Total 10 job vacancies by Technopals Consultants Pte. Ltd.

• Firewalls : Expert in checkpoint and Palo alto firewalls, beginner or intermediate knowledge in Cisco firewalls.
• Good in Azure Load balancers
• Experience in proxy servers. Prefer Symantec bluecoat ProxySG.
• Have knowledge of general network & security technologies / protocols like routing, DNS, LDAP, syslog, NTP, SNMP, SSH, HTTPS, AAA, SMTP, etc.
• Should be familiar with monitoring tools of the network security devices.
• Experience in log review, log monitoring, firewall rule review.
• Good in troubleshooting issues reported.

Optional (any 1 of below is mandatory)

• Cisco router and switches
• Cisco ISE
• Radware Anti-DDOS | Absolute vision
• Symantec 2FAVIP

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Primary Skills (max 5 only) Bachelor’s degree or relevant IT work experience SalesForce.com / Veeva: 3 to 5 years of support experiences in global multiple country setup
Service Management Coordination, experience with Services Management processes and demonstrated coordination experience in managing IT Support vendors Accountable for IT Global Application Experience provided services for the area under scope (group of applications/software, product team, region) experience in IT Application Operational Support or System Analyst roles Secondary Skills (max 5 only) Accountable for the global IT Support Services for the assigned system cluster - support will be provided by one of our IT Support vendors Ensure the correct quality/performance of the service according to Service Level Agreement Coordinate the workload of support team, responsible for the vendor operational management Responsible of ensuring resource efficiency, scalability of the service and implementation of simplification measures, such as automation, "shift left" actions, etc. Execution of defined meetings with different stakeholders (business key users, IT functions and external support teams) Main Roles and Responsibilities (max 5 only) Execution of defined meetings with different stakeholders (business key users, IT functions and external support teams) Responsible of ensuring resource efficiency, scalability of the service and implementation of simplification measures, such as automation, "shift left" actions, etc. Regular proactive review of support tickets to assure service quality according to SLA Overall view of the service and analysis of trending and deviations of support Ensure the correct quality/performance of the service according to Service Level Agreement

Summary

The Security consultant is a pivotal technical role essential for facilitating Zero Trust deployment initiatives. This role encompasses conducting thorough gap analyses, proficient project management, and delivering technical advisories. Collaboration with cross-functional regional teams across the Asia-Pacific region is integral to this role. The ideal candidate will exhibit a robust understanding of the Zero Trust framework (CISA Zero Trust Maturity Model and Microsoft Zero Trust Model), possess broad security experience, analytical acumen, and demonstrate a proactive approach to project management. This position will report to HQ.

Skills/Qualifications:

• At least 5+ years of experience in the cybersecurity industry.

• Consulting experience in Cyber domain.

• Proven experience in security engineering, with a focus on Zero Trust deployment.

• Consultation capability in related technology and or related service to customer.

• Great communication and interpersonal skills

• Bilingual (English / Japanese) preferred but not required (proficient English is a requirement)

• Proactive approach to problem-solving and project management, with a strong commitment to achieving objectives and deadlines.

• Project management experience.

Technology Proficiency:

• Core expertise in Microsoft technologies.

• Azure Active Directory (AAD), identity management and MFA

• Microsoft Endpoint Manager

• Network Security, Azure Virtual Network and Azure Firewall

• Data Protection, Microsoft Information Protection (MIP) classifying, labelling, and protecting sensitive data.

Main Responsibilities:

• Overall Security Posture: Support and maintain APAC’s information security strategy and ensure it is aligned with Global security strategy based on Zero Trust

• Zero Trust Deployment Support: Lead and support Zero Trust deployment initiatives, ensuring alignment with organizational objectives and security best practices, Possess a strong background in security with a focus on general high-level knowledge.

• Gap Analysis: Conduct comprehensive gap analyses to identify vulnerabilities and areas for improvement within existing security frameworks in APAC region. Perform APAC’s Information Security Risk Assessment in accordance with the Risk Register Policy and support information security risk assessments for APAC to determine the gaps to reach Zero Trust.

• Project Management: Effectively manage Zero Trust deployment projects, including planning, research, monitoring, and reporting.

• Technical Advisory: Provide expert technical guidance and advisory services to stakeholders, facilitating informed decision-making regarding Zero Trust implementation, although not responsible for implementation, must comprehend the technical aspects of security technology and planning.

• Cross-Functional Collaboration: Collaborate closely with cross-functional teams across the APAC region to ensure seamless integration and alignment of Zero Trust initiatives with broader organizational objectives.

• Documentation: Maintain accurate documentation of Zero Trust deployment processes, procedures, and best practices for reference and future optimization.

Additional General Responsibilities:

• Promote the use of ‘right-sized’ solutions for APAC, including Global Shared Information Security Services, to drive increased standardization and effective use of security resources.

• Promote an information security-conscious culture.

• Collaboratively work with APAC to develop and implement processes that meet Global information policy and standards.

