Global IT Endpoint Senior Manager - SecOps

About the position

As a SecOps Engineer, you will be ensuring security, automation, and cost efficiency. You will leverage expertise in cloud architecture, automation, security, and operations to build resilient, cost-effective, and secure environments.

Responsibilities

• Monitor security alerts and respond to incidents using tools like Microsoft Defender, Sentinel, and Tanium.
• Implement and manage endpoint security solutions, including Intune and other endpoint protection tools.
• Configure and maintain network security devices such as firewalls, IDS/IPS, and Zscaler solutions.
• Manage identity and access controls using EntraID and Azure security services.
• Ensure compliance with federal regulations, standards, and manage security risks, including knowledge of CMMC 2.0 and NIST 800.171.
• Develop and maintain scripts to automate security tasks and improve operational efficiency.
• Manage and secure containerized applications using Azure Container Registry.
• Administer and secure systems running Red Hat Enterprise Linux, Debian, Ubuntu, Windows, and macOS environments.
• Oversee the management and deployment of security certificates.
• Utilize GitLab for version control and continuous integration/continuous deployment (CI/CD) processes.
• Create and maintain documentation for security policies, procedures, and incidents.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field is required.
• CISSP (Certified Information Systems Security Professional) is strongly preferred.
• U.S. Citizen and ability to obtain and maintain Secret clearance required.
• Proficiency with security tools and platforms such as Tanium, Microsoft Defender, Sentinel, Zscaler, Azure security, Intune, GitLab, Red Hat Enterprise Linux, Debian, Ubuntu, Terraform, Azure Container Registry, and Python.
• Strong cloud security and security operations expertise.
• Deep network engineering knowledge for secure, scalable cloud connectivity.
• Experience with IAM, RBAC, ABAC, and cloud security best practices.
• Multi-cloud expertise across multiple CSPs.
• Background in US Federal government cloud/network/systems engineering.
• Strong communication skills for collaborating across teams.
• Familiarity with federal compliance requirements and directives is essential.

Nice-to-haves

• DevSecOps experience in agile service/software delivery.
• Hands-on work with CI/CD pipelines (GitHub/GitLab).
• Expertise in US Federal compliance/security frameworks (FedRAMP, DoD STIGs).
• Ability to educate teams on security cloud operations best practices.

Benefits

• Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children.
• Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs.
• Dental coverage, including up to $5,000 in orthodontia benefits.
• Vision insurance with coverage for both glasses and contact lenses annually.
• Reimbursement for gym memberships and other fitness activities.
• Fully vested Profit Sharing Retirement Fund contributions made annually.
• Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement.
• Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year.
• Paid sick time on an as needed basis.