deterministic execution. Experience with embedded operating systems or RTOSs, middleware, interprocess communication, networking, and data-distribution technologies. Experience defining software architectures, APIs, interface-control documents, data flows, deployment models, and system resource budgets. Experience integrating software with hardware, sensors, communications systems, navigation systems, effectors, or other mission-system components. Experience supporting software through requirements development, design reviews, implementation, integration, verification, system test, and deployment. Working knowledge of systems-engineering processes, requirements management, traceability, configuration management, and verification and validation. Ability to analyze system performance using instrumentation, telemetry, traces, profiling, network captures, timing data, and resource-utilization measurements. Strong cross-functional technical leadership, problem-solving, written communication, and presentation skills. Ability to obtain and maintain a U.S. Department of Defense security clearance; U.S. citizenship may be required for clearance eligibility. Preferred qualifications: Experience developing software for autonomous aircraft, unmanned aircraft systems, avionics, mission computers, robotics, or aerospace and defense platforms. Experience with A-GRA, AMS-GRA, OMS, UCI, FACE, or other government reference architectures and open-mission-system standards. Experience integrating autonomy, mission management, command-and-control, sensor processing, communications, navigation, and effector capabilities. Familiarity with airworthiness, safety-assurance, or certification standards such as DO-178C, DO-254, ARP4754A, or applicable military airworthiness guidance. Experience with CPU-, GPU-, FPGA-, or accelerator-based heterogeneous computing architectures. Experience with publish/subscribe middleware, quality-of-service controls, high-rate data distribution, precision timing, and distributed time synchronization. Experience designing cybersecurity controls for embedded or mission systems, including trust boundaries, least privilege, authentication, authorization, secure communications, and software integrity. Experience with HIL/SIL environments, simulation systems, laboratory integration, flight testing, or operational deployment. Experience evaluating supplier designs, RTOSs, middleware, computing platforms, or third-party software for architectural compliance and integration readiness. Active or previously held U.S. Department of Defense Secret clearance. Full-time regular employee offer package: Pay within range listed + Bonus + Benefits + Equity Temporary employee offer package: Pay within range listed above + temporary benefits package (applicable after 60 days of employment) Salary compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location. All offers are contingent on a cleared background and possible reference check. Military fellows and part-time employees are not eligible for benefits. Please speak to your talent acquisition representative for more information. Shield AI is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity or Veteran status. If you have a disability or special need that requires accommodation, please let us know. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.