The Clearing House
Security Infrastructure Engineer
The Clearing House, Winston Salem, North Carolina, United States, 27104
Position summary :
The Security Infrastructure Engineer role will be responsible for architecting, implementing, and the day-to-day administration activities respective to the Enterprise Security & Infrastructure Systems portfolio of applications and tools within TCH Operations and Technology, also providing oversight and governance for key systems administration initiatives ensuring the integrity of our customer facing applications and corporate systems portfolio.
Essential functions and responsibilities :Provide subject matter expertise and support all aspects of the Security Infrastructure Engineer environment including administration and maintenance, business continuity, backup and recovery, capacity management, change management, security management, and installationconfiguration management in production and non-production environmentsManage core technologies within the Enterprise Security & Infrastructure Systems portfolio including enterprise applications such as Forcepoint proxys, Guardium database security, Control-M Enterprise Scheduler, Entrust HSM appliances and software, Venafi, IBM APIConnect, and Jira/ConfluenceDirect/Manage and implement TCH data security policies while utilizing encryption, tokenization, hashing and masking techniques.Direct/Manage, implement TCH keys and certificates while using tools such as Enterprise Key Management Systems including Venafi, Entrust, Microsoft CA, Splunk, SolarWinds, and ServiceNow.Provide operational direction and triage on cryptography and key management.Provide oversight and governance for security risks affecting the business and be able to communicate to management and other business leaders.Manage the cryptographic device lifecycle including commissioning, sanitizing, and decommissioning of devices through secure processes.Work with other technical staff to coordinate activities and implementations, follow and document procedures, respond, track, and escalate systems incidentFollow change management and configuration management procedures and guidelinesProvide oversight for technical deployment plans and system utilization reportsProvide assistance and problem support to infrastructure partners, application developers, business analysts and business users while assessing impacts and communicating effectivelyRecommend innovative solutions aligned with the organizational initiatives and recognized problem areasArchitect, deploy and champion adherence of an enterprise approach facilitating best practice methodologies to stakeholders across the estateCollaborate with the Architecture department to ensure products and projects align to the TCH Reference Architecture guidelinesEnsure synchronicity between application lifecycle environments related to infrastructure componentsOversee and manage BAU projects such as infrastructure software upgrades and patch managementCoordinate with all stakeholders to ensure the continuity of the applications related to upgrades, versions, patches, and new releasesServe as representative for all technical issues/discussion with peer support teamsCreate, maintain and present detailed technical documentation and executive summaries for key stakeholders, including senior managementExecutes the proper risk/issue disciplines to deliver the best outcomes for our customers, clients, and shareholders and to protect our company's reputationDrive consensus and resolving conflicts quicklyThink broadly about interdependenciesAdditional responsibilities include:
Work closely with internal and external partners to guarantee continuous infrastructure availabilitySuggest and implement continuous improvement, automation efforts across the enterpriseProvide technical advice and industry best practices as first contact to stakeholders and clients pertaining to enterprise infrastructure related requestsPerform special projects and initiatives as assignedServe as technical lead/mentor/representative and act as proxy for manager when requiredQualifications required :
B.S. degree in Computer Science/Engineering, MIS or equivalent work-based experienceCISSP or equivalent InfoSec related certificationsUNIX/Linux engineering background with solid scripting (shell, perl, python, expect) experience and/or equivalent Windows/Powershell scripting skillsMust reside within 1 hour of Winston Salem Office/DatacenterAbility to travel up to 10% (between NYC, NC, PA and TX) including for unplanned emergency supportSolid understanding of core infrastructure components such as high availability/hyper-converged/federation/replicationKnowledgeable within the Infrastructure ecosystem in execution of implementation initiatives, capacity management efforts, and design of high availability and backup & recover solutionsPositive track record of delivering large scale complex projects & initiativesStrong facilitation skills and ability to communicate with highly technical as well as non-technical partnersQualifications desired :
1-5 years as an infrastructure subject matter expert in IT/financial services and/or another highly regulated industy1-3 years experience with Entrust HSM appliances including RFS and supporting software; experience with cloud HSM (AWS) and/or cloud Key Management (HashiCorp)Proficient with the MS Office Suite with a focused ability to create concise and compelling presentations in PowerPoint in a demanding and quick paced environment including MS Project and Visio; Experience with M365/O365 and virtual desktop; ability to work efficiently onsite or remoteCollaborative team player that connects across groups with proven ability to influence stakeholdersDemonstrates commitment to excellence by anticipating needs, mitigating risks and minimizing challengesStrong attention to detailCommunicates crisply and candidlyProficient in multiple infrastructure disciplines and functions; ex: converged infrastructure engineerExperience designing and developing enterprise software solutionsUnderstanding of agile development and product-oriented methodologies, CI/CD, scrum, etcTechnical Project andor Product Management experienceExperience working across large infrastructure environments, distributed across multiple data centersExperience with enterprise configuration tools such as Puppet and TerraformExperience with cloud infrastructure deployment and securityExperience with VMWare infrastructure as well as physical appliancesExperience with CyberArkBehavioral & Leadership Competencies:
Possesses and applies broad knowledge of concepts and principles while exhibiting technical expertise in core subject areasWorks well independently with minimal instructionguidance, confident to escalate issues appropriatelyExcellent team player and effectively engages externalinternal partners across the enterprise portfolioStrong analytical and problem-solving skills with a focus for continuous improvementAbility to lead medium to complex projects as a department representativeAdhere to the corporate Code of Conduct and exude a lead by example approach
Physical demands and work environment :
Work is generally sedentary in nature but may require standing and walking. The working environment is generally favorable. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available. Travel may be required.