• Support information security activities across APAC (align activities where possible, foster joint plans, etc.).

• Collaborate with APAC’s legal and compliance to ensure APAC is compliant with local information security laws and regulations.

• Support the efforts of APAC’s Security delivery resources to execute to expectations.

• Encourage the development of innovative ideas that solve root causes of identified problems.

• Build and develop cross functional relationships within APAC to engender support of security projects.

• Coordinate technical input and recommendations from GISS to APAC

• Work on global initiatives as part of working groups (e.g.: standards refresh, new technology discussion, etc.)

• Proven experience in a network support role, with a strong focus on datacenter and building networks.
• In-depth knowledge of firewall management and experience with firewall technologies, including Checkpoint and Palo Alto.
• Proficiency in supporting a variety of network devices, including Cisco routers and switches.
• Familiarity with WAN and LAN technologies, including routing protocols and network segmentation.
• Strong troubleshooting and analytical skills, with the ability to diagnose and resolve complex network issues.
• Relevant certifications in network technologies, such as CCNA, CCNP, Check Point Certified Systems Administrator (CCSA), and Palo Alto Networks Certified Network Security Engineer (PCNSE), are advantageous.

• Proven experience in a network support role, with a strong focus on datacenter and building networks.
• In-depth knowledge of firewall management and experience with firewall technologies, including Checkpoint and Palo Alto.
• Proficiency in supporting a variety of network devices, including Cisco routers and switches.
• Familiarity with WAN and LAN technologies, including routing protocols and network segmentation.
• Strong troubleshooting and analytical skills, with the ability to diagnose and resolve complex network issues.
• Relevant certifications in network technologies, such as CCNA, CCNP, Check Point Certified Systems Administrator (CCSA), and Palo Alto Networks Certified Network Security Engineer (PCNSE), are advantageous.

Cloud Security Engineer is responsible:

• • Design, implement, and manage security measures for cloud environments.
• • Conduct regular security assessments and audits of cloud infrastructure.
• • Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• • Monitor and respond to security incidents, ensuring timely resolution.
• • Implement and maintain access controls, encryption, and other security features.
• • Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• • Develop and document security policies, procedures, and guidelines for cloud environments.

What we are looking for

• • Bachelor’s degree in Computer Science, Information Security, or related field.
• • Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• • Excellent communication skills and the ability to collaborate with diverse teams.
• • Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• • Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• • Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• • Good knowledge in security
• • Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• • Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• • Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Mandatory Skills

Job Summary:

Seeking a highly skilled and experienced z/OS Systems Programmer to be responsible for providing technical support for IBM's z/OS operating system, RACF, zSecure, MFA and subsystems including JES2, and USS.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous

Skills:

• Experience in technical architect role using service and hosting solutions such as public cloud IaaS, PaaS platforms
• Hands-on experience in cloud-native architecture design, implementation of distributed, fault-tolerant enterprise applications for Cloud.
• Hands on experience in deploying, managing, and troubleshooting AWS EKS (Elastic Kubernetes Service) Kubernetes platform services
• Hands on experience with Terraform/Ansible/GitHub, AWS CodePipeline, Puppet, Chef)
• Hands on experience deploying the application codes using DevOps pipelines and troubleshooting any platform level issues related to the application code deployments
• Hands-on multi-tier architecting skills.
• Sound knowledge of Infrastructure design (Compute, Storage, Network)
• Experience designing and maintaining the platform to run the PaaS and Cloud native database technologies on AWS
• Hands-on cloud security (End point & Portal security using AWS Security Hub, AWS Inspector, AWS WAF, AWS Guard duty)
• Linux & Windows Hands on Expertise
• Strong knowledge & Hands-on scripting language: YAML, Python, Shell, Bash, Powershell etc
• Expertise in Build tools like Jenkins to build re-usable release pipelines, release and configuration management tools like Chef/Puppet/Ansible platforms
• Experience in at least one configuration management tool (Puppet, Ansible, Chef, Maven etc.)

Certifications Required:

• AWS Solutions Architect – Associate / Professional

Optional certifications:

• AWS Developer Associate, AWS DevOps Professional, AWS Specialty
• Terraform, Puppet, Chef, Ansible, Jenkins etc

Job Responsibilites and Qualification:

· Participate in requirements gathering and use case development;

· Minimum of 3 years of experience working with SailPoint technologies (IdentityIQ), concepts and features;

· Develop technical project plans and aid in project resourcing;

· Develop and execute test cases and test plans for SailPoint solutions;

· Development background (i.e. JAVA);

· Ability to communicate with all levels of the organization in comprehensive manner (i.e. translate and present technical information to business);

· Experience with IdentityIQ Administration and Implementation;

· Develop or contribute to technical project plans with regular tracking and reporting;

· Front end tech: Angular.js is ideal;

· Bachelor’s Degree in Computer Science, Computer Engineering or a closely related field;

· Strong IAM domain knowledge;

· Strong working knowledge of Java and the ability to write scripts.