Description/Role | Baltimore County’s Office of Information Technology (OIT) is seeking an IT Security Analyst (With right to hire upon completion of the six-month contract) to ensure County applications and systems are integrated into the County’s Identity Access Governance system. Ensuring access to County applications and systems are safeguarded using industry standards. The IT Security Analyst will monitor and audit account usage to prevent unauthorized access. Following least privilege principles when creating security roles for both applications and systems. - Monitors System Access Request system to ensure appropriate access is provisioned.
- Captures application requirements for integrating with provisioning system.
- Reduce information security risks to an acceptable level using industry best practices, policies and procedures.
- Provides Identity Access Management and Governance for commercial off-the-shelf
- software packages, County designed applications, as well as State systems.
- Provides training to other members of OIT and/or County Staff.
- Audits and monitors account usage for all County applications and systems.
- Maintains and creates technical documentation for security tools and procedures.
- Monitor and maintain endpoint security using McAfee EPO and Microsoft SCEP
- Manage the County’s Privileged Access Management appliance.
- Integrates County applications and systems into the County’s Identity Access
- Management system using various authentication protocols (SAML, OAuth, OpenID, etc.)
- Performing vulnerability scans against various applications and systems.
- Performing investigations on cyber and physical access related issues.
- Performs other related duties as required.
|
Skills/Experience Required | Minimum Requirements: - Graduated from an accredited college or university with a bachelor’s degree in Computer Science,
- Business Administration or a related field plus five (5) years of directly related experience or equivalent combination of education, experience, training, and certifications.
- Security , or any other related certification
- Experience interacting with Identity Access Management platforms such as (SailPoint, Okta, Ping, ForgeRock, Microsoft, etc.)
- Experience with SAML integrations and other standards based security protocols.
- Experience with integrating business applications, databases, middleware and/or operating systems in an IAM provisioning system, access certifications, reporting, role/entitlement administration, compliance and user administration, authentication & authorization (SSO & MFA).
- Extensive experience with Active Directory
- Experience monitoring and configuring a SIEM tool
Preferred Skills and Experience: - Specific Identity Access Management activities include Gathering requirements, Designing the application, (Technology and Business) configuring/customizing the tool, change management, working with teams to re-architect environments and applications.
- Experience operating and maintaining security tools such as McAfee, BeyondTrust – Remote Access, and Tenable Nessus.
- Can demonstrate competence in SQL programming language
|
