Innovations technological

Hi,

Kindly find below mention JD.

Title : Security Engineer

Location : Salinas |  CA

Duration : 3+ Months

This person needs to be Windows focused with a strong security background. They will need scripting capabilities, strong AD background and strong in developing process and procedure.

 At a high level here are some of the things they will be working on for us

 Feb – Inventory

                Help us to asset inventory of servers, Vmhosts, SQL DB inventory, "Service Accounts" inventory, Website/URL inventory where using SSL/Certificates, Certificate Inventory

                Put together SOP process/procedures for maintaining inventory going forward (no tools will be purchased, will use in-house tools)

                Put together build process documentation for servers so we can follow that in the future

 March – Accounts

                Develop process/automation to perform (and do the actual changes) changes to our shared accounts (service accounts, etc.), non-user based accounts, etc.

 Apr – TLS and Certificates

                Identify where we are running SSL/TLS in our servers and applications and what would be required to upgrade to TLS 1.2 version

                Where the upgrade to 1.2 is simple – execute on the upgrade

                Develop process and implement for management of Certificates (using our existing internal CA authority) and implement signed certs for internal web-sites/apps that are currently using self-signed certs.

 Notes from call

 Have a project where they need to get their operational procedures in place…strong in documentation getting inventory put together for maintaining that inventory in march it would deal with the shared or service accounts change passwords on a regular basis april is more on the certificates

 Manager internal certificates what they're used for and internal systems today

 Windows and security  

Not trying to lock down everything but wants to proceduralize  

Windows engineer identify where they are using service accounts get inventory out of the environments  

What are the ramifications of a user