Enterprise Digital Platform Engineer, Mid

Company: Horizontal Talent
Location: Saint Paul
Posted on: May 12, 2022

Job Description:

Job description:
Accountabilities and Assignment Responsibilities:

• 
  
• Onboard Protegrity staff for enterprise systems access
  
• Onboard Security Design and Delivery (SDD) staff for enterprise systems access
  
• Host Protegrity training
  
• Review and update existing Protegrity Security support documentation for Protegrity SAD and SSD maintenance
  
• Upgrade the on-premises Enterprise Security Administrator (ESA) data protector for Teradata PROD, STAGE, and DEV; install updated database protector for Teradata agent, update the Teradata datastore configuration in EESA to reflect the new IP addresses and deploy policy
  
• Request virtual machines (VMs) for the new DEV ESA and the new Protegrity Storage Unit (PSU) component (two VMs); determine who should install the image
  
• Build out a new ESA cluster for Teradata in Dev; example: install and configure the Protegrity Database Protector for Teradata agent onto TDV (Teradata SME), set up Data Security Policy based on PROD ACLs, enable tokenization for UDFs, Keys Management; review the UDF code to identify potential changes for using the DEV ESAs; identify DNS name, request IP network address, NTP, email, logging, monitoring, backups, AD integration, etc., settings (see existing Protegrity configuration)
  
• Request Firewall rule changes for new ESAs and PSUs if needed
  
• Update the Teradata datastore configuration in ESA to reflect the new IP addresses and deploy policy; configure ESA integration with LDAP/AD connection continues to be established and the synchronization of LDAP/AD groups with ESA roles are maintained - point to PROD with DEV role naming
  
• Request new LDAPS BIND ID for DEV ESAs and check into password vault
  
• Identify and request new DEV AD Tok/Detok/Retok roles for ServiceNow provisioning
  
• Identify users who need DEV Tok/Detok/Retok access and request them to submit ServiceNow access requests
  
• Add new ESA and PSU devices to CMDB
  
• Validate TDV Dev Protegrity policy migration activities and data validation, such as for protecting, unprotecting, and re-protecting functions (over 14 days); ensure ESA policy deployed successfully to each Teradata node where the Database protector for Teradata was installed
  
• Validate TDV PROD / STAGE Protegrity policy migration activities and data validation, such as for protecting, unprotecting and re-protecting functions (over 7 days)
  
• Smoke test protect and unprotect functions for the Database Protector for Teradata Affirm that tokenized data as backed-up unprotected and only permitted for restoration in the original location
  
• Update and validate Protegrity Disaster Recovery procedures
  
• Test DEV and PROD/STAGE ESA and PSU backup and restoration; tabletop or actual restoration (work out process with Protegrity and Service Desk Delivery team member; dependency on NAS mount)
  
• Update DR procedures and validate recoverability for ESAs with PSU
  
• Provide knowledge transfer to BCBSM for the configuration, testing, and operation procedures
  
• Participate in platform-related pre-migration, migration, and post migration consultation
  
• Configure Teradata backups to copy tokenized data unprotected (should mirror Prod)
  
• Perform a Teradata Vantage (TVD) post-go live upgrade in Prod; request new VM for PSU required ESA component
  
• Identify DNS name, request IP Network address, NTP, email, logging, monitoring, backups, AD integration, etc., settings (see existing Protegrity configuration); update DR procedures and validate recoverability for ESAs with PSU
  
• Reserve time with data validation team to test tok/detok/retok after update
  
• Remove DEV ESA to TDV PROD/STAGE firewall access (if in place)
  
• Remove DEV ESA to DR firewall access (if in place)
  
  
  Requirements:
  
  
  • 
    
  • Bachelor's Degree in Computer Science, Information Technology, Engineering, or equivalent and 6 years hands on developing / engineering or 11 years of related experience in lieu of a degree or relevant military experience
    
  • Demonstrated experience with Protegrity Enterprise Security Administrator versions 7.2, 7.2.1, and 9
    
  • Demonstrated experience with Teradata and Teradata Advantage
    
  • Demonstrated expertise in system administration, networking, and security configuration management in AWS and/or related cloud technology
    
  • Ability to support on-call duties and/or work weekend hours as needed
    

Keywords: Horizontal Talent, St. Paul , Enterprise Digital Platform Engineer, Mid, Other , Saint Paul, Minnesota