Systems Security Specialist Sr

Baltimore, United States | Posted on 02/02/2026 The Maryland HealthBenefit Exchange (MHBE), an independent unit of state government, provides Marylanderswith accessible, affordable health coverage. MHBE administersMaryland Health Connection (MHC), the state’s health insurance marketplace.Through MHC, Maryland residents explore health insurance plans, compare rates,anddeterminetheir eligibility for advanced premium tax credits(APTC), cost-sharing reductions (CSR), and publicassistanceprogramssuch as Medicaid and the Maryland Children’s Health Insurance Program(MCHP). MHBEseeks a Senior Systems Security Specialist to plan, design, develop,administer,monitor, and govern various security policies, controls, andsystems for the Health Benefit Exchange (HBX) and other systems. Duties: Develop and implement cloud security controls,cloud-based processes and tools, and cloud security task automation. Perform security assessments,workingcloselywith DevOps and Developer teams onidentifyingsecurity and privacyissues in AWS or Azure and finding solutions to provide required functionalitysecurely. Continuouslymonitorthe Health BenefitExchange (HBX) and ancillary systems, not limited to cloud security operations,responding to security issues andescalatingas necessary. Conduct security impact analysis of controls on proposedsystem changes. Conduct cloud security assessments and Penetrationtesting. Perform Incident Response and Forensics evaluation usingsecurity information and event management (SIEM) tools. Ensure that theMHBE systemsecurityrequirements are addressed during all phases of the system development lifecycle. Review and update systems security documentation andartifacts such as Systems Security Plan, Information Security Risk Assessment,Privacy Impact Assessment, Systems Security Report, Correction Action Plan,Plan of Action & Milestones (POA&M). Create and track POA&M requirements for resolvingsecurity findings. Administer cloud-based and physical firewalls. Deploy and administer Identity and Access Managementproducts in various operating systems. Perform monitoring and operations of Identity and AccessManagement implementation. Design enhancements in Identity and Access Managementproducts ForgeRock and SailPoint. Maintain,monitor, and provide operational supportfor IAM products, computer programs, systems, and other security technologies,and revise system design and quality standards. Make changes to IAM and underlying applications toenhance enterprise security and ensure safe and secure operation to enableaccess to our systems for our employees, contractors, consumers, andstakeholders. Perform Security Incident Response and Forensicsevaluation using security information and event management (SIEM) tools. Provide operational support for other securitytechnologies. Perform account/access management with IAM and othersecurity tools. Note: candidate must be flexible to work overtime asneeded, including weekends, holidays, and off-hours. Requirements Education: Bachelor's Degree from an accredited college oruniversity with a major in Computer Science, Information Systems, Engineering,Business, or other related scientific or technical discipline. MinimumQualifications: A minimum of eight (8) years of experience analyzing,defining, deploying,monitoring, and administering security requirementsand controls for large and mission-critical IT systems. A minimum of five (5) years performing day-to-daysecurity operations functions, including administration, troubleshooting, andresolution of various security components. A minimum of four (4) years of hands-on experience inperforming cloud security functions. A minimum of four (4) years of experience in definingcomputer security requirements for high-level applications and evaluatingapproved security product capabilities. A minimum of four (4) yearsofdemonstratedproduction experience using AWS Cloud supportingsecurity operations. A minimum of four (4) years of experience withadministering security for Windows and Linux operating systems. Experience in performing Security Incident Response andForensics evaluation with SIEM tools. Working knowledge of AWS security features such asSecurity Groups, Network Access Control List, Firewall, WAF, Guard Duty, Macie,CloudTrail, CloudWatch, Control Tower, etc. Experience with assessment and evaluation of informationsystems to recommend changes and mitigate threats, risks, andvulnerabilities. Demonstrated ability to perform scheduled maintenanceactivities such as patching, performance tuning, and backups. Demonstrated ability to perform user provisioning andde-provisioning activities. Experience inmonitoringthe securityinfrastructure for operational effectiveness. PreferredQualifications: A minimum of five (5) years of experience implementing,administering, andmonitoringSecurity Controls and Governance forpublic-facing complex IT systems. A minimum of five (5) years of specialized experience indefining computer security requirements for high-level applications, evaluatingapproved security product capabilities, and developing solutions to multilevelsecurity problems. A minimum of five (5) years of hands-on experienceproviding operational support for ForgeRock andSailpointIAMproducts. A minimum of five (5) years of experience with theassessment and evaluation of information systems to recommend changes andmitigate threats, risks, and vulnerabilities. A minimum of five (5) years of experience conductingIncident Response testing to evaluate processes for detection, response, andreporting of security incidents. A minimum of three (3) years of hands-on experiencedesigning, developing, deploying, and administering security policies forhealth insurance marketplaces or complex health and human servicessystems. Experience configuring ForgeRock to enable single sign-onwith different applications and implementing password sync across all internalapplications. Experience with configuration and administration ofSailPoint and performing tasks such as designing an organizational treestructure and creating provisioning and de-provisioning policies. Experience implementing ID policies, password policies,access control lists (ACL), reconciliation, service definition, theconfiguration of remote resources, workflows, password synchronization,reconciliation schedules, and life cycle management. Experience in providing detailed configuration andadministration for programs such as ACL configuration, Group Management, andconfiguration management. Hands-on experience with troubleshooting, investigatingoperational problems, and providing workarounds, resolutions, andremediations. Experience developing IT Security roadmaps and executionplans. Demonstrated technical knowledge of command lineutilities running on various platforms, including Linux and MS Windows. Experience with the implementation of integrationsolutions between the IAM system and user account repositories such as ActiveDirectory, LDAP, and Databases. Experienceassistingorganizations meeting NISTSP 800-37, NIST 800-53, IRS Publication 1075, and MARS-e 2.0requirements. Experience with conducting vulnerability management andpenetration testing efforts. Experience in configuring and reviewing ASA and/orFortinet firewalls. Possess one or more security certifications such asCISSP, ISO, CSA STAR Cloud Security Advisor, CCSE, QCS, CNA, VCP, orequivalent. Experience working with the Project Management Office(PMO) processes, policies, and procedures. Standard Employee Benefits. 50% Health Insurance Paid by Innosoft, Paid Vacation, 401K Match, STD LTD and AD&D paid by Innosoft. #J-18808-Ljbffr