Vacancy expired!
CDM Security Engineer (Crowdstrike)
Professional Responsibilities: • Responsible for understanding the technical configuration of 70+ Federal agencies and leading the Agency integration into a cloud-based shared services platform. Will require establishing, troubleshooting, and maintaining a secure communication path from the agency to the FEDRAMP High solution. • Implement and configure security products for each agency, including vulnerability scanners, endpoint protection tools, firewall, VPN and network access control. • Work closely with a small team to meet each Agency's integration goals as part of a matrixed team of SMEs supporting each of the security tools or capabilities. • Assist in the maintenance of technical documentation of each Agency's architecture and configurations. • Assist the agencies in understanding and implementing continuous monitoring. Required Qualifications: • Due to the nature of the government contract requirements and/or clearance requirements, US citizenship is required. • Experience with implementing, configuring, and troubleshooting industry leading security technologies such as vulnerability scanners (Qualys/Tenable), endpoint protection/whitelisting (CrowdStrike, Cylance) and identity management tools (, CyberArk). • Ability to work with highly technical teams across diverse technical disciplines (development, engineering, documentation, policies, etc.), • Experience with firewall configuration, including Palo Alto next-generation firewall (NGFW). • Experience troubleshooting communications paths. • Ability to establish working relations at all organizational levels and demonstrate ability to diplomatically and effectively deal with government officials and program office stakeholders. • Self-motivator with ability to work as part of a team or independently with little supervision or direction. • Ability and desire to learn new technologies. • Ability to balance and prioritize many diverse tasks at once. Desired Qualifications: • CDM experience • Familiarity with Federal Trusted Internet Connection (TIC) policies and configurations • CISSP or other security certification • Agile, especially SAFe • McAfee, ICAM tools such as SailPointVacancy expired!