L2 InfraSec Engineer

October 16, 2024

București

FULL TIME

Job Description

Operate, configure and troubleshoot of systems as per Low Level Design;
Finetune and optimize the deployments for the customer environment;
Reviewing current system security measures and recommending and implementing enhancements;
Work with vendors, internal and external stakeholders to develop High & Low Design for implementation of Identity and Access management systems like Redhat IPA, Keycloak, AD , Hashicorp Vault, Cisco ISE.
Performing diagnosis, root-cause analysis, escalation, tracking and permanent resolution of complex security incidents;
Coordinating with network and cloud engineers to ensure availability, reliability, and scalability of security architecture;
Provide knowledge and training session to the internal teams;
Provide support on Incident Response on security incidents and participate in the development of business cases and presentations on information security technologies of interest to the company;
Perform on-call duties, 1 week/month;

Technical Knowledge:

Hands on Experience on Security and platform Solutions operations;
Good understanding of TCP/IP stack and network security controls;
Experience in Identity and Access Management solution in cloud environment;
Must have good understanding of Identity & Access Management solutions and Lifecycle management including LDAP (RH IPA), Active Directory, Keycloak, Okta, Azure AD, ISE, Microsoft Identity Manager (MIM), Kerberos, PKI, DNS, DHCP and GPO implementations. Must have thorough understanding of common authentication standards (OAUTH, SAML, SSO OPENID, etc.);
Experience in design, deployment and management of Redhat IPA, Keycloak, Cyber Ark, Hashicorp Vault, Utimaco HSM, Key Factor CA and CLM, Cisco ISE or similar technologies is a must;
Working knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms (OAuth, Open ID, Keycloak , Vault , SSO etc);
Strong knowledge of Infrastructure Security;
Experience in monitoring solutions of Security & platform solutions;
Defining and configuration of Cloud Identity & Access Management;
Strong knowledge of firewalls platforms;
Experience in network monitoring and security operations;