RSA PowerShell Splunk RACF Network Admin Analyst

Description

This contractor position will assist other security staff with administration and monitoring of user access in various environments consisting of Active Directory, third-party Active Directory tools, Mainframe Resource Access Control Facility (RACF), and legacy application access with the capability to support cloud and on-premises application services. It will assist with designing, deploying and managing role-based access controls and be responsible for entitlement review based on security best practices and remediation of review findings.

It will also design and develop automated deprovisioning and remediation processes.

• Account management activities such as activation, termination, deletions, and monitoring accounts that are no longer active.
• Assist with privileged and non-privileged account reviews based on security best practices, and provide recommendations to improve the review process, including tools and automation.
• Remediate findings from account reviews.
• Design and develop automated deprovisioning and remediation processes.
• Assist in the implementation, management, and monitoring of role-based access control.
• Create and maintain procedures to activate, deactivate, and update user records.
• Work with application and compliance teams to manage and monitor system-level access for user and system accounts agency-wide.
• Process security and change requests to ensure accurate and timely completion of user access creation, modification, and deletions.
• Analyze root cause and recommend resolutions for provisioning and de-provisioning activities in accordance with standards, policies, and procedures.
• Participate in security audits and provide necessary data for audits.
• Provide recommendations to operational IT teams and business units on processes, controls, and objectives around information security activities, best practices, and process improvements.
• Utilize Power Shell scripts for automating tasks.
• Utilize Varonis tool to continuously monitor file access and user behavior to prevent data breaches, enforce the principle of least privilege, and automate remediation.
• Utilize the SIEM tool such as Splunk to monitor alerts, investigate security threats, and troubleshoot performance issues in real time.
• Perform other duties as assigned.

• Experience with Varonis datadvantage, Data Alerts, and data classification.
• Proficient in SIEM tool such as Splunk.
• Fluent in one (or more) scripting languages (Power Shell, Python, etc.).
• Deep understanding of IAM principals, methodology, and solutions including access control (role-based and discretionary), authentication, authorization, provisioning, and approval processes.

EOE Protected Veterans/Disability