Security/Unix Engineer

On behalf of our client, a large global financial organisation, we're looking for a Unix security engineer to participate in a large infrastructure compliance validation project in Zurich. The contract will initially last until end of 2016.

RESPONSIBLITIES

- Engineering and deployment of Unix Operating Systems
- Administration of databases, Middleware and security packages
- Scripting
- Responsible for building and deploying security agent packages mainly on UNIX systems
- Ensures standardization according to the Software Development Life Cycle (SDLC)
- Within specified architecture, define platform requirement sizing, network and controlling components and system software. Define necessary technical and human resources. Investigate possible alternative scenarios and verify feasibility.
- Level 3 Support (Escalation point for Level 2 Support Organisation (GPS) in case of incidents Act as a partner for Business Analysts regarding requirements specification
- Maintain documentation relevant to operations (operation manual, installation guide, etc.

REQUIREMENTS

- Extensive knowledge with Unix operating system
- Experience in Operating system/Middleware hardening and security audits
- Ability to implement audit checks based on Center for Internet Security benchmarks
- Ability to set up a working lab environment required for testing of checks/standards
- Good understanding of:
- configuration parameters in Apache, Tomcat and importantly WebSphere a must have. Others such as IIS a plus
- administrative security settings in AIX, Solaris, RHEL a must have. Others such as Windows and ESXi a plus
- common infrastructure, including Active Directory, GPO and Kerberos
- user database roles, permissions-model, security settings in Oracle/Sybase/MS-SQL
- Familiarity with technologies and tools such as SELinux, netstat, grep, process table etc.

If you are interested in this position or would like to find out about alternative System Engineering positions in Zürich, please send your CV to (see below) Alternatively, feel free to contact me.