Senior Engineer (Cybersecurity, E5, O365, Azure) Location: Wayzata (3 days on, 2 remote) POSITION MISSION This position will fill a central role on our Information Technology team, directly implementing best practices related to Cybersecurity, Microsoft Azure and Microsoft 365 Tenants, ensuring consistent alignment with an evolving Zero Trust framework as our company grows and deploys systems globally while utilizing a cloud-centric network so end-users and other stakeholders inter-operate within a secure and reliable IT environment. ESSENTIAL DUTIES AND RESPONSIBILITIES:
- Perform duties across multiple facets of information technology such as networking (both cloud and on-premises) telecommunications, end user device support, data security, and other areas of the organization's overall IT Platform/Infrastructure.
- Install security measures and operate hardware and software systems to protect Data and the IT infrastructure.
- Participate integrally in the continuous evolution of Disaster Recovery and Business Continuity plans and implement details of those plans within our IT Systems. This includes active participation as a subject matter expert in the event of an actual emergency.
- Implement and maintain methods of system monitoring that leverage, integrate and extend services received from Manage Services Providers.
- Conduct and monitor vulnerability assessments and monitor systems, networks, databases, and the Web for potential system breaches/intrusions.
- Respond to alerts from information security tools. Report, investigate, and resolve security incidents and problems to their root cause.
- Recommend and implement changes to enhance systems security and prevent data loss and unauthorized access.
- Research security trends, new methods, and techniques used in unauthorized data access to preemptively eliminate the possibility of a system breach.
- Proactively address gaps with existing support processes, documentation, etc., and prioritize accordingly.
- Provide technical support and guidance to users in a second or third tier support capacity.
- Manage and administer the Microsoft Azure and Microsoft 365 environments, including provisioning, configuration, performance monitoring, policy governance, security.
- Manage security solutions, including firewalls, antivirus, data loss, and intrusion protection systems.
- Serve as overall subject matter expert on Microsoft cloud-based services and the effective integration of those services with other service providers and stakeholders.
- Collaborate with internal and external parties to transform high-level technical objectives and requirements into comprehensive and actionable plans.
- Develop scripts and automation to improve the quality, efficiency, and reliability of all applicable systems.
- Document security, backup, and redundancy strategies.
QUALIFICATIONS:
- 10 years of experience deeply involved in IT networking, at least 5 years of which in a small company with enterprise-grade security requirements.
- Practical experience migrating and maintaining systems and functions traditionally accomplished with on-premises servers to a cloud-first or cloud-only environment.
- Excellent communication skills, both verbal and in-writing
- Proven ability to work on multiple concurrent projects and to consistently coordinate this work with others in a global hybrid work environment.
- Comprehensive experience with Microsoft Licensing as it relates to E5, Power Platform, Microsoft SQL, etc. to ensure that the capabilities are always leveraged in productive and secure manners. Demonstrated ability to integrate with other vertical platforms and applications to best meet business needs.
- Comprehensive understanding of network segmentation, QoS, and network traffic shaping to ensure correct prioritization of encrypted data.
- Conversant in PowerScript, Microsoft Power Apps, and other tools applicable to managing network infrastructure, automated work-flows, and end-device management.
- Experience implementing and maintaining a comprehensive Mobile Device Management program.
- Experience implementing SASE, SD-WAN and other elements key to a Zero-Trust framework while leveraging legacy systems such as office firewall appliances.
- Experience translating requirements related to Data Classification to specific implementation details in Document Library permissions, Database access, secure portal configuration, etc.
- Experience deploying and maintaining physical network components including ethernet and fiber cabling, network switches, routers, etc.
- Proficiency in switch and router CLI, IOS, and other hardware configuration scripting languages a plus.
- Solid understanding of IT networking fundamentals including the OSI network layers, TCP/IP, etc.
- Experience with networking tools (ping, tracert, tracemon, NetMon, WireShark, etc.)
- ITIL, Agile experience preferred.
Education/experience/certifications:
- Bachelor's degree or equivalent combination of education and experience in Computer Science, Information Systems, Engineering, or other related disciplines.
#DICE ...@c4techservices.com