Database Engineer (Security) - Software Infrastructure, IS Core

About the position

Our Software Infrastructure team is responsible for the shared technologies our company uses to deliver internal and external systems. We are also the custodians of database standards for the organization and provide IS Portfolio teams with guidance, assistance, and standardized practices. We are looking for a Database Security Engineer to help us mature our security posture. With your expertise we will implement a market leading Database Security and Activity Monitoring solution and administer the solution in the long term. You will also have a key role in developing database security standards and will assist with compliance related efforts. As a Database Security Engineer, you need to be constantly on the lookout for opportunities to improve our infrastructure security in ways that support development team autonomy. You take pride in your excellent customer service. You work well in a team environment and know how to bring out the best in your colleagues. You will contribute by implementing continuous improvement initiatives.

Responsibilities

• Align database standards with the Company's IT general controls
• Initial setup and configuration of Database Activity Monitoring solution
• Ongoing administration and maintenance of the solution
• Help set and drive security and governance policies and assist other teams with implementation
• Participate in regular audit and control activities
• Recommend and implement evolving security standards to database systems

Requirements

• Experience with relational database management systems (DB2, PostgreSQL) and understanding of their core concepts
• Mid- to Senior level DBA with a strong focus on security and auditability
• Scripting experience with sh, ksh, bash, awk, sed, Python, and/or Perl
• Fluency operating in Unix and Microsoft Windows environments
• Configuring and managing centralized authentication for database systems
• Managing and monitoring role-based access control in large and complex application environments
• Experience working with modern TLS and other encryption standards and their applicability to databases
• Experience working with cybersecurity practitioners in other domains to collaboratively manage risks

Nice-to-haves

• In-depth knowledge of DB2 and PostgreSQL Server relational database management systems and concepts
• Prior working experience configuring and administering a Database Activity Monitoring tooling (IBM Guardium, Imperva Data Security, Veritas Data Protection or similar)
• Database logging configuration and log aggregation capabilities for performance management, access review, and overall troubleshooting and system health
• Use of git in a team environment for continuous integration
• Familiarity with industry compliance frameworks (SOX or comparable governance framework)
• Experience administering databases in Azure (PaaS and IaaS)
• Bachelor's Degree or equivalent working experience or industry certifications

Benefits

• Paid vacation
• Holidays (10)
• Flexible Days (2)
• Paid Sick Time (accrual rate of 1 hour of sick time per 30 hours paid)
• 401(k) Retirement Savings Plan with employer match
• Employee Stock Purchase Plan (ESPP)
• Medical, Prescription Drug, Dental & Vision Coverage
• Health Savings Account (HSA)
• Life and Disability Insurance
• Paid Parental Leave (additional eligibility criteria)
• Dependent Care Flexible Spending Account (DC FSA)
• Commuter Benefit
• Employee Assistance Program (EAP)
• Training and Personnel Development Program
• Educational Assistance and Reimbursement