Security Engineer - SQL

Security Engineer - SQL

Responsibilities and Duties:

The candidate will be capable of performing the tasks &/or possess the skill sets listed below:

• Maintains database performance by calculating optimum values for database parameters; implementing new releases; completing maintenance requirements; evaluating computer operating systems when/where necessary.
• Manage SQL Server environments supporting Dev, Test, UAT, and Production GRC platform and application instances hosted in the HCAP Lab and CSO- managed infrastructure.
• Knowledge of information security policies aligns with responsibilities related to maintaining database security and compliance.
• Supports Application Administrators in designing, implementing, and testing database changes to support business applications.
• Assists Application Administrators code efficient SQL statements, review the SQL statements for performance and make recommendations for indexes.
• Candidate is knowledgeable and proficient in dealing with and troubleshooting SQL instances which take advantage of Windows Server Failover Cluster (WSFC) services and capabilities to support Always On availability groups and SQL Server Failover Cluster Instances.
• Design and plan upgrade strategies including coordination with system administrators and developer. Upgrade plans must include checklist, milestones, complete checkout, and exercised fallback procedures.
• Implement secure access controls, patch management, and vulnerability remediations in line with DISA STIGs and HHS infrastructure policies.
• Ensure Archer database configurations align with RSA support standards and meet high availability and disaster recovery (HA/DR) requirements.
• Collaborate with HCAP platform teams and OS-managed infrastructure teams to maintain alignment between Archer and shared services.
• Use tools like SQL Server Management Studio (SSMS), PowerShell, and ServiceNow to administer, monitor, and track all DBA activities.
• Design, implement, maintain, and utilize advanced Data query Language (DQL), Data Definition Language (DDL), Data Control Language (DCL), and/or Data Manipulation Language (DML) to automate tasks, enhance system functionalities, and troubleshoot issues. Must also be comfortable performing Administration and O&M tasks from the command line.
• Candidate will hold and maintain a current (or one Microsoft version release previous) Microsoft Database certifications such as Microsoft Certified: Azure Database Administrator Associate or Azure Database Administrator.
• Maintain detailed documentation for system designs, configurations, processes, and service records.
• Collaborate with cross-functional teams to support IT infrastructure projects, providing expert guidance and technical leadership.
• Lead and mentor junior team members in best practices and technical challenges.
• Organized, detail-oriented, and excellent problem-solving skills with the ability to work independently or as part of a team.
• Capability to troubleshoot and resolve LAN/WAN connections, performance/throughput issues, and other related network problems.
• Strong communication and documentation skills, with the ability to explain complex technical concepts to non-technical stakeholders.
• Analyzes development and implementation requirements and makes appropriate modifications to existing systems and prepares specifications based on customer requests.

Skills/Experience/Certifications:

• Candidate will hold a ComSci/CIS/InfoSec/IT related bachelor’s degree (or higher) with ~8+ years of Information Security work experience or an equivalent combination of education, certifications, & IT experience.
• Demonstrated knowledge and proficiency with over 5 years Administration, Operations and Maintenance (O&M), and Troubleshooting of Microsoft SQL (2016-2019) and various other databases such as DB2, Oracle, Mongo, MySQL in enterprise environments with more than two years supporting an enterprise GRC platform and application including RSA Archer.
• Strong knowledge and proficiency greater than 5 years) in database performance tuning, security, and management suggests a role focused primarily on daily or regularly scheduled administration, maintenance, storage, and optimization of the existing database systems.
• Knowledge and proficiency performing the following database administration tasks: Performance tuning (5+ years Preferred), Database administration (5+ years Preferred), and Data Maintenance (5+ years Preferred)
• Possess knowledge &/or familiarity with security hardening framework standards and regulations from Center for Internet Security (CIS) Control 4, National Institute of Standards and Technology (NIST) Special Publication 800-53 Revision 5, and Defense Information Systems Agency’s (DISA) Security Technical Implementation Guides (STIGs).
• Education: Bachelor’s degree in computer science, Information Systems, Cybersecurity, or related field (or equivalent combination of education and experience).
• Ability to participate in a 24/7/365 on call rotation.