Security Engineer IV - GRC/Archer - HHS STIM

Job Description: Security Engineer IV

Key Responsibilities

• Support the administration, operations, maintenance, environmental management, and troubleshooting of enterprise GRC platforms and applications, currently RSA Archer.
• Partner with security and infrastructure teams to maintain high system availability.
• Support enterprise GRC platforms to accommodate business requirements and design changes.
• Troubleshoot data feed integrations, stakeholder notifications, and reporting requirements.
• Train users on enterprise GRC platforms, ensuring effective navigation and comprehension of processes and terminology.
• Manage and maintain user accounts, including bulk uploads and single account creation.
• Transfer and validate data for reporting purposes, including exporting/importing into ingestible templates.
• Assist Database Administrators in designing, implementing, and testing database changes, SQL performance tuning, and upgrade strategies.
• Maintain detailed documentation for system designs, configurations, processes, and service records.
• Collaborate with cross-functional teams to support IT infrastructure projects, providing technical leadership.
• Mentor junior team members and provide guidance on best practices and technical challenges.
• Participate in 24/7/365 on-call rotation as required.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field (or equivalent experience).
• At least 8 years of experience in Information Security or equivalent IT-related experience.
• Proficiency in enterprise GRC platforms, particularly RSA Archer.
• Knowledge of database administration tasks including performance tuning, maintenance, and optimization.
• Strong troubleshooting skills for LAN/WAN connectivity, throughput, and related network issues.
• Experience in collaborating with Database and System Administrators to support business applications.
• Excellent communication and documentation skills, with the ability to explain complex technical concepts to non-technical stakeholders.
• Familiarity with CIS Controls, NIST SP 800-53 Rev. 5, and DISA STIGs.
• Strong organizational, analytical, and problem-solving skills.