HBITS-08-14958-IT Specialist-Senior

About the Role

This position will assist in supporting critical NYS Department of Labor (NYSDOL) operational functions, including the development, support, and optimization of data-related functions within the new NYS Unemployment Insurance System (UISIM). The role focuses on IBM Guardium solutions for data activity monitoring, vulnerability assessment, and compliance reporting.

Responsibilities

• Design and architect IBM Guardium solutions tailored to client-specific requirements, including data activity monitoring (DAM), vulnerability assessment, and compliance reporting.
• Guide the installation, configuration, and deployment of IBM Guardium components (e.g., collectors, aggregators, CAS, universal connectors) in various client environments.
• Develop, implement, and fine-tune Guardium policies to monitor and audit sensitive data access and activities.
• Integrate Guardium with other security tools and systems, such as SIEM, identity and access management (IAM), and threat intelligence platforms.
• Utilize Guardium's vulnerability assessment capabilities to identify and report on potential security risks within databases and data sources.
• Configure and generate compliance reports for regulations (e.g., GDPR, SOX, HIPAA, PCI DSS) and provide insights to clients on their compliance posture.
• Provide expert-level troubleshooting and support for Guardium environments, resolving complex technical issues.
• Act as a trusted advisor to clients, offering strategic guidance on data security best practices and conducting training sessions for client teams.
• Create and maintain comprehensive technical documentation, including design documents, implementation guides, and operational procedures.
• Mentor junior team members and share knowledge to enhance the team's expertise.
• Stay current with the latest IBM Guardium features, updates, and industry best practices in data security and compliance.
• Address technical challenges such as:
  • RHEL Kernel Upgrades and Guardium K-TAP Compatibility
  • DB2 Local Traffic Interception (Shared Memory vs. Guardium Exit)
  • GCP Network Latency and S-TAP Buffer Overflows
  • High Availability (HA) and Disaster Recovery (DR) in GCP
  • GCP Compute Engine Resource Contention

Requirements

• 84 months of experience in Red Hat Linux operating systems, including command-line administration, scripting, and system troubleshooting.
• 84 months of experience with the installation, configuration, and deployment of IBM Guardium components (e.g., collectors, aggregators, CAS, universal connectors).
• 84 months of experience developing, implementing, and fine-tuning Guardium policies to monitor and audit sensitive data access and activities.
• 84 months of experience integrating Guardium with other security tools and systems, such as SIEM, IAM, and threat intelligence platforms.
• 84 months of experience utilizing Guardium's vulnerability assessment capabilities to identify and report on security risks within databases and data sources.
• 84 months of experience configuring and generating compliance reports for regulations (e.g., GDPR, SOX, HIPAA, PCI DSS).
• 72 months of experience designing and architecting IBM Guardium solutions for data activity monitoring, vulnerability assessment, and compliance reporting.
• 60 months of experience with Google Cloud Platform (GCP) services, including Compute Engine, networking (VPCs, firewalls), storage (Persistent Disks), and IAM for access control.
• 60 months of experience in scripting and automation using languages such as Bash, Python, or Perl for database administration tasks, deployments, and monitoring.
• 60 months of experience in troubleshooting and problem-solving complex issues related to Db2, RHEL, and their interaction within the GCP environment.

Candidate must be able to work independently, provide guidance to others, and may have an advanced education.