Sr IT Systems & Security Engineer

• Administer and optimize cloud environments, primarily focusing on Microsoft 365 and Azure, ensuring scalable, secure, and efficient operations.
• Implement and manage cloud-based applications and services, including integrations with on-premises or other cloud systems.
• Oversee cloud data storage, backup, and recovery processes, ensuring data integrity and compliance with data protection standards.

POS System Security

• Ensure the security and integrity of POS systems, implementing cybersecurity measures to protect against threats and unauthorized access.
• Coordinate with the applications team to ensure that POS systems are seamlessly integrated with cloud services and other IT systems.
• Monitor and maintain POS software and hardware, including regular updates and patches to address security vulnerabilities.

Cybersecurity Implementation and Management

• Deploy and manage advanced cybersecurity tools and processes to safeguard IT systems and sensitive data.
• Conduct regular security assessments and audits to identify vulnerabilities and implement remediation strategies.
• Keep up to date with the latest cybersecurity threats and countermeasures, continuously improving the organization's security posture.

Data Protection and Compliance

• Implement robust data protection strategies, focusing on both cloud-based and on-premises environments.
• Ensure compliance with relevant regulations and standards like PCI DSS, HIPAA and NIST CSF, adapting practices to meet the needs of different environments (cloud, hybrid, on-site).
• Collaborate with legal and compliance teams to ensure adherence to data privacy laws and guidelines.

Systems Administration

• Manage and maintain essential IT systems, with a particular focus on cloud-based environments and POS systems.
• Perform routine system maintenance tasks, including system monitoring, performance tuning, and troubleshooting.
• Coordinate with vendors and service providers to resolve complex system issues and optimize performance.

User Support and Security Training

• Provide high-level technical support for cloud and security-related issues.
• Develop and deliver training and awareness programs focusing on cybersecurity best practices and secure use of cloud services.

Project Involvement

• Actively participate in IT projects, ensuring cloud and cybersecurity considerations are integrated from the outset.
• Collaborate with various IT teams to align system and security objectives with broader organizational goals.

Do you have experience in Systems engineering?, Do you have a Bachelor's degree?, Required:

• Bachelor's degree; or equivalent level of advanced schooling + experience
• 7+ years of relevant work experience in IT Infrastructure
• Familiar with IT Systems & Security concepts, design principles, best practices, standards, and processes
• Excellent analytical, statistical, quantitative, and deduction skills.
• Ability to represent information in graphical forms including creating data, infrastructure, and topology diagrams, etc.
• Experience implementing controls for Cybersecurity regulation such as: PCI-DSS, SOX, or CCPA
• Flexible and adaptable to changing priorities, based on business needs.
• Must be able to work occasional varied hours, including nights, weekends and holidays.

Preferred:

• Regular work exposure to Python and Git version control
• Exposure to JSON (arm) and XML
• Industry Certifications preferred (ITIL, CISSP, Azure, etc.)
• Working understanding of POS systems architecture

Knowledge, Skills, and Abilities

• Strong understanding of architecting and configuring Microsoft Windows OS technology
• Background in scripting and automation in widely used languages such as Python, JavaScript, PowerShell, etc.
• Systems management & deployment software such as SCCM, M365 Intune, JAMF, etc.
• Vulnerability scanning technologies such as VikingCloud, Rapid7, Qualys
• Understanding of change management processes associated with technology implementations.
• Understanding of project management principles.
• Strong knowledge of cloud platforms (e.g., AWS, Azure, Google Cloud) and associated security controls.
• In-depth understanding of SSO protocols and standards (e.g., SAML, OAuth, OpenID Connect) and their implementation.
• Execute data migrations from legacy/competing platforms into M365
• Familiarity with Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) solutions (e.g., Sophos, Darktrace)

Physical Requirements:

• Must be able to remain in a stationary position at least 50% of the time.
• Must be able to lift 50lbs.
• Travel requirements less than 10%

This job description in no way states or implies that these are the only duties to be performed by the employee(s) in this position. Employee(s) will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments.

All duties and responsibilities are essential job functions and requirements and are subject to possible modification to reasonably accommodate individuals with disabilities. To perform this job successfully, the incumbent(s) will possess the skills, aptitudes, and abilities to perform each duty proficiently. The requirements listed in this document are the minimum levels of knowledge, skills, and abilities.