Qureos Mentor

Member Driven Technologies

<div>POSITION LOCATION
This position is eligible for a hybrid work arrangement. Currently 5 days of on-site work per month are required.
POSITION PURPOSE
The role of the Security Architect at MDT is to ensure that security requirements necessary to protect MDT's mission, vision and business processes are adequately addressed. The Security Architect is responsible for designing and implementing comprehensive security solutions and strategies. This role serves as a key security and technical advisor and strategist, partnering with technology, development, and business teams to ensure secure-by-design solutions across the organization&rsquo;s technology landscape.
DUTIES &amp; RESPONSIBILITIES
<ul><li>Design and implement security controls for cloud, on-premises, and hybrid environments (e.g., AWS, Azure, GCP).</li><li>
Monitor and review cloud service provider security policies to help ensure compliance with organizational requirements.</li><li>
Partner with Enterprise Architects and Development teams to ensure security best practices and principles are embedded in their workflows.</li><li>
Conduct security assessments and risk analysis to identify vulnerabilities and propose mitigation strategies within the Zero Trust framework.</li><li>
Design and implement Zero Trust principles and frameworks to enhance the security posture of our systems and networks.</li><li>
Design and maintain robust CI/CD pipelines with integrated security checks to &quot;shift security left,&quot; ensuring vulnerabilities are identified early in the development process.</li><li>
Collaborate with cross-functional teams to define access policies, user authentication mechanisms, and secure connectivity across various environments.</li><li>
Design and collaborate with cross-functional teams to deploy secure SSO solutions with identity providers (IdPs), directory services, and third-party applications for seamless and centralized authentication and authorization across multiple applications and systems.</li><li>
Collaborate with stakeholders to understand business requirements and translate them into effective security controls and solutions.</li><li>
Make recommendations to reduce risks.</li><li>
Supports administration of the enterprise security infrastructure including, but not limited to, the systems supporting: network security monitoring, two-factor authentication, web application firewalls, vulnerability management, endpoint detection and response, data loss prevention, and enterprise logging.
</li><li>Supports incident response processes.</li><li>
Compiles metrics for leadership.</li><li>
Assists in installing, implementing, and maintaining security software.</li><li>
Maintains the availability, patching, and operational functionality of assigned security systems.</li><li>
Evaluates new security tools, products, and solutions for applicability to security needs.</li><li>
Makes recommendations regarding purchase of security products.</li><li>
Ensures MDT&rsquo;s reputation is maintained internally and externally.</li><li>
Ensures appropriate levels of security and confidentiality are always maintained.</li><li>
Acts as a representative of MDT with business and professional organizations and external IT contacts.</li><li>
Keeps management informed of area activities and any significant concerns.</li><li>
Attends and participates in meetings as required.</li><li>
Completes accurate tickets, reports, records, and other documentation as necessary.</li><li>
Stay up to date with industry trends, emerging technologies, and security best practices to proactively identify potential threats and vulnerabilities.</li><li>
Responsible for working with the security team and other departments to ensure work is flowing effectively and timely throughout the organization.</li><li>
Assists in setting department and company standard practices and procedures.</li><li>
