IT Security Principal

Job Summary:

KBR is seeking a highly skilled IT Security Principal to join our team. As a key member of our Directory and Cloud Services and Enterprise Security Operations teams, you will be responsible for the performance and results of a related discipline or sub-group within a function.

Key Responsibilities:

• Manage Active Directory, including Group Policy, OU Structures, Sites and Services, Trusts, and DNS.
• Use general networking knowledge to troubleshoot connectivity issues, including firewall policies, and have familiarity with network tracing tools like Wireshark.
• Provide support for the internal PKI infrastructure, certificate issuance, template, as well as assist with the public certificate authority and application teams certificate requirements.
• Support audit and compliance requirements in the UK and other countries, including Cyber Essentials/Cyber Essentials Plus and ISO27001.
• Work with the other IT teams to manage KBR's cloud computing environments, including Microsoft Azure/Office 365, Amazon Web Services, Google Cloud Platform, and more.
• Provide operational support for cloud directories such as Azure AD.
• Design and implement security policies such as Conditional Access and others to secure the cloud environments.
• Join the endpoint management teams to deploy policies with Microsoft Intune for PCs, mobile devices, and other endpoints.
• Leverage scripting tools, such as PowerShell, to help manage the on-premises and cloud directories.
• Assist with KBR's Zero Trust remote access security initiatives.
• Support Internet access management through on-premises proxy servers and cloud proxy/URL filtering solutions.
• Work collaboratively with key stakeholders across the company organization, including external auditors, process owners, functional management, and business stakeholders.
• Develop an understanding of organisations, processes, goals and strategies.
• Identify opportunities to improve existing process and controls, recommend constructive corrective actions to address control deficiencies identified through compliance audits to strengthen cybersecurity posture and improve processes.

Requirements:

• Completion of an undergraduate degree in Electronic Engineering, Computer Science or Management Information Systems.
• A relevant number of years' experience in architecting, implementing and maintaining Microsoft infrastructure and security technologies, with experience focused on Directory Services or IT Security Network experience.

Skills & Competencies:

• Excellent verbal and written communication skills with ability to communicate confidentially with all levels of IT management.
• Excellent analytical, problem-solving, and decision-making skills to mitigate risks and resolve control deficiencies.
• Effective time management skills with ability to manage multiple responsibilities and projects simultaneously with varying degree of complexities and timelines.
• Demonstrates genuine desire in continuous learning and process improvement.

Technical/Functional Expertise:

Demonstrating broad, in-depth, and up-to-date advance working knowledge in the areas of architecting installing, configuring, administering, managing, and troubleshooting Microsoft core platform technologies to include all security components associated with Active Directory and Microsoft cloud security and infrastructure services. Experienced in troubleshooting perimeter and endpoint system security technologies.

Teamwork: Building cooperation among individuals and departments, sharing information and resources, and working to achieve group goals and outcomes.

Communication: Listening effectively, transmitting information accurately and understandably, and actively seeking feedback. Be able to communicate status, issues, and impacts, with team, team leadership, relevant client sponsors and process owners.

Flexibility: Performing a wide range of tasks, responding to changes in direction and priorities, and accepting new challenges, responsibilities, and assignments.

Ownership/Accountability: Taking the lead in getting the job done and accepting responsibility for personal actions, costs and results.

Analytical Skills: Recognizing patterns in data, information, or events, drawing logical conclusions, and making recommendations for action.

Attention to Detail: Adherence to standards and actively checking for accuracy of data received or generated before passing it on.

Problem Solving/Decision Making: Taking a well-ordered approach to solving problems and acting despite obstacles or resistance.

Professionalism: Dealing directly and forthrightly with people and problems, persisting to get the job done, and managing personal responses and stress.

Quality Advocate: Championing the quality process by reinforcing the organization's vision, quality values, and quality processes and by fostering the continuous improvement of all operational and business practices.

Dependability/Reliability: Following through on commitments, producing timely work to required-- or higher-- standards, and pitching in to get the job done.

Workload efficiency: Must have the ability to work well under time constraints and handle multiple tasks.

Certifications:

Require at least one or more of the following – Network Security Certified Professional (NSCP), Certified Information Systems Security Professional (CISSP), Cisco Certifications (CCNA, CCNP, CCSP, CCIE), MCSE, MCP, MCTS, Security+, MCITP.