The Security Lead Consultant
NYC
Rate 60-70/hr on W2 (Keep low)
2.1 Security Engineering & Implementation (Within OTI Environment)
- Implement and configure security controls within OTI-managed Azure and SaaS environments for OpenRecords
- Configure identity, access management, and role-based access controls ( RBAC ) for applications and infrastructure
- Implementation of security configurations for encryption, logging, monitoring, and audit controls
- Review and validate secure configurations across Azure resources (networking, compute, storage, and application services)
2.2 Identity & Access Management (IAM) Implementation
- Configure and validate SSO, MFA, and Active Directory integrations for OpenRecords
- Implement role-based access models and least privilege access controls
- Configure privileged access workflows and administrative access controls
- User provisioning and access lifecycle processes
2.3 Vulnerability Management & Security Operations
- Configure and operate vulnerability scanning and assessment tools for OpenRecords environments
- Review vulnerability scan results and coordinate remediation with infrastructure and application teams
- Configure and validate security logging, alerting, and dashboarding as part of system implementation
- Configure SIEM, monitoring, and alerting rules for OpenRecords system
- Track and validate closure of security findings and misconfigurations
2.4 Security Architecture Implementation
- Participate in technical implementation and design sessions for OpenRecords
- Review and validate security architecture for cloud, SaaS, APIs, and integrations
- Ensure security-by-design principles are implemented during development and deployment phases
- Validate implementation of secure network architecture (segmentation, private endpoints, firewalls)
- Review vendor security configurations and ensure alignment with approved security requirements
2.5 Security Tooling & Platform Configuration
- Configure security tools used in the OpenRecords environment
- Implementation of endpoint protection, monitoring, and vulnerability management tools
- Configure logging, alerting, and security telemetry collection in Log Analytics and SIEM platforms
- Integration of Microsoft security tooling (Defender, Sentinel, M365 security stack where applicable)
- Configure alerts
2.6 Technical Documentation
- As-built documentation for documenting all configurations made
- Deliverables
- Configured identity and access management controls (SSO, MFA, RBAC) for OpenRecords
- Configure security related monitoring, logging, and alerting for OpenRecords system
- Security configuration baselines for Azure and integrated SaaS components
- Security readiness assessment and go-live validation report
Five years plus experience in the following:
- Azure Security (Defender for Cloud, Sentinel, security baselines)
- Identity & Access Management ( Azure AD, SSO, MFA, RBAC, PAM)
- Vulnerability management tools (e.g., Rapid7, Qualys, or equivalent)
- SIEM and log analytics (Microsoft Sentinel, Log Analytics Workspace)
- Cloud security architecture (Azure networking, private endpoints, segmentation)
- Security tooling: CrowdStrike, Microsoft 365 Security Stack, Cisco security tools
- Incident response and security operations (SOC processes, triage, escalation)
- DevSecOps practices and secure CI/CD integration (Azure DevOps, pipelines)
- Encryption, key management (Key Vault), and data protection controls
- Strong hands-on implementation and troubleshooting experience in cloud environments
Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.