Job Description:

SCOPE OF THE PROJECT:
Due to the sudden increase of staff hired to support the agency response to COVID-19 and devices issued, additional staff is needed to ensure security associated with agency devices and data. This position will support the DHEC security operations center (SOC) will work alongside SOC subject matter experts in the management of agency-owned mobile device technologies, including Apple iPhones and iPads. This individual will act as an escalation point for mobile device support and assist with deployment, management, and implementation of devices. The analyst must have knowledge of mobile device hardware and software and must possess attention to detail for problem resolution. Using experience with MaaS360 or similar MDM tool, the analyst will own and operate the agency-owned deployed MDM solution.

Candidates should be self-motivated, team-oriented, work under limited supervision, and respond to priority tasks as needed.

DAILY DUTIES / RESPONSIBILITIES:
The Security Analyst will be responsible for administration and supporting the agency MDM Solution.
Specific duties and responsibilities will include but are not limited to the following:
• Administration and configuration of the agency IM365 Intune MDM solutions
• Assist with migration off of IBM MaaS360 MDM solution for remaining devices
• Manage users and ensure user data is accurately captured in the MDM.
• Create, configure, maintain, and monitor security policies within the MDM.
• Assess MDM capabilities and provide recommendations on optimization and usage
• Respond to MDM alerts
• Respond to customer MDM issues submitted in BMC Footprints ticketing system
• Produce MDM-related reports and respond to anomalous data
• Create, update, and maintain users and device owners in the MDM
• Mentor other IT staff on how to utilize the MDM solution.
• Create supporting project and system documentation.
• Provide updates to the Project Team.
• Work in a collaborative effort to conceptualize total systems and/or product solutions currently in place.
• Ability to plan, organize, review, implement associated project milestones to completion.
• Creates architecture diagrams, and technology navigation maps.
• Assist with development of policies and procedures to conform and comply with agency standard cyber security policy design related to information risk management, designation of data as to criticality, confidentiality, and protection. (NIST 800-53, FISMA, SC InfoSec Requirements http://admin.sc.gov/technology/information-security/policies-and-procedures, etc.)
The position will be utilized for 40 hours per week for the duration of this project. The selected candidate should be able to work flexible hours where it may be necessary for work to be completed outside traditional business hours.
The candidate will work closely with other analysts from the security team and may work with end users to provide device troubleshooting and support.

Module support of the project.
• DHEC will require that selected personnel sign the DHEC confidentially agreement and/or Business Associate (BA) agreement if applicable. All web services must be secure.
• DHEC will not accept any offers including an "up-lift” charge. The rate paid per consultant must not exceed the maximum rate established for this position described in the State contract terms.
• Contractors must be onsite during each week throughout the term of the contract.
• Follow agency IT Standards, policies, and procedures to include documentation.
• All source code (compiled and un-compiled) will become the sole property of the South Carolina Department of Health and Environmental Control. Any source code, data, product, or functionality resulting from this SOW or previously owned/developed by DHEC will remain the sole property of DHEC and is not to be incorporated into the core product of any vendor's application. Any modifications and interfaces developed under said contract will be not be used by the contractor for any independent project of the contractor or published or publicized by the contractor without written permission of DHEC.
• DHEC has the final say on all programming choices.

Payment Schedule:
All timesheets shall be entered and approved in a timely manner per State contract terms. The State will not pay any extra costs (i.e. Travel, employee benefits, insurance, room and board, etc.) for temporary employees under this contract.

DHEC Support:
DHEC will provide:
• All required information including formulas, data, and mechanisms to check output.
• Staff to assist with any application or data questions.
• Conference rooms and scheduling for any application demos.
• Workstation and required software.

REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):
1. MDM (Mobile Device Management) Administration
2. Wireless/Mobile
3. Experience with security and data classification related to CDC, HIPAA, and CJIS
4. Apple support
5. Microsoft Active Directory
6. Change Management/Configuration Management
7. Windows Security - Group Policy.
8. Experience in project involving PCI/NIST security implementations and/or audits.
9. Ticketing system

PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):
1. M365 Intune MDM
2. IBM MaaS360 Administration
3. Ability to establish positive working relationships with technical staff, customers and others involved in data-centric management.
4. Excellent written, oral, and interpersonal communication skills
5. Knowledge of Information Technology Field, best practices, organization, and operations
6. Experience with SolarWinds
7. Ability to integrate technical systems with agency goals and objectives.
8. ITIL
9. Security Certification (CISSP,CRISC, CEH)

REQUIRED EDUCATION: Bachelor's or Master's Degree in a relevant field of work or equivalent work experience.

Zencon Group jobs

CL - Security Analyst - Consultant Security Analyst - Consultant