Position summary:

The Security Infrastructure Engineer role will be responsible for architecting, implementing, and the day-to-day administration activities respective to the Enterprise Security & Infrastructure Systems portfolio of applications and tools within TCH Operations and Technology, also providing oversight and governance for key systems administration initiatives ensuring the integrity of our customer facing applications and corporate systems portfolio.

Essential functions and responsibilities:

• Provide subject matter expertise and support all aspects of the Security Infrastructure Engineer environment including administration and maintenance, business continuity, backup and recovery, capacity management, change management, security management, and installation\configuration management in production and non-production environments
• Manage core technologies within the Enterprise Security & Infrastructure Systems portfolio including enterprise applications such as Forcepoint proxys, Guardium database security, Control-M Enterprise Scheduler, Entrust HSM appliances and software, Venafi, IBM APIConnect, and Jira/Confluence
• Direct/Manage and implement TCH data security policies while utilizing encryption, tokenization, hashing and masking techniques.
• Direct/Manage, implement TCH keys and certificates while using tools such as Enterprise Key Management Systems including Venafi, Entrust, Microsoft CA, Splunk, SolarWinds, and ServiceNow.
• Provide operational direction and triage on cryptography and key management.
• Provide oversight and governance for security risks affecting the business and be able to communicate to management and other business leaders.
• Manage the cryptographic device lifecycle including commissioning, sanitizing, and decommissioning of devices through secure processes.
• Work with other technical staff to coordinate activities and implementations, follow and document procedures, respond, track, and escalate systems incident
• Follow change management and configuration management procedures and guidelines
• Provide oversight for technical deployment plans and system utilization reports
• Provide assistance and problem support to infrastructure partners, application developers, business analysts and business users while assessing impacts and communicating effectively
• Recommend innovative solutions aligned with the organizational initiatives and recognized problem areas
• Architect, deploy and champion adherence of an enterprise approach facilitating best practice methodologies to stakeholders across the estate
• Collaborate with the Architecture department to ensure products and projects align to the TCH Reference Architecture guidelines
• Ensure synchronicity between application lifecycle environments related to infrastructure components
• Oversee and manage BAU projects such as infrastructure software upgrades and patch management
• Coordinate with all stakeholders to ensure the continuity of the applications related to upgrades, versions, patches, and new releases
• Serve as representative for all technical issues/discussion with peer support teams
• Create, maintain and present detailed technical documentation and executive summaries for key stakeholders, including senior management
• Executes the proper risk/issue disciplines to deliver the best outcomes for our customers, clients, and shareholders and to protect our company’s reputation
• Drive consensus and resolving conflicts quickly
• Think broadly about interdependencies

Additional responsibilities include:

• Work closely with internal and external partners to guarantee continuous infrastructure availability
• Suggest and implement continuous improvement, automation efforts across the enterprise
• Provide technical advice and industry best practices as first contact to stakeholders and clients pertaining to enterprise infrastructure related requests
• Perform special projects and initiatives as assigned
• Serve as technical lead/mentor/representative and act as proxy for manager when required

Qualifications required:

• B.S. degree in Computer Science/Engineering, MIS or equivalent work-based experience
• CISSP or equivalent InfoSec related certifications
• UNIX/Linux engineering background with solid scripting (shell, perl, python, expect) experience and/or equivalent Windows/Powershell scripting skills
• Must reside within 1 hour of Winston Salem Office/Datacenter
• Ability to travel up to 10% (between NYC, NC, PA and TX) including for unplanned emergency support
• Solid understanding of core infrastructure components such as high availability/hyper-converged/federation/replication
• Knowledgeable within the Infrastructure ecosystem in execution of implementation initiatives, capacity management efforts, and design of high availability and backup & recover solutions
• Positive track record of delivering large scale complex projects & initiatives
• Strong facilitation skills and ability to communicate with highly technical as well as non-technical partners

Qualifications desired:

• 1-5 years as an infrastructure subject matter expert in IT/financial services and/or another highly regulated industy
• 1-3 years experience with Entrust HSM appliances including RFS and supporting software; experience with cloud HSM (AWS) and/or cloud Key Management (HashiCorp)
• Proficient with the MS Office Suite with a focused ability to create concise and compelling presentations in PowerPoint in a demanding and quick paced environment including MS Project and Visio; Experience with M365/O365 and virtual desktop; ability to work efficiently onsite or remote
• Collaborative team player that connects across groups with proven ability to influence stakeholders
• Demonstrates commitment to excellence by anticipating needs, mitigating risks and minimizing challenges
• Strong attention to detail
• Communicates crisply and candidly
• Proficient in multiple infrastructure disciplines and functions; ex: converged infrastructure engineer
• Experience designing and developing enterprise software solutions
• Understanding of agile development and product-oriented methodologies, CI/CD, scrum, etc
• Technical Project and\or Product Management experience
• Experience working across large infrastructure environments, distributed across multiple data centers
• Experience with enterprise configuration tools such as Puppet and Terraform
• Experience with cloud infrastructure deployment and security
• Experience with VMWare infrastructure as well as physical appliances
• Experience with CyberArk

Behavioral & Leadership Competencies:

• Possesses and applies broad knowledge of concepts and principles while exhibiting technical expertise in core subject areas
• Works well independently with minimal instruction\guidance, confident to escalate issues appropriately
• Excellent team player and effectively engages external\internal partners across the enterprise portfolio
• Strong analytical and problem-solving skills with a focus for continuous improvement
• Ability to lead medium to complex projects as a department representative
• Adhere to the corporate Code of Conduct and exude a lead by example approach

Physical demands and work environment:

Work is generally sedentary in nature but may require standing and walking. The working environment is generally favorable. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available. Travel may be required.