Job Information
Cisco Information Security Support Engineer in RTP, North Carolina
Who We Are
Today’s demanding business environment is more than that - it’s a period of disruption between the pandemic, global business change, and internal process complexity. For us to focus on simplicity and the best customer experience, we are seeking outstanding talent and the right abilities to be successful. This is now a mantra for our Cisco leadership team and for us.
Our team is changing the way we run Cisco’s operations by improving the power of technology, the best of business processes. Together, we will reinvent the Cisco experience. We are partners with CISO organization on vision, strategy and execution that continues to improve our security posture and reduce agreed risk. Please join us and make this journey together!
Who You Are
You are a seasoned professional with a deep understanding and experience in privileged account management. You are proficient in the complexities of identity and access management platforms. Skilled in secret management, password vaulting, privileged session management, and application-to-application authentication, alongside SSH key management. You have demonstrated capability in defining access control measures, managing application credentials, and formulating user access policies. Additionally, they possess experience in deploying and running cloud infrastructures, specifically on AWS, and are adept at maintaining CI/CD and automation tools on cloud instances. Familiarity with Python and Shell scripting for building integrations is considered a significant asset. Proficiency in authentication standards such as SAML, OAuth, SCIM, and other industry authentication/authorization/identity solutions is expected. You have experience with agile software development practices, expertise with PAM product suites, experience with monitoring or logging analysis tools such as System Center Operations Manager or Splunk, and proficiency in multi-cloud environments, particularly AWS, with a strong emphasis on CI/CD automation.
Who You'll Work With
The Enterprise IT Security organization is passionate about technology not just to be innovative, but we transform innovation into value for Cisco. We are responsible for delivering best-in-class capabilities that enable Cisco employees, Customers and Partners to transform their experience. Our customers are not just industry leaders but are redefining the world through the empowerment of technology - with Cisco by their side. You will work with our innovative Privilege Identity and Access Management team as part of IT Security at Cisco where you will collaborate with other teams within our organization and across the enterprise. You will provide support for Identity and Access Management capabilities and will grow beyond other areas in a cross functional team setup.
What You'll Do
The role involves designing, developing, and fixing Identity Provider (IDP) solutions tailored for our internal clients, which includes providing comprehensive technical documentation, recommendations, specifications, business cases, requirements, and test cases. The individual will be responsible for configuring Single-Sign-On (SSO) authentication and API security management using leading Identity and Access Management (IAM) providers and must possess experience with federation services such as SAML, OAUTH, and OIDC. The candidate should have operational support knowledge and experience with top IDP platforms and display strong proficiency in analyzing logs, pinpointing authentication and authorization issues, and devising effective solutions. A key goal is to eliminate redundant capabilities, simplify processes, and uphold enterprise standards and industry best practices. The individual should be knowledgeable and experienced in enabling, migrating to, and/or overseeing an enterprise IDP platform based on best practices. Integration of IDP capabilities with Software as a Service (SaaS) and Platform as a Service (PaaS) cloud platforms is also a critical function. Candidates are expected to be adept in automating IDP processes through out-of-the-box capabilities, Robotic Process Automation (RPA), or the development of custom connectors/APIs. Additionally, a thorough understanding of Least Privileged Access Modeling, Role-Based Access Control, Separation of Duty, Agile methodologies and tools, and familiarity with COBIT and ITIL frameworks are essential for the role.
Basic Qualifications:
5+ years of Privileged Account Management with CyberArk or similar products with a Bachelors Degree in Computer Science, Computer Engineering, Electrical Engineering, or a related major such as Math, Physics or 3+ years of experience with a master’s degree in related field
Experience in build, configuration, and support of one or more privileged identity & access management platforms, such as CyberArk, Conjur, Beyond Trust and Hashicorp Vault
Experience in integral technology components such as secret management, password vaulting, privileged session management, application-to-application authentication, SSH key management
Experience in defining Access Control, User Entitlements, Manage Applications Credentials, User Access Policy Management
Experience in deployment and managing cloud infrastructure on AWS and maintenance of CI/CD & automation tools on cloud instances
Python and Shell Script experience in building integrations is a plus
Experience in authentication standards such as SAML, OAuth, SCIM, and other industry-standard authentication/authorization/identity solutions
Preferred Qualifications:
Agile Software Development
PAM Product Suite
Experience with monitoring or logging analysis tools (System Center Operations Manager, Splunk)
Multi-Cloud and AWS
CI/CD automation
Why Cisco?
#WeAreCisco. We are all unique, but collectively we bring our talents to work as a team, to develop innovative technology and power a more inclusive, digital future for everyone. How do we do it? Well, for starters - with people like you! Nearly every internet connection around the world touches Cisco. We’re the Internet’s optimists. Our technology makes sure the data traveling at light speed across connections does so securely, yet it’s not what we make but what we make happen which marks us out. We’re helping those who work in the health service to connect with patients and each other; schools, colleges, and universities to teach in even the most challenging of times. We’re helping businesses of all shapes and sizes to connect with their employees and customers in new ways, providing people with access to the digital skills they need and connecting the most remote parts of the world - whether through 5G, or otherwise. We tackle whatever challenges come our way. We have each other’s backs, we recognize our accomplishments, and we grow together. We celebrate and support one another - from big and small things in life to big career moments. And giving back is in our DNA (we get 10 days off each year to do just that). We know that powering an inclusive future starts with us. Because without diversity and a dedication to equality, there is no moving forward. Our 30 Inclusive Communities, that bring people together around commonalities or passions, are leading the way. Together we’re committed to learning, listening, caring for our communities, whilst supporting the most vulnerable with a collective effort to make this world a better place either with technology, or through our actions. So, you have colorful hair? Don’t care. Tattoos? Show off your ink. Like polka dots? That’s cool. Pop culture geek? Many of us are. Passion for technology and world changing? Be you, with us! #WeAreCisco
Cisco is an Affirmative Action and Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis.
Cisco will consider for employment, on a case by case basis, qualified applicants with arrest and conviction records.