Responsible for working with company vendors to ensure the delivery of products or services is successful.</li><li>
Acts as a subject matter expert for co-workers and fosters a culture of continuous learning and cross-training.</li><li>
Assigned to the on-call rotation to support security operations.</li><li>
Stays informed of trends and changes in the information security field.</li><li>
Completes special projects and research studies as required.
</li><li>Keeps work area clean, secure, and well maintained</li></ul>
EDUCATION &amp; EXPERIENCE REQUIREMENTS
<ul><li>Bachelor&rsquo;s degree in Computer Science or a related field, or an equivalent combination of training and experience in Computer Science.</li><li>
Professional certifications such as CISSP, CISM, CCSK, or CCSP are highly desirable.</li><li>
Ten years of experience as a Security Architect or similar role, with a focus on cloud security and Zero Trust architecture.</li></ul>
REQUIRED KNOWLEDGE<ul><li>
Strong knowledge of cloud platforms (e.g., AWS, Azure, Google Cloud) and associated security controls.</li><li>
Experience designing and implementing Zero Trust architectures, including network segmentation, secure access controls, and strong authentication mechanisms.</li><li>
Experience with designing and implementing Secure Access Service Edge (SASE) and Software-Defined Wide Area Network (SD-WAN).</li><li>
Experience with the design and integration of security into the SDLC by implementing secure coding standards, automated security testing (SAST, DAST), and vulnerability scanning.</li><li>
In-depth understanding of SSO protocols and standards (e.g., SAML, OAuth, OpenID Connect) and their implementation.</li><li>
Technical understanding of threat actor attack techniques.</li><li>
Familiarity with security frameworks and standards (e.g., NIST Cybersecurity Framework, ISO 27001, CIS Controls).</li><li>
Excellent analytical and problem-solving skills, with the ability to assess complex security requirements and recommend appropriate solutions.</li><li>
Effective communication and interpersonal skills to collaborate with cross-functional teams and communicate security concepts to non-technical stakeholders.</li><li>
Self-motivated and ability to meet deadlines with minimal supervision.</li><li>
Well organized and attentive to detail.</li><li>
Strong leadership abilities.</li><li>
Project management skills.</li><li>
Ability to maintain confidentiality.</li></ul>
WORKING CONDITIONS
Special<ul><li>
No hazardous or significantly unpleasant conditions (such as in a typical office).</li><li>
Additional hours, including on-call with Saturday/Sunday support, as required.</li><li>
Long duration of computer workstation usage.</li></ul>
INTENT AND FUNCTION OF JOB DESCRIPTIONS
Job descriptions assist organizations in ensuring that the hiring process is fairly administered and that qualified employees are selected. They are also essential to an effective appraisal system and related promotion, transfer, layoff, and termination decisions. Well-constructed job descriptions are an integral part of any effective compensation system.
All descriptions have been reviewed to ensure that only essential functions and basic duties have been included. Peripheral tasks, only incidentally related to each position, have been excluded. Requirements, skills, and abilities included have been determined to be the minimal standards required to successfully perform the positions. In no instance, however, should the duties, responsibilities, and requirements delineated be interpreted as all inclusive. Additional functions and requirements may be assigned by supervisors as deemed appropriate.
In accordance with the Americans with Disabilities Act, it is possible that requirements may be modified to reasonably accommodate disabled individuals. However, no accommodations will be made which may pose serious health or safety risks to the employee or others or which impose undue hardships on the organization.</div>

