Senior Systems Security Specialist

Duties: Develop and implement cloud security controls, cloud-based processes and tools, and cloud security task automation. The specialist will perform security assessments, working closely with DevOps and Developer teams to identify security and privacy issues in AWS or Azure and find secure solutions for required functionality. This role involves continuous monitoring of the Health Benefit Exchange (HBX) and ancillary systems, including cloud security operations, responding to and escalating security issues as necessary. Key activities include conducting security impact analysis on proposed system changes, performing cloud security assessments and penetration testing, and conducting Incident Response and Forensics evaluations using security information and event management (SIEM) tools. The specialist must ensure that all MHBE system security requirements are addressed throughout the system development life cycle, including the review and update of systems security documentation and artifacts such as the Systems Security Plan, Information Security Risk Assessment, Privacy Impact Assessment, and Plan of Action & Milestones (POA&M), as well as creating and tracking POA&M requirements for resolving security findings. The role also encompasses administering cloud-based and physical firewalls, deploying and administering Identity and Access Management (IAM) products across various operating systems, performing the monitoring and operations of IAM implementations, and designing enhancements for IAM products like ForgeRock and SailPoint. Finally, the specialist is responsible for maintaining, monitoring, and providing operational support for all IAM products, computer programs, systems, and other security technologies, and revising system design and quality standards. Minimum Qualifications: The Senior Systems Security Specialist role requires a minimum of eight (8) years of experience in the analysis, definition, deployment, monitoring, and administration of security requirements and controls for large, mission-critical IT systems. A minimum of five (5) years of this experience must involve performing day-to-day security operations functions, including the administration, troubleshooting, and resolution of various security components. The candidate must possess at least four (4) years of hands-on experience in cloud security, specifically with demonstrated production experience using AWS Cloud to support security operations. This includes a working knowledge of essential AWS security features such as Security Groups, Network Access Control List, Firewall, WAF, Guard Duty, Macie, CloudTrail, CloudWatch, and Control Tower. This role demands a minimum of four (4) years of experience in defining computer security requirements for high-level applications, evaluating approved security product capabilities, and administering security for Windows and Linux operating systems. The specialist will be responsible for performing Security Incident Response and Forensics evaluations using SIEM tools, conducting assessments of information systems to mitigate threats and vulnerabilities, executing scheduled maintenance activities (patching, tuning, backups), and performing user provisioning and de-provisioning, all while monitoring the overall operational effectiveness of the security infrastructure. Preferred Qualifications: Minimum of five (5) years of experience in implementing, administering, and monitoring Security Controls and Governance for public-facing complex IT systems, with a focus on defining computer security requirements and developing solutions to multilevel security problems. Specialized experience includes a minimum of five (5) years of operational support for Identity and Access Management (IAM) products, particularly ForgeRock and Sailpoint, including configuration for single sign-on, password sync, and lifecycle management tasks. A minimum of five (5) years of experience is preferred in both the assessment and evaluation of information systems to mitigate threats, and in conducting Incident Response testing. Candidates should have at least three (3) years of hands-on experience designing, developing, deploying, and administering security policies for health insurance marketplaces or complex health and human services systems. Additional preferred skills include developing IT Security roadmaps, possessing technical knowledge of command line utilities (Linux, MS Windows), experience with integrating IAM systems with user repositories (Active Directory, LDAP, Databases), and proficiency in Java, JavaScript, and shell scripts. Experience assisting organizations in meeting security and privacy compliance requirements such as NIST SP 800-37, NIST 800-53, IRS Publication 1075, and MARS-e 2.0 is highly desirable. Experience with vulnerability management, penetration testing efforts, and configuring/reviewing ASA and/or Fortinet firewalls is also preferred. Finally, candidates should possess one or more relevant security certifications (e.g., CISSP, ISO, CSA STAR Cloud Security Advisor) and experience working within Project Management Office (PMO) processes, policies, and procedures. Job Types: Full-time, Contract Pay: $110,000.00 - $145,000.00 per year Benefits: 401(k) Dental insurance Health insurance Work Location: In person