DescriptionINTEGRIS Health Two Corporate Plaza Bldg, Oklahoma’s largest not-for-profit health system has a great opportunity for a Information Security Engineer Sr. in Oklahoma City, OK. In this position, you’ll be a part of our IT Standards team providing exceptional work supporting the INTEGRIS Health caregivers and the community at large. If our mission of partnering with people to live healthier lives speaks to you, apply today and learn more about our recently enhanced benefits package for all eligible caregivers such as, front loaded PTO, 100% INTEGRIS Health paid short term disability, increased retirement match, and paid family leave. We invite you to join us as we strive to be The Most Trusted Partner for Health.
The Information Security Engineer Sr will be responsible for providing engineering design, analysis, implementation, care & feeding, roadmap development and support for IT Security products of the organization, related to Privileged Access Management (PAM), Single Sign On, and Federation services.
Responsibilities
- Research, design, and implement cyber security solutions for organization systems and products that comply with all applicable security policies and standards regarding assigned technologies.
- Works with IT and internal and external business partners to ensure that security is factored in the evaluation, selection, installation and configuration process of hardware and software
- Establish and maintain an IT multi-year strategy with a focus on continuous improvement for all PAM, SSO, and MFA products within the organization.
- Analyzes and makes recommendations to improve security solution and architectures
- Examines network, server, and application logs to determine trends and identify security incidents
- Assists in the review and update of cyber security policies, architectures and standards
- Assists in responding to audits, penetration tests, and vulnerability assessments
QualificationsA successful candidate will have the expertise, and skills described below.
- Bachelor's degree in computer science or a related field and 6+ years in security engineering.
- Practical technical design, operational knowledge and experience with Privileged Account Management, Single Sign On, and Multi-Factor Authentication technologies, such as Delinea Secret Server, Imprivata, Azure MFA
- Technical knowledge in breadth of overall security domains, to include network security (VPN, firewall, encryption, network monitoring, content filtering, wireless security), vulnerability security (scanning, static/dynamic code analysis, patching), endpoint protection (anti-malware/virus, intrusion detection/prevention), server security (web server, database), and cloud security (Azure, AWS).
- Understands common security concerns, vulnerabilities, and exploitation techniques to think like an attacker and guard against those attack vectors.
- Proficiency with at least at least one scripting language (e.g., Python, PowerShell) to perform API integrations between technology systems.
- Strong documentation skills, especially with architecture diagrams and tool roadmap development.
Preferred
- Proficiency with at least one scripting language (e.g., Perl, Python and PowerShell)
- Certified Information Systems Security Professional (CISSP)