Security Architect

<div>POSITION LOCATION
This position is eligible for a hybrid work arrangement. Currently 5 days of on-site work per month are required.
POSITION PURPOSE<div>
The role of the Security Architect at MDT is to ensure that security requirements necessary to protect MDT's mission, vision and business processes are adequately addressed. The Security Architect is responsible for designing and implementing comprehensive security solutions and strategies. This role serves as a key security and technical advisor and strategist, partnering with technology, development, and business teams to ensure secure-by-design solutions across the organization&rsquo;s technology landscape.
</div>DUTIES &amp; RESPONSIBILITIES
<ul><li>Design and implement security controls for cloud, on-premises, and hybrid environments (e.g., AWS, Azure, GCP).</li><li>
Monitor and review cloud service provider security policies to help ensure compliance with organizational requirements.</li><li>
Partner with Enterprise Architects and Development teams to ensure security best practices and principles are embedded in their workflows.</li><li>
Conduct security assessments and risk analysis to identify vulnerabilities and propose mitigation strategies within the Zero Trust framework.</li><li>
Design and implement Zero Trust principles and frameworks to enhance the security posture of our systems and networks.</li><li>
Design and maintain robust CI/CD pipelines with integrated security checks to &quot;shift security left,&quot; ensuring vulnerabilities are identified early in the development process.</li><li>
Collaborate with cross-functional teams to define access policies, user authentication mechanisms, and secure connectivity across various environments.</li><li>
Design and collaborate with cross-functional teams to deploy secure SSO solutions with identity providers (IdPs), directory services, and third-party applications for seamless and centralized authentication and authorization across multiple applications and systems.</li><li>
Collaborate with stakeholders to understand business requirements and translate them into effective security controls and solutions.
</li><li>Make recommendations to reduce risks.</li><li>
Supports administration of the enterprise security infrastructure including, but not limited to, the systems supporting: network security monitoring, two-factor authentication, web application firewalls, vulnerability management, endpoint detection and response, data loss prevention, and enterprise logging.
</li><li>Supports incident response processes.</li><li>
Compiles metrics for leadership.
</li><li>Assists in installing, implementing, and maintaining security software.</li><li>
Maintains the availability, patching, and operational functionality of assigned security systems.</li><li>
Evaluates new security tools, products, and solutions for applicability to security needs.</li><li>
Makes recommendations regarding purchase of security products.</li><li>
Ensures MDT&rsquo;s reputation is maintained internally and externally.</li><li>
Ensures appropriate levels of security and confidentiality are always maintained.</li><li>
Acts as a representative of MDT with business and professional organizations and external IT contacts.</li><li>
Keeps management informed of area activities and any significant concerns.</li><li>
Attends and participates in meetings as required.</li><li>
Completes accurate tickets, reports, records, and other documentation as necessary.</li><li>
Stay up to date with industry trends, emerging technologies, and security best practices to proactively identify potential threats and vulnerabilities.</li><li>
Responsible for working with the security team and other departments to ensure work is flowing effectively and timely throughout the organization.</li><li>
Assists in setting department and company standard practices and procedures.</li><li>
Responsible for working with company vendors to ensure the delivery of products or services is successful.</li><li>
Acts as a subject matter expert for co-workers and fosters a culture of continuous learning and cross-training.</li><li>
Assigned to the on-call rotation to support security operations.</li><li>
Stays informed of trends and changes in the information security field.</li><li>
Completes special projects and research studies as required.
</li><li>Keeps work area clean, secure, and well maintained</li></ul>
EDUCATION &amp; EXPERIENCE REQUIREMENTS
<ul><li>Bachelor&rsquo;s degree in Computer Science or a related field, or an equivalent combination of training and experience in Computer Science.</li><li>
Professional certifications such as CISSP, CISM, CCSK, or CCSP are highly desirable.</li><li>
Ten years of experience as a Security Architect or similar role, with a focus on cloud security and Zero Trust architecture.</li></ul>
REQUIRED KNOWLEDGE<ul><li>
Strong knowledge of cloud platforms (e.g., AWS, Azure, Google Cloud) and associated security controls.</li><li>
Experience designing and implementing Zero Trust architectures, including network segmentation, secure access controls, and strong authentication mechanisms.</li><li>
Experience with designing and implementing Secure Access Service Edge (SASE) and Software-Defined Wide Area Network (SD-WAN).</li><li>
Experience with the design and integration of security into the SDLC by implementing secure coding standards, automated security testing (SAST, DAST), and vulnerability scanning.</li><li>
In-depth understanding of SSO protocols and standards (e.g., SAML, OAuth, OpenID Connect) and their implementation.</li><li>
Technical understanding of threat actor attack techniques.</li><li>
Familiarity with security frameworks and standards (e.g., NIST Cybersecurity Framework, ISO 27001, CIS Controls).</li><li>
Excellent analytical and problem-solving skills, with the ability to assess complex security requirements and recommend appropriate solutions.</li><li>
Effective communication and interpersonal skills to collaborate with cross-functional teams and communicate security concepts to non-technical stakeholders.</li><li>
Self-motivated and ability to meet deadlines with minimal supervision.</li><li>
Well organized and attentive to detail.</li><li>
Strong leadership abilities.</li><li>
Project management skills.</li><li>
Ability to maintain confidentiality.</li></ul>
WORKING CONDITIONS
Special<ul><li>
No hazardous or significantly unpleasant conditions (such as in a typical office).</li><li>
Additional hours, including on-call with Saturday/Sunday support, as required.</li><li>
Long duration of computer workstation usage.</li></ul>
INTENT AND FUNCTION OF JOB DESCRIPTIONS
Job descriptions assist organizations in ensuring that the hiring process is fairly administered and that qualified employees are selected. They are also essential to an effective appraisal system and related promotion, transfer, layoff, and termination decisions. Well-constructed job descriptions are an integral part of any effective compensation system.
All descriptions have been reviewed to ensure that only essential functions and basic duties have been included. Peripheral tasks, only incidentally related to each position, have been excluded. Requirements, skills, and abilities included have been determined to be the minimal standards required to successfully perform the positions. In no instance, however, should the duties, responsibilities, and requirements delineated be interpreted as all inclusive. Additional functions and requirements may be assigned by supervisors as deemed appropriate.
In accordance with the Americans with Disabilities Act, it is possible that requirements may be modified to reasonably accommodate disabled individuals. However, no accommodations will be made which may pose serious health or safety risks to the employee or others or which impose undue hardships on the organization.</div>

