About the job

Overview

OneLogin has joined One Identity by Quest! The combined entity delivers a complete portfolio of market-leading Identity Access Management, Privileged Access Management, and Identity Governance solutions. Now, customers can achieve identity-centric security with trusted, proven technology in each major category.

As a Security First company and an AWS Security Competency Partner, OneLogin adheres to the Security Pillar of the Well-Architected Framework in our cloud-native environment and we are committed to implementing efficient and effective security controls.

The position of Cloud Security Engineer will report directly to the Head of Information Security and is responsible for designing, deploying, and overseeing the management of group wide security solutions and executing against the company's Information Security and Compliance roadmap. Working closely with technology partners, he or she will guide the selection, implementation, and integration of various security solutions. This position has significant organizational impact, requiring enterprise perspective, knowledge and change management skills.

Responsibilities

• Design and implementation of Network and Cloud Security, Identity and Access Management, Continuous Security Monitoring, and Vulnerability Management solutions.
• Integrate multiple technologies into a centralized monitoring solution
• Drive automation throughout deployed security tooling, particularly Security Orchestration, Automation, and Response (SOAR) technologies to enhance the organizations security operations capabilities.
• Partner with managed security partners and participate or lead incident response procedures.
• Work with developers to implement DevSecOps solutions and design and implement a security focused SDLC.
• Maintain and improve existing security application tool set.
• Translate compliance and security requirements into project / process deliverables.
• Keep current on industry trends and the direction our competitors are heading with respect to business capabilities and technology.
• Perform research, formal evaluation, and prototyping of leading/emerging technologies.
• Achieve roadmap goals on a quarterly basis and to set a high standard for process and operations.

Qualifications

• Microsoft 365 and Azure background, including experience architecting security across multi-tenant environments
• Strong technical skills to design and implement cloud security services with hands on experience on several of the items outlined below:
• Authentication Methods (sign-on security, multi-factor authentication (MFA), self-service password reset)
• Conditional Access (Compliance and conditional access policies, device compliance policy, conditional access policy)
• Azure AD Privileged Identity Management (PIM)
• Azure AD Identity Protection (User risk policy and sign-in risk policy)
• O365 ATP (Anti-phishing protection, anti-spoofing, anti-spam protection, Safe-Attachments, Safe Links, anti-malware solution)
• Azure Information Protection (Azure Rights Management, labels and conditions, templates, AIP scanner, RMS connector, tenant keys, integrate AIP with Microsoft Online Services)
• Data Loss Prevention (Manage DLP policies, manage sensitive information types
• O365 Cloud App Security (Plan implementation and configuration)
• Data governance and retention (Retention policies, data governance reports and dashboards, Information holds, import data in the Security and Compliance Center, manage inactive mailboxes)
• Data privacy regulation compliance (Regulatory compliance in Microsoft 365, review and interpret GDPR dashboards and reports, Compliance Manager reports)
• Azure Log Analytics
• Microsoft Sentinel
• Defender for Cloud
• Azure Lighthouse
• Experience in applying security to cloud technologies (managing secrets, Securing CI/CD pipelines, Infrastructure as Code, Container Security)
• Experience in implementing enterprise-wide vulnerability management solutions, including container-based vulnerability management.
• Possession of or ability to obtain professional certifications in information security or risk management, such as a CISSP, CISM, or Microsoft / Azure Security Certifications
• Strong knowledge of security, regulatory, and control frameworks, such as ISO270001, HIPAA, GDPR, NIST, and CIS.
• Self-starter who demonstrates strong ownership of their domain
• Interpersonal and collaborative skills and the ability to communicate security and risk-related concepts to technical and nontechnical audiences.
• High level of personal integrity, and the ability to professionally handle confidential matters.
• Natural passion for security and strong drive to see both projects and investigations to completion.
  

Company Description

One Identity enables organizations of all sizes to better secure, manage, monitor, protect, and analyze information and infrastructure to help fuel innovation and drive their businesses forward. With team members around the globe, we intend to continue to grow revenues and add value to customers.

When you join our team, you will have the opportunity to build and develop products at a scale few others can provide. Our product portfolio serves a large base of customers and we are addressing the strategic imperatives for enterprise businesses. Working with some of the most talented employees the industry has to offer, we provide enhanced career opportunities for team members to learn and grow in a rapidly changing environment.

Why work with us?

• Life at One Identity means collaborating with dedicated professionals with a passion for technology.
• When we see something that could be improved, we get to work inventing the solution.
• Our people demonstrate our winning culture through positive and meaningful relationships.
• We invest in our people and offer a series of programs that enables them to pursue a career that fulfills their potential.
• Our team members’ health and wellness is our priority as well as rewarding them for their hard work.

One Identity is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind: One Identity is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at One Identity are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. One Identity will not tolerate discrimination or harassment based on any of these characteristics. One Identity encourages applicants of all ages.

Come join us. For more information, visit us on the web at One Identity Careers | Explore Opportunities with the OI Team

Job seekers should be aware of fraudulent job offers from online scammers and only apply to roles listed on quest.com/careers using our applicant system. Note: We do not use text messaging or third-party messaging apps like Telegram to communicate with applicants, so please exercise caution if you are approached in this way and only interact with people claiming to be Quest employees if they have an email address ending in @quest.com. You can report job scams to the FTC (ReportFraud.ftc.gov) or your state attorney general.

Note From The Remote JobHunters:

• When you apply, be sure to mention that you heard about this position from The Remote JobHunters!
• Looking for more entry-level remote positions? If so, be sure to join The Remote JobHunters Facebook group, Subreddit, and subscribe to our weekly newsletter!