Job Description:

The successful candidate will manage the implementation and day-to-day functions related to creating Business & Systems Continuity Plans and Procedures, while also managing Disaster Recovery operations within the enterprise. Responsible for interfacing with senior management and regulatory auditors, while also implementing and supporting the services listed below: 

Solid experience with AWS BC and onprem which is hybrid based.

1. Eliminate Business Interruptions.

2. Ensure Continuity of Business.

• Provide technology expertise to the respective customer IT System Owners to establish, maintain, and effectively implement plans for emergency response, backup operations, and post-disaster recovery for customer information systems to ensure the availability of critical information technology resources and continuity of operations in emergency situations.
• Conduct testing and exercise of contingency plans in accordance with the latest iteration of the company Information System Contingency Planning Guide.
• Review, update and test all Contingency Plans at least annually or whenever there is a significant change to the system.
• Ensure that responsibilities are clearly described within the Information System Contingency Plan (ISCP) for personnel with contingency operations roles.

Typical Education & Experience Typically a Bachelor's Degree and 8 years work experience or equivalent experience

Required Skills and Education Contingency Planning-

Experience identifying potential Business Interruptions, developing safeguards against these interruptions, and implementing recovery procedures in the event of a business interruption. Experience providing documentation and training on Contingency Planning concepts and procedures.

Disaster Recovery – Experience Safeguarding data processing operations by identifying potential problem areas and single points of failure that may result in interruptions to critical data processing operations. Experience Developing and implementing Disaster Recovery, Data Sensitivity, Library Management, Back-up and Recovery, and Disaster Recovery Plans and Procedures.

Business Recovery – Experience Developing safeguards and Business Recovery Plans and Procedures governing the customer offices and Operations associated with the organization. Experience ensuring that Customer Asset Protection procedures cover critical Business Resources located at customer offices.

Risk Management – Experience identifying and Categorizing outage exposures that could cause a business interruption, then implement plans and solutions to safeguard against a disaster event. Responsible for insuring that Business and Regulatory Requirements are adhered to and that implemented recovery procedures and contracts are cost justifiable.

Responsibilities:

Designand build highly interactive interfaces and content that allows users to be highly engaged in building brand equity using Javascript, HTML and CSS3. Knowledge of AEM CQ5 is required. Ability to lead and guide other UI developers on the team.

Required Skills:

• Strong experience with Javascript and CSS (ex: scope, hoisting, closure, inheritance)
• Experience and advanced knowledge in HTML5, CSS3, native Javascript, JQuery, Responsive Web Design.
• Knowledge of Photoshop, Adobe XD, or Sketch (alternate tools used around the industry) is helpful
• Experience/knowledge in CQ5/AEM with versions 5.x and 6.x and expertise in CQ5, CRX, JCR, Sling and OSGI technologies.
• Designed and developed the organization of client libraries and created template components using inheritance.
• Experience in use of website creation and management ( ModularContent, Content Fragments, Headless Content Management, SPA Editor, SPA Editor-compatible single page-applications independently of AEM. AEM's Assets HTTP API supports exposing Content Fragments directly in the DAM as JSON.)
• Have a good understanding of the AEM architecture, Application development and Deployment Cycles, CQ5 building blocks, CRX repository, leveraging web content management components for the customization of websites.
• Audience Manager, Target, and Campaign knowledge is required (leveraging technologies and having experience with enabling personalized experiences)

Should be a mid-sr role with the ability to work independently without much supervision and the ability to work on design and primarily a back end developer. 

Responsibilities:

• Perform existing system maintenance activities for providing ongoing support for various Applications using Dot Net Framework, C#.Net, ASP.Net, VB.Net, JavaScript programming, HTML, XML/XSL, and CSS.
• Develop System Source Code and executables using Dot Net Framework, C#.Net, ASP.Net, VB.Net, JavaScript programming, HTML, XML/XSL, and CSS.
• Perform New System Development activities using Dot Net Framework, C#.Net, ASP.Net, VB.Net, JavaScript programming, HTML, XML/XSL, and CSS.
• Adhere to all flow-down policies, procedures, practices, insurance, and certification requirements, as required by the State.

Qualifications:

• You have 8-10 years of programming experience in software development or maintenance (10 years preferred).
• You have 6 years of professional experience working in the .NET Framework, to include C#.NET, ASP.NET, and VB.NET).
• You have 6 years of professional experience in JavaScript programming, HTML, XML/XSL, and CSS.
• You have a minimum of 5 years of experience in IT systems analysis and programming.
• You have experience in MVC Frameworks.
• You have experience working with Oracle or SQL Server back end technologies.
• If you have experience in React JS, Angular and ASP.NET Core, it would be “a plus”.
• If you have experience in cloud technologies, it would be “a plus”.• You have a Bachelor's Degree from an accredited college or university with a major in Computer Science, Information Systems, Engineering, Business, or other related scientific or technical discipline or 3 years of equivalent experience in a related field. (Master's Degree would be “a plus”).

Job Information

As a member of the Configuration Management team, you will be responsible for providing configuration management support for all development teams and business owners to facilitate build and deployment activities. Additionally, the successful candidate will have knowledge of and experience in the implementation and continuing support of cross platform build systems, continuous integration systems, automated testing, packaging systems, multiple branched environments, and source control integration.

Key Job Functions

• Support Containerization transformation initiative.
• Support Continuous Integration (CI) / Continuous Deployment (CD) and DevOps transformation initiatives under the guidance of the configuration manager/architect.
• Support application security activities such static code analysis and open source vulnerability management.
• Contribute in developing best practices for infrastructure as code (e.g.: Puppet, Shell scripting), software build tools (Maven, ANT, etc.) and continuous integration tools (Jenkins, TeamCity, etc.).
• Works with development and Infrastructure Teams in