<div>COMPENSATION
$90,000 - $110,000 (Based on Professional Experience)
POSITION LOCATION
This position is eligible for a hybrid work arrangement. Currently 5 days of on-site work per month are required.
POSITION PURPOSE
<div>The Manager, Service Support &amp; Operations leads MDT&rsquo;s Service Support Center (Tier I) and Service Operations teams, providing day-to-day leadership and operational oversight across core IT Service Management (ITSM) disciplines. This role oversees 24&times;7 client coverage (internal and external), ensuring timely response, resolution, and communication for incidents and requests, while proactively monitoring services and driving continuous improvement through metrics and governance. The manager is accountable for Incident, Problem, Request, Knowledge, Service Level, Release &amp; Deployment, and Monitoring/Observability IT Service management practices, and coordinates infrastructure patching and release activities with MDT and client stakeholders. This position is the operational engine behind MDT&rsquo;s strategic drivers, stabilizing operations, improving customer experience, and elevating service reliability and quality.
</div>DUTIES &amp; RESPONSIBILITIES
<ul><li>Structure and lead day-to-day operations for two functions at MDT: Service Support Center (Tier I) and Service Operations (24x7 Operations Support).</li><li>
Develop hiring plans, coach staff, conduct 1 on 1s with staff</li><li>
Plan and coordinate 24x7 coverage to support operational schedules, on-call rotations, and patching coordination with the release calendar.</li><li>
Manage team capacity, workload to meet SLA times and MDT Service Level Objectives.
</li><li>Build a service-centric culture focusing on humanizing IT experience and support.
</li><li>Develop and support a Major Incident Response plan to designate Major Incident Managers, to coordinate collaborative calls, and coordinate incident response.
</li><li>Enforce triage and escalation playbooks to resolve incidents quickly and restore service.
</li><li>Maintain on-call readiness and after-hours leadership coverage for escalation paths.
</li><li>Run postmortem calls, and lessons learned conversations to document outage root cause.
</li><li>Identify and track post-incident solutions and track corrective actions and remedies to avoid repeat issues in the enterprise.
</li><li>Identify focus areas to reduce incident frequency and work with Tier II stakeholders to eliminate issues and identify operational changes to increase system availability.
</li><li>Conduct monthly incident review calls to identify root cause issues, seek problem management strategies to identify outage causes and reduce MTTR/MTTA for incidents. =</li><li>
Define SLAs for team adherence to meeting service objectives for MDT.
</li><li>Update IT Service Management operational policies, and workflows to keep processes current and auditable.
</li><li>Practice and preach good knowledge Management hygiene practices to keep Knowledgebase up to date and relevant for internal use.</li><li>
Ensure proper ticket categorization, SLA levels, proper use of notes (internal and external notes) in Zendesk to ensure proper routing and communication.
</li><li>Implement and operate a Knowledge-Center Service/Support program to create, maintain, and reuse knowledge in the Service desk.
</li><li>Run continuous improvement discussions (Operational Plan Review, Trend Analysis, Problem/Incident Management Post-Mortems) to develop team responses and keep information current.
</li><li>Work with technical/analytics teams to create dashboards and tune monitoring alerts to track meaningful, and actionable responses.
</li><li>Orchestrate incident/major incident triage, escalation, and ensure proper parties are involved to resolve issues where possible.
</li><li>Explore automated remediation for common/known issues where possible.
</li><li>Maintain runbooks/operations plans for responses to service level indicators and assist technical teams in tuning out alert noise/false positive alerts.
</li><li>Own/Accountable for the change/release calendar at MDT including infrastructure maintenance windows, and holiday freeze windows.
</li><li>Conduct patch/release compliance reviews, including ensuring that technical teams are patching OS systems appropriately.
</li><li>Measure change success rate, and unplanned impact from change/maintenance windows.
</li><li>Publish customer-facing maintenance updates and internal coordination updates.
</li><li>Create and manage reports on Mean Time To Acknowledgement(MTTA), Mean Time To Repair (MTTR), SLA Attainment, CSAT, ticket hygiene, and alert notifications.
</li><li>Produce monthly Executive Summaries with trends and actions relating to Incident, Problem, and KPIs associated with tracking Service Level Objectives.