The Security Infrastructure Engineer role will be responsible for architecting, implementing, and the day-to-day administration activities respective to the Enterprise Security & Infrastructure Systems portfolio of applications and tools within TCH Operations and Technology, also providing oversight and governance for key systems administration initiatives ensuring the integrity of our customer facing applications and corporate systems portfolio.
Essential functions and responsibilities :Provide subject matter expertise and support all aspects of the Security Infrastructure Engineer environment including administration and maintenance, business continuity, backup and recovery, capacity management, change management, security management, and installationconfiguration management in production and non-production environmentsManage core technologies within the Enterprise Security & Infrastructure Systems portfolio including enterprise applications such as Forcepoint proxys, Guardium database security, Control-M Enterprise Scheduler, Entrust HSM appliances and software, Venafi, IBM APIConnect, and Jira/ConfluenceDirect/Manage and implement TCH data security policies while utilizing encryption, tokenization, hashing and masking techniques.Direct/Manage, implement TCH keys and certificates while using tools such as Enterprise Key Management Systems including Venafi, Entrust, Microsoft CA, Splunk, SolarWinds, and ServiceNow.Provide operational direction and triage on cryptography and key management.Provide oversight and governance for security risks affecting the business and be able to communicate to management and other business leaders.Manage the cryptographic device lifecycle including commissioning, sanitizing, and decommissioning of devices through secure processes.Work with other technical staff to coordinate activities and implementations, follow and document procedures, respond, track, and escalate systems incidentFollow change management and configuration management procedures and guidelinesProvide oversight for technical deployment plans and system utilization reportsProvide assistance and problem support to infrastructure partners, application developers, business analysts and business users while assessing impacts and communicating effectivelyRecommend innovative solutions aligned with the organizational initiatives and recognized problem areasArchitect, deploy and champion adherence of an enterprise approach facilitating best practice methodologies to stakeholders across the estateCollaborate with the Architecture department to ensure products and projects align to the TCH Reference Architecture guidelinesEnsure synchronicity between application lifecycle environments related to infrastructure componentsOversee and manage BAU projects such as infrastructure software upgrades and patch managementCoordinate with all stakeholders to ensure the continuity of the applications related to upgrades, versions, patches, and new releasesServe as representative for all technical issues/discussion with peer support teamsCreate, maintain and present detailed technical documentation and executive summaries for key stakeholders, including senior managementExecutes the proper risk/issue disciplines to deliver the best outcomes for our customers, clients, and shareholders and to protect our company's reputationDrive consensus and resolving conflicts quicklyThink broadly about interdependenciesAdditional responsibilities include:
Work closely with internal and external partners to guarantee continuous infrastructure availabilitySuggest and implement continuous improvement, automation efforts across the enterpriseProvide technical advice and industry best practices as first contact to stakeholders and clients pertaining to enterprise infrastructure related requestsPerform special projects and initiatives as assignedServe as technical lead/mentor/representative and act as proxy for manager when requiredQualifications required :
B.S. degree in Computer Science/Engineering, MIS or equivalent work-based experienceCISSP or equivalent InfoSec related certificationsUNIX/Linux engineering background with solid scripting (shell, perl, python, expect) experience and/or equivalent Windows/Powershell scripting skillsMust reside within 1 hour of Winston Salem Office/DatacenterAbility to travel up to 10% (between NYC, NC, PA and TX) including for unplanned emergency supportSolid understanding of core infrastructure components such as high availability/hyper-converged/federation/replicationKnowledgeable within the Infrastructure ecosystem in execution of implementation initiatives, capacity management efforts, and design of high availability and backup & recover solutionsPositive track record of delivering large scale complex projects & initiativesStrong facilitation skills and ability to communicate with highly technical as well as non-technical partnersQualifications desired :
1-5 years as an infrastructure subject matter expert in IT/financial services and/or another highly regulated industy1-3 years experience with Entrust HSM appliances including RFS and supporting software; experience with cloud HSM (AWS) and/or cloud Key Management (HashiCorp)Proficient with the MS Office Suite with a focused ability to create concise and compelling presentations in PowerPoint in a demanding and quick paced environment including MS Project and Visio; Experience with M365/O365 and virtual desktop; ability to work efficiently onsite or remoteCollaborative team player that connects across groups with proven ability to influence stakeholdersDemonstrates commitment to excellence by anticipating needs, mitigating risks and minimizing challengesStrong attention to detailCommunicates crisply and candidlyProficient in multiple infrastructure disciplines and functions; ex: converged infrastructure engineerExperience designing and developing enterprise software solutionsUnderstanding of agile development and product-oriented methodologies, CI/CD, scrum, etcTechnical Project andor Product Management experienceExperience working across large infrastructure environments, distributed across multiple data centersExperience with enterprise configuration tools such as Puppet and TerraformExperience with cloud infrastructure deployment and securityExperience with VMWare infrastructure as well as physical appliancesExperience with CyberArkBehavioral & Leadership Competencies:
Possesses and applies broad knowledge of concepts and principles while exhibiting technical expertise in core subject areasWorks well independently with minimal instructionguidance, confident to escalate issues appropriatelyExcellent team player and effectively engages externalinternal partners across the enterprise portfolioStrong analytical and problem-solving skills with a focus for continuous improvementAbility to lead medium to complex projects as a department representativeAdhere to the corporate Code of Conduct and exude a lead by example approach
Physical demands and work environment :
Work is generally sedentary in nature but may require standing and walking. The working environment is generally favorable. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available. Travel may be required.