Lead, Infrastructure Security Engineer - MS System Center Suite and Hyper-V

Job Classification

Technology - Engineering & Cloud

As a Lead, Infrastructure Security Engineer in the Workforce Identity Management team, you will partner with product owners, tech leads, engineers, and security stakeholders to improve Prudential’s infrastructure for the identity and access management platform. An important function of this role is to ensure the identity platform infrastructure remains in compliance with the Information Security Standards and processes. You will bring excellent problem solving, communication and teamwork skills, along with agile ways of working, strong business insight, an inclusive leadership attitude, and a continuous learning focus to all that you do.

• Review and understand all applicable Information Security Standards and Engineering Specifications; create an action plan to remediate out of compliance issues
• Ensure product and infrastructure security is maintained throughout the system lifecycle, integrating new security features, patches, and updates into existing environments managed by System Center components (Hyper-V, SCVMM, SCCM, SCOM, SCDPM)
• Collaborate with our Information Security Office regularly to complete security hardening on identity management platform infrastructure
• Collaborate with other engineering teams to maintain a secure and highly available environment
• Coordinate the scheduling of patches and upgrades on identity management platform systems as well as ensure accurate operational information in CMDB
• Provide technical support to stakeholders and business applications teams
• Bring a strong understanding of relevant and emerging technologies, provide input and assist fellow team members
• Work on complex problems in which analysis of situations or data requires an evaluation of intangible variables

• Bachelor of Computer Science or related experience in identity security related field
• Security identity architectures and frameworks, privileged access management
• Audit and compliance engagements and ability to field and tend to PCI/SOX/Fed regulatory requirements as well as remedial action plans
• Ability to mentor others with minimal guidance and effectively leverage diverse ideas, experiences, thoughts and perspectives to the benefit of the organization
• Experience with agile development methodologies and Test-Driven Development (TDD)
• Knowledge of business concepts tools and processes that are needed for making sound decisions in the context of the company's business
• Ability to learn new skills and knowledge on an on-going basis through self-initiative and tackling challenges
• Excellent problem solving, communication and collaboration skills

On-Premises Microsoft software and System Center suite:

• System Center Virtual Machine Manager (SCVMM):
  Manage and maintain physical Hyper-V hosts, virtual machines (VMs) and overall lifecycle management (provision, monitor, optimize, migrate), ensure high availability and performance
• System Center Configuration Manager (SCCM):
  Deploy, manage, and troubleshoot, ensure compliance, and reporting of software and security updates to identity management systems
• System Center Operations Manager (SCOM):
  Implement and maintain monitoring rules, alerts, dashboards, to proactively detect and address issues for identity management systems
• System Center Orchestrator (SCORCH):
  Design and implement automation workflows to support identity and access management systems
• System Center Data Protection Manager (SCDPM):
  Configure and manage backup and recovery for identity platform servers and VMs, monitor backup jobs, troubleshoot failures, and ensure data integrity
• SQL Server:
  Install, configure, and maintain Microsoft SQL server instances that support System center components, ensuring availability, performing, tuning, backup, and security of SQL databases
• Server Administration:
  Windows Server operating system and Hyper-V virtualization

Programming

Languages:

Power Shell scripting and automation

Cloud Computing:
Understanding and knowledge Azure resource bridge, Azure Arc and other Azure Cloud infrastructure management tool