Csf Designer Jobs (NOW HIRING)

Job Overview:

Pay Range: $45.00hr - $50.00hr

Requirement/Must Have:

• Deep technical expertise in Microsoft Active Directory and Microsoft Entra ID.
• Experience designing and implementing IAM integrations, provisioning workflows, and access controls.
• Proven experience implementing and maintaining role-based access control frameworks.
• Proven ability to lead and mentor technical engineering teams.
• Strong understanding of identity security principles and enterprise authentication models.
• Previous experience with NIST CSF, ISO 27001, or CIS Controls frameworks.
• Bachelor’s degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline; or equivalent experience.

Responsibilities:

• Serve as primary IT Security Subject Matter Expert (SME) for the organization.
• Manage user authentication, authorization, and access control policies to prevent unauthorized access.
• Support the design and build of role-based access control security frameworks for the department.
• Perform vulnerability scans, penetration tests, and risk assessments to identify and mitigate threats.
• Monitor security alerts, investigate breaches, and respond to incidents promptly.
• Develop, enforce, and update security policies; ensure compliance with legal and regulatory requirements.
• Educate staff on security best practices and protocols.
• Support the creation and maintenance of business continuity and disaster recovery plans.
• Administer identity and access management (IAM) systems including OKTA, Active Directory, Azure AD, and privileged access workstations.
• Monitor SIEM platforms (Splunk, Microsoft Sentinel, QRadar) for security events, tune alert rules, and escalate confirmed incidents.
• Implement and enforce multi-factor authentication, certificate management, and single sign-on configurations across enterprise applications.
• Develop and maintain security policies, standards, and procedures aligned with NIST CSF, ISO 27001, or CIS Controls frameworks.
• Support security audits and compliance assessments for SOC 2, HIPAA, PCI-DSS, or FedRAMP by gathering evidence and remediating findings.
• Perform security reviews on new systems, applications, and vendors as part of the change management and third-party risk process.
• Investigate phishing incidents, malware infections, and unauthorized access events; document findings and implement corrective controls.
• Identify and mitigate security-related project risks, issues, and dependencies, and develop contingency plans to ensure project success.

Nice to Have:

• Strong understanding of identity security principles and enterprise authentication models (SAML, OIDC, SCIM) and access control models like Fine-Grained Authorization (FGA).
• Experience with public sector modernization programs.
• Experience with firewalls and network security: Palo Alto Networks, Fortinet FortiGate, Cisco ASA/FTD — rule writing, NAT, VPN configuration.
• Experience with SIEM: Splunk (SPL queries), Microsoft Sentinel (KQL), IBM QRadar — correlation rule tuning, dashboard creation.
• Experience with endpoint security: CrowdStrike Falcon, Microsoft Defender for Endpoint, Carbon Black — alert triage, isolation, policy management.
• Experience with IAM: Active Directory, Azure Active Directory, Okta, CyberArk for PAM.
• Scripting skills: PowerShell and Python for automation of repetitive security tasks (log parsing, alert enrichment, AD queries).
• Experience with ServiceNow and integration with prevalent identity access management platforms.
• Knowledge of tools and platforms: ServiceNow, Active Directory, Okta, Ping Identity, Azure AD, Cisco ASA, Fortinet FortiGate, Palo Alto PA-OS, Check Point, Splunk, IBM QRadar, Microsoft Sentinel, eSet, Proofpoint Nessus, Qualys, N-Discovery, OpenVAS, ISO 27001 compliance checklists, CJIS compliance tools, SSAE 16 audit frameworks, NIST & FedRAMP frameworks.
• Certifications: CompTIA Security+, CISSP (Certified Information Systems Security Professional), Microsoft Azure Security Engineer Associate (AZ-500), Microsoft Applied Skills.
• Ability to administer Active Directory Domain Services.

Skills:

• Information Security.
• Identity and Access Management (IAM).
• OKTA.
• Azure platform.
• Active Directory.
• Microsoft Entra ID.
• Role-based access control (RBAC).
• NIST CSF.
• ISO 27001.
• CIS Controls.
• SIEM (Splunk, Microsoft Sentinel, QRadar).
• Vulnerability scanning.
• Penetration testing.
• Risk assessment.
• Multi-factor authentication.
• PowerShell.
• Python.

Qualification And Education:

• Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, or related IT discipline; or equivalent experience.