Infrastructure Systems Engineer

Title: Infrastructure Systems Engineer Mandatory skills: Microsoft Windows File Servers, Network Shares,Active Directory, security model, data classification, tree design,Web applications, NTFS Permissions, privileged access,Windows servers, networking equipment, firewalls,Role based access controls, RBAC, Multifactor Authentication, MFA,system administraion, security, technical Infrastructure,file servers, file applications, file server architecture,Windows OS, Linux OS, switches, routers, firewalls,Enterprise Infrastructure Services, EIS Description: The client is seeking an experienced Infrastructure Systems Engineer to fill a role within our Enterprise Infrastructure Services (EIS) Team for two top-priority projects.Candidates shall have experience analyzing, designing, building, testing and deploying complex systems related to the following technologies:Enterprise Windows File Servers/Network Shares, Web-based applications, NTFS Permissions for least-privileged access and Role-based access controls (RBAC) using Active Directory groups to authorize access to file servers and applications.Multifactor Authentication (MFA) technologies applied to internal, elevated/administrative accounts (Windows servers, clients, networking equipment, firewalls, etc)The client intends to “start from scratch” with a brand new file server architecture, security model and associated policies, processes and procedures. Candidates shall have experience with setting up new file servers according to best practices that strike an acceptable balance between usability and security.The client has a role-based active directory groups security model in place today; however, a re- org was performed and now, this structure must be analyzed and corrected to reflect the current client dept .The client MFA system is already in place (used for remote access) and will likely be extended in its use to the functionality described above. Candidates shall have a strong understandingMFA systems and the ability to configure them for use with a range of login devices (Windows OS, Linux OS, switches, routers, firewalls, etc).THE POSITION DUTIES INCLUDE:Serve as technical Infrastructure SME/practitioner on an agency-wide projects to:Re-architect the client file server infrastructure using best practices for data classification, tree design and least-privileged access.Adjust/re-architect role-based Active Directory groups governing file server and application authorization to match current organizational structure and job functions.Develop change auditing and alerting mechanisms to detect unauthorized/incorrect permission conditions.Develop data-owner access attestation process.