IT Architect/Engineer III - Raleigh, United States - InsideHigherEd

Description

PG193353EP

No

IT Architect/Engineer III

Commensurate based on experience

Monday - Friday, 8:00 am - 5:00 pm

Raleigh, NC

Friday Institute

The mission of the Friday Institute is to advance education through innovation in teaching, learning, and leadership. Bringing together educational professionals, researchers, policy-makers, and other community members, the Friday Institute is a center for fostering collaborations to improve education.

We conduct research, develop educational resources, provide professional development programs, advocate to improve teaching and learning, and help inform policy making. We also support educational institutions and government agencies with thought leadership around some of the most pressing technology infrastructure issues of the day, including cybersecurity, equitable broadband access and educational technology.

This position will lead the development of new services and software tools to aid educational institutions in their efforts to become more secure and comply with various state and federal regulations. This role will lead engineers, and actively participate in the development of proof of concepts and prototypes of software tools which can be used by schools (and more broadly, any state agency) to identify or mitigate cybersecurity risks.

Support the Infrastructure Lab for all matters of cybersecurity, specifically those related to preventing malware/ransomware, identity and access management, security processes, forensics, product risk analysis, student data privacy, employee data privacy, enterprise application architecture and network security.

Virtually all work will be related to improving the cybersecurity posture at K-12 schools and institutes of higher education in North Carolina. If new grants are awarded to the team, the scope may include other government agencies beyond education, i.e. Health and Human Services, Public Safety, Transportation or Information Technology.

This position will be the leader in maintaining awareness of emerging threats, identifying new security technologies as they become available and interfacing with various vendors used by the educational institutions we support. Various graduate and undergraduate students may be assigned to support this mission. Work is in person, not remote, with limited travel to partner institutions within the state of North Carolina.

Other duties include:

• Lead in needs analysis and development of procurement vehicles for our supported institutions.
• Develop and provide emerging cybersecurity threat intelligence presentations and help educational institutions implement industry best practices to mitigate threats.
• Lead the development of novel tools and processes which may result in commercialization opportunities for the university.
• Identify and cultivate relationships with industry partners, in particular those partners which can help protect our customer agencies, or are in need of research and analysis of their products when used in an educational environment.
• Inspect and review existing production code and make recommendations to improve resiliency, performance and scalability.

• Analyze proposed security regulations and participate in state and federal rulemaking and policy making processes which may impact our customer agencies.
• Adhere to applicable regulations such as FERPA, CIPA, COPPA and SOPPA.
• Provide analysis, reverse-engineering and pen testing of applications that are, or may be, used by customer agencies or industry partners.
• Serve as forensic experts to recover information from cloud services, computers and data storage devices.
• Support the development of enterprise-wide information risk management programs.
• Aid in the development of proposals for federal grants and industry partnerships.
• Support the strategic and tactical development and implementation of IT risk management, business continuity planning and disaster recovery plans.
• Use large language models and machine learning techniques to amplify the efforts already being implemented in K-12 schools for cybersecurity.

• Requires a bachelor's degree in Computer Engineering with at least three years' of relevant experience or an equivalent professional training and experience. Applicants holding a DEFCON black badge, or Offensive Security Certified Professional (OSCP) certification will be considered regardless of educational background.

• This position will have a supervisory role.
• Graduate and undergraduate students will be available as needed for this position.
• Occasional consultation with FI IT operations and NCSU OIT may be warranted to ensure our own practices meet the highest standards in cybersecurity.

• At least 10 years of experience in the IT Networking and/or IT Security sector.
• Leadership of a small team of highly skilled developers
• System architecture of complex enterprise systems which are shared across multiple institutions, each with different operating procedures.
• Ability to work in a consultative fashion with supported institutions and draw parallels that can lead to economies of scale with other state agencies and institutions.
• Detailed knowledge of Kali Linux, AWS, Google apps, and Windows AD.
• Competency in Python or other language used for data analysis, as well as complex models in Google Sheets/Excel.
• Competency in C and familiarity with modern day assembly languages required for forensic analysis and reversing.
• Competency with Ruby and metasploit framework.
• Competency with Wireshark, nmap and other network enumeration and discovery tools.
• Ability to communicate with others that are not skilled in the art.
• Knowledge of the current state-of-the-art with respect to cloud architectures, technologies and networking paradigms.
• Firm grasp of key security standards and practices and demonstrated use of defense-in-depth and security layering.
• Competency with cryptography, key management and crypto algorithms used for data privacy, integrity and authentication. Firm grasp of certificates and related topics, especially in the context of network access, mobile device management, and code signing..
• Experience developing or responding to RFI/RFPs for state or federal agencies.
• Ideal candidates will hold either SANS Penetration Tester/Web Application Penetration, Offensive Security Certified Professional (OSCP), or have demonstrable skills in CTF competitions or speaking at national infosec conferences.

N/A

Yes

No

04/19/2024

Open Until Filled

Please include as attachments a resume, cover letter, and contact information for 3 professional references.

EHRA Non-Faculty

1.00

12 Month Recurring

Non Mandatory - Adverse Weather

Non Mandatory - Emergency Event

Friday Institute

NC State University is an equal opportunity and affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, gender identity, age, sexual orientation, genetic information, status as an individual with a disability, or status as a protected veteran. Individuals with disabilities requiring disability-related accommodations in the application and interview process are welcome to contact to speak with a representative at the Office of Institutional Equity and Diversity.

If you have general questions about the application process, you may contact Human Resources at or .

Final candidates are subject to criminal & sex offender background checks. Some vacancies also require credit or motor vehicle checks. Degree(s) must be obtained prior to start date in order to meet qualifications and receive credit.

NC State University participates in E-Verify. Federal law requires all employers to verify the identity and employment eligibility of all persons hired to work in the United States.