Security Engineer Infrastructure

Position Summary:

• Under the supervision of the Security Manager, the Security Engineer – Infrastructure is responsible for supporting the security and compliance of the firm's infrastructure, including networks, servers, workstations, and telecommunications systems.
• This role works closely with Information Technology teams to ensure all infrastructure components meet firm, industry, and ISO 27001 security standards.
• The Security Engineer reviews and secures infrastructure, develops risk mitigation strategies, and contributes to enterprise-wide security projects and initiatives.
• Responsibilities include serving as a key resource for consulting on security matters, maintaining access controls, and addressing escalations related to security audits, incident response, and internal security concerns.
• The Security Engineer also participates in the design, implementation, and support of LAN/WAN, remote access, IDS/IPS, PKI, and firewall/unified threat management systems, as well as Identity & Access Management, Endpoint Security Management, Domain Management, and DNS Management.
• The Security Engineer is also a contributing member of the Cybersecurity Incident Response Team (CIRT).

Job Duties and Responsibilities:

• Manage and maintain the organization's Public Key Infrastructure (PKI) systems, ensuring secure encryption, certificate management, and crypto graphic key life cycle processes are in place and operating

• Deploy, manage, and maintain firewalls, including Firewall-as-a-Service (FWaaS), Unified Threat Management (UTM) solutions, and Secure Web Gateways (SWG), to secure network traffic and enforce firm security policies.

• Serve as a primary escalation point for security incidents and audits, leading or assisting in the development of mitigation strategies, post-incident reviews, and compliance reviews to ensure ongoing ISO 27001 adherence.

Education:

• Bachelor's degree in Computer Science, Business, Engineering, or a related field; or equivalent work experience is required.
• CISSP certification or progress toward CISSP certification is preferred.

Experience:

• Proven background in applying advanced IT security concepts and extensive understanding of contemporary hardware and software architectures in a multi-site, mission-critical environment.