CTG APPLICATION FRAMEWORK AND SECURITY ARCHITECT in New York, New York

Title: APPLICATION FRAMEWORK AND SECURITY ARCHITECT

Location: US-NY-New York

Job Number: 18209950

Great Opportunity for a Direct Hire Role in NYC!!

Full Benefits

LOCAL CANDIDATES ONLY. Please do not apply if you need to relocate to the area.

US Citizens and Green Card holders only

No Corp to Corp

If interested, please reply to this ad, with a cover letter with your salary requirements.

Or email krista.eckard@ctg.com

We are looking for an Application Framework and Security Architect, for the Financial Management System (FMS), an Enterprise Resource Planning (ERP) System for out Client. The FMS Application Framework and Security Architect will report to the Asst. Exec Director of Financial Technical Systems. The Architect position is a role in the Application Framework Standards and Security Services team that works closely with the Technical Systems IT and Vendor IT teams to assure that the application framework meets industry and business standards as well as integrate security throughout the software development lifecycle. The architect is responsible for assuring the design, implementation and operation of products and technologies adheres to applicable business, application framework and security standards and practices. The Architect will also be responsible for FMS application software security assurance by working with governance entities within the organization to assure continuous improvement and adherence to Policies, Standards, Requirements and Guidelines.

The primary role / tasks of the Application Framework and Security Architect include, but are not necessarily limited to, the following:

• Develop new components and enhancements to the financial management systems framework and the FMS suite of applications - adhering to Client development standards

• Author technical designs that capture all functional and non-functional requirements and present them at a level of detail by which a developer could: write application code, construct reports or compile configuration bundles.

• Ensure that the FMS application software and solutions deliverables, as designed and developed by Client’s vendors, meets the Client’s functional, nonfunctional (technical, performance, operability, maintainability) and security requirements by conducting reviews and formal evaluations of the vendor's solutions and development work for, completeness, and adherence to industry standards for Web-based secure systems;

• Serve as an escalation point for the resolution of production application issues when application issues are encountered in the software during: 1) the online day by users and support staff and 2) in the evening during the execution of the batch cycle. The candidate will similarly support software test tracks in non-production

application environments.

• Design and Execute technical tests as necessary to ensure that vendor and Client software deliveries address the business, technical and security problems in a manner consistent with Client standards for quality and completeness.

• Review and provide feedback on functional designs in terms of technical feasibility and impact on performance, operability, security and maintainability;

• Gather production operational and security requirements and incorporate the requirements into the code / scripts products authored by the Client development team and Vendors. Coordinate with the Financial Systems Production Operations Units to implement new software processes into the staging and production environments.

• Serve as a primary application security contact for the FMS project during the planning, analysis, and design phases of projects.

• Monitor ongoing projects to verify that security components are built and deployed as originally designed and align with Client and industry standards.

• Improve the security position of FMS applications by planning, designing and integrating security based application improvements.

• Evaluating and resolving security issues and non-compliance situations at the application level and beyond.

• Working with appropriate teams to assure that the FMS application is integrated with Client and industry security standards, protocols· and requirements from the application (Java, JEE), application servers (WebSphere), messaging servers (WebSphereMQ), servers (mid-range, mainframe, virtual, appliance, etc.), OS (AIX, Linux etc.), network (firewalls, etc.), data store (LDAP, Oracle).

• Assure that the FMS application adheres to standards for authentication mechanisms, authorization procedures, auditing/logging, and user administration and access control.

Minimum Qualification Requirements

  1. A master's degree in computer science from an accredited college and three years of progressively more responsible, full-time, satisfactory experience using information technology in computer applications programming, systems programming, computer systems development, data telecommunications, database administration, planning of data/information processing, user services, or area networks at least 18 months of this experience must have been in an administrative, managerial or executive capacity in the areas of computer applications programming, systems programming, computer systems development, data telecommunications, data base administration, or planning of data processing or in the supervision of staff performing these duties; or

  2. A baccalaureate degree from an accredited college and four years of experience as described in "1" above; or

  3. A four-year high school diploma or its educational equivalent approved by a State's department of education or recognized accrediting organization and six years of experience as described in "1" above; or

  4. A satisfactory combination of education and experience equivalent to "1", "2" or "3" above. However, all candidates must have at least a four-year high school diploma or its educational equivalent approved by a State's department of education or recognized accrediting organization and must possess at least three years of experience as described in "1" above, including the 18 months of administrative, managerial, executive or supervisory experience as described in "1" above.

