IT Security Engineering Analyst

BMW - Greenville, SC

Full-time

Greenville, SC

Transportation Equipment Manufacturing

About the position

The IT Security Engineering Analyst is responsible for overseeing system analysis, design, development, and testing of assigned technical products or applications within an agile/DevOps delivery model. This role supports innovation and change from a technical perspective, advocates for new technologies, and integrates new projects into the existing technical landscape. The analyst evaluates vendor and service provider quality, creates technical documentation, advises on technical solutions, and mentors entry-level engineers. Additionally, they implement robust testing and automated deployment pipelines to ensure quality and agility in deployment, while resolving escalated support issues and planning upgrades for existing applications.

Responsibilities

• Oversee system analysis, design, development, and testing for assigned technical products or applications.
• Support change and innovation from a technical perspective and advocate for new technologies.
• Develop technology products and integrate new technology projects into the technical landscape.
• Evaluate vendor, service provider, and open-source code quality to ensure best-of-breed solutions.
• Create project/technical collateral for internal business partners and external service providers.
• Document solutions for business partners.
• Advise project managers, disciplinary managers, and product owners on technical solutions and business processes.
• Support the creation of detail-level technical requirements and analyze business requirements in collaboration with business analysts and product leads.
• Enable new applications and features that adhere to technical guidelines and business expectations in an Agile process.
• Mentor entry-level engineers and perform peer reviews for secure engineering and design-pattern implementation.
• Implement robust test cases to ensure technical solutions meet expected outcomes and business objectives.
• Create and maintain automated deployment pipelines to maintain quality control and deployment agility.
• Resolve escalated support topics as part of tier-3 DevOps role to ensure high availability of critical applications.
• Plan and execute upgrades of existing applications, tools, and features.
• Create solutions and solve problems using a cloud-native toolchain to ensure uptime and business agility.
• Plan work effort as part of Agile projects, supporting or leading ceremonies.
• Advocate for customer-centric systems that are well-designed with excellent customer experience and clear business requirements.
• Understand and model VPS principles and concepts of Standard Work and Problem Solving.

Requirements

• BA/BS degree in Business, Information Technology, Engineering or equivalent experience.
• 4 years of experience in the management of information technology application development, maintenance, and support.
• 3+ years of demonstrated success in IT.
• 2+ years in an entry-level engineering role.
• 1+ years specializing in IT Security Engineering.
• 1+ years working in Agile projects.
• 1+ years building systems based on AngularJS, Rest API technology, and other frameworks using Scrum Agile methodology and Continuous Delivery.
• 1+ years with Certificate Management/PKI technologies, operating and configuring an internal Certificate Authority, HSM, and certificate lifecycle management system.

Nice-to-haves

• Experience with S/MIME, SSL/TLS, and personal and device authentication certificates.
• Designing, implementing, and operating enterprise scale Identity and Access Management (IAM) systems based on ForgeRock IDM and ForgeRock DS products.
• Integrating and supporting IAM systems based on LDAP directories, Active Directory, OAuth, OIDC, SAML.