</li><li>Track financial impact of ticket cost, utilization, and efficiency for staffing workloads.
</li><li>Align Service Operations and Support Objectives to MDT&rsquo;s key drivers.
</li><li>Partner with Enterprise Architecture, Infrastructure &amp; Engineering, Client Solutions, Platform Solutions, Security, and Compliance to meet expectations of Service Objectives and operations.
</li><li>Manage SLAs and Escalations, e.g. paging, monitoring, communication, for vendors and internal teams.
</li><li>Provide insight to Director of Service Operations to develop a roadmap for tooling and growth in Service Operations and Support.
</li><li>Standardize communications for incidents, requests, problems, and maintenance.
</li><li>Focuses on continually staying informed of industry changes, and trends in ITSM.
</li><li>Ensure that all area activities are conducted safely.</li><li>
Oversees special projects as requested.</li><li>
Ensures that all office areas are clean, secure, and well maintained.</li><li>
Promotes goodwill and conveys a positive image of the company.</li></ul>
EDUCATION &amp; EXPERIENCE REQUIREMENTS
<ul><li>Bachelor&rsquo;s degree or equivalent combined experience in Information Systems, Computer Science, Engineering, or related field.</li><li>
ITIL 4 Foundation or similar certification/experience required. Advanced ITIL Certifications preferred.</li><li>
Three or more (3+) years of experience in IT Service Management practices specifically Incident, Problem, Change, Request, Release &amp; Deployment, Knowledge (KCS), Service Level, and Service Catalogue Management.</li><li>
Three or more (3+) years of experience managing teams in a fast paced, service desk environment.
</li><li>Two or more years of experience supporting 24x7 monitoring and response teams.</li><li>
Experience with Incident response, particularly Major Incident Management Response and Problem Management.
</li><li>Experience managing release lifecycles, and publishing with change management lifecycle and release management.
</li><li>Experience working with community Financial Institutions or FinTech support community financial institutions preferred.
</li><li>Experience with tooling Service Management tooling specifically for ITSM (Zendesk), Paging (iPlum/Incident.IO/XMatters), monitoring/observability (Splunk/SolarWinds/Datadog), and communications (MS Teams, StatusPage) preferred.</li></ul>
REQUIRED KNOWLEDGE<ul><li>
IT Service Management experience including Asset, Configuration (CMDB), Incident, Request, Problem, Service Level, Service Catalogue, Change, Release and Deployment, Knowledge Management activities.</li><li>
Service Desk &amp; 24x7 operations workflows: system performance monitoring, alert tuning, runbook creation/maintenance, on-call coordination, MTTR/Availability, incident management response.</li><li>
Continuous Improvement practices and automation (ITIL, Agile, or Lean Sigma Six practices)
</li></ul>WORKING CONDITIONS
Special<ul><li>
Occasional overnight travel for training, conferences, and to client sites required.</li><li>
On-call responsibilities, available 24/7 via phone or pager.</li><li>
No hazardous or significantly unpleasant conditions (such as in a typical office).</li><li>
Additional hours, including Saturday/Sunday support, as required.</li><li>
Long duration of computer workstation usage.</li></ul>
INTENT AND FUNCTION OF JOB DESCRIPTIONS
Job descriptions assist organizations in ensuring that the hiring process is fairly administered and that qualified employees are selected. They are also essential to an effective appraisal system and related promotion, transfer, layoff, and termination decisions. Well-constructed job descriptions are an integral part of any effective compensation system.
All descriptions have been reviewed to ensure that only essential functions and basic duties have been included. Peripheral tasks, only incidentally related to each position, have been excluded. Requirements, skills, and abilities included have been determined to be the minimal standards required to successfully perform the positions. In no instance, however, should the duties, responsibilities, and requirements delineated be interpreted as all inclusive. Additional functions and requirements may be assigned by supervisors as deemed appropriate.
In accordance with the Americans with Disabilities Act, it is possible that requirements may be modified to reasonably accommodate disabled individuals. However, no accommodations will be made which may pose serious health or safety risks to the employee or others or which impose undue hardships on the organization.</div>

Manager, Service Support & Operations

Join Member Driven Technologies and explore 3   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Member Driven Technologies

ABOUT_COMPANY

Security Architect

Security Architect

Manager, Service Support & Operations