Qualification Requirements (continued)

NOTE: The following types of experience are not acceptable: superficial use of preprogrammed software without complex programming, design, implementation or management of the product; use of word processing packages; use of a hand held calculator; primarily the entering or updating of data in a system; the operation of data processing hardware or consoles.

Preferred Skills

• Years of experience in developing large, multi-tiered applications as an application developer and security architect utilizing state of the art development architecture and tools.

• At least (2) full SDLC implementations of a multi-tiered application as an application and security architect with responsibility for application technical design and development.

• Hands on experience in developing secure Web and distributed architectures using Java/Unix based technologies.

• Solid hands-on experience in Java, Enterprise Java & Object Oriented concepts like JEE, JMS and EJBs.

• Extensive IT experience with n-tier, database and client server design/development.

• Experience with Web technologies including Servlets, JSP, and XML;

• Strong web and distributed systems design knowledge including JEE Design Patterns, Integration services with messaging servers and / or server components supporting web based JEE applications.

• Excellent skills in Oracle RDBMS. Should be proficient in SQL, able to author/analyze complex SQL for troubleshooting purposes.

• Hands-on proficiency in client side technologies like HTML, Java Script.

• Experience with integration technologies and good understanding of Relational Database Management Systems including architecting and designing for performance and scalability and working with Object to Relational Mapping schemes for distributed data access.

• Experience with best practices and methods of IT strategy, enterprise architecture and security architecture.

• Strong knowledge of software & web application security best practices.

• Working knowledge of application level vulnerabilities and penetration/vulnerability testing of applications.

• Deep knowledge and experience with the Java Security (java.security) package, Password Hashing, Digital Signatures, Secure Random, Signature Verification, (Symmetric) Encryption and Decryption.

• Knowledge of Java Cryptographic extensions and encryption protocols such as SSL and TLS and the Java and 3rd Party based implementation libraries and extensions (javax.crypto, IBMJCEFIPS etc.) to support them in large scale JEE applications.

• Strong knowledge of IAM architectures, products and tools and practical experience with implementing and integrating Identity and Access management into applications.

• Strong understanding of integration w/LDAP server for authentication.

• Proficiency in using and navigating in UNIX, preferably AIX.

• Strong ability to write new and modify existing shell scripts (KORN shell preferred).

• Experience with SCCS tools (Rational ClearCase .

• Understanding of standard SDLC methodologies (at minimum a knowledge of Rational Unified Process or Waterfall).

• Basic understanding of accounting and budgeting functions or financial management packages.

• Strong analytical skills.

• Excellent English communication (oral and written), interpersonal, and organizational skills.

• Strong business acumen, professional style/presence.

• Experience with any of the following is a PLUS:

o Strong background in accounting and/or budgeting packages

o IBM Rational Application Developer IDE

o MQSeries, DB2, Oracle PL/SQL

o Rational Clearquest/Clearcase, BMC Remedy

o Exposure to third party auditing and risk assessment methodologies

o Knowledge of the latest security threats, techniques and exploits targeting vulnerabilities

o Expertise in static and dynamic security testing

o Exposure to IBM Tivoli Identity Manager, ITDI and WebSphere Portal

Qualifications:

CTG (NASDAQ: CTG) provides industry-specific IT services and solutions that address the business needs and challenges of clients in high-growth industries in North America and Western Europe. CTG also provides strategic staffing services for major technology companies and large corporations. Backed by more than 50 years of experience and proprietary methodologies, CTG has a proven track record of reliably delivering high-value, industry-specific staffing services and solutions to its clients. CTG has operations in North America, Western Europe, and India.

CTG's greatest asset is its people, and as such, we are committed to providing employees programs and processes to support their performance, hone their skills, and advance in their careers. This commitment is reflected by CTG being named a Best Places to Work in Healthcare company by Modern Healthcare (2013-2016) in North America, and a Best Workplace in the United Kingdom (2013), Belgium (since 2007), and Luxembourg (since 2011).

CTG will consider for employment all qualified applicants including those with criminal histories in a manner consistent with the requirements of all applicable local, state, and federal laws.

CTG is an Equal Opportunity/Affirmative Action Employer and strong advocate of workforce diversity. Minority/Female/Sexual Orientation/Gender Identity/Disability/Veteran.

Job: Technology & Healthcare IT