Description
Engineering support both on client side, Server Side and in Middleware implementation efforts to make progress toward PCI compliance by implementing provided recommendation.
The primary responsibility of this position is to provide PCI compliance, administration support and perform system management tasks in an Enterprise environment. The engineers will be working on various teams implementing specific technical solutions recommended to move the organization closer to PCI compliance. Their work and progress will be reviewed by third party during a PCI audit.
Candidates need to demonstrate expert level skills with all aspects of a Windows Server environment. Candidates should also know intermediate Linux skills. Candidates should have experience at the Enterprise level with Active Directory and work well in project and process driven and regulated environments.
Ideal candidates also have experience with network infrastructures with the ability to navigate through an IOS and update Routers and Switches.
The engineer will also be asked to review data retention processes. Please note: Due to timelines and anticipated workloads, candidates should expect work weeks to exceed 40 hours during initial phases.
Responsibilities:
Setup and on-going maintenance of automation scripts for Windows Systems as related to PCI recommendations..
Setup and Administer Active Directory GPO (Group Policy)
Conduct routine hardware and software audits of Servers to ensure compliance with established standards, policies, and configuration guidelines.
Review, suggest, and implement data retention policies.
Develop and maintain operating system hardware and software configuration database/library of in scope Servers
Develop and promote standard operating procedures.
Provides support and consultation to remote locations or clients in order to identify requirements and configuration resources.
Implement operating system enhancements that are required by PCI recommendations. Including Scripting changes as required.
Support deployment of script for implementation in accordance with client standards, including test phase.
Maintain ITIL processes as required.
Maintain Servers, create monitoring reports and logs, and ensures functionality of links. Including log retention via central solution for PCI requirements, if implemented. Script retention process if no solution in place.
Schedule hardware and software installations/patching and upgrades and maintains them in accordance with established IT policies and procedures.
Troubleshoot problems, responds to escalation and performs repairs as needed. Works on system-level services to ensure proper patch levels on applications and operating systems.
Ensures that the user community understands and adheres to necessary procedures to maintain security, compliance and access management as per standards and policies
Work with the architecture teams to develop strategy, evaluate new options and toolsets for meeting PCI recommendations.
Required:
MCP, MCSE, MCTS, or MCITP
BS in Technical Discipline (eg Computer Science, preferred)
Qualified candidates must possess the following skills/experience:
5+ years as a Windows administrator and/or related Server Side services (eg Linux Admin, SQL DBA with Server Admin, etc.)
Strong understanding of PCI compliance.
Expertise in general Windows systems administration, web Servers, load balancers, Veritas Cluster Server (VCS), storage (EMC, NetApp), network and host security, and relevant protocols (SMTP, HTTP, SSL, DNS, NFS).
Experience in installation and monitoring of Application Servers (eg Weblogic, Tomcat, and Apache)
Experience with TCP/IP Networking fundamentals.
Intermediate Linux 2+ years
Experience with working with auditors, answering questions and representing implemented or in flight solutions accurately as they relate to compliance questions, including remediation
Mid to senior level programming/Scripting
Outstanding troubleshooting ability.
PCI and Security Compliance
Consulting/projects experience
Timeliness
Organization and attention to detail
Outstanding Communication Skills, both to work with end user, other technical team, security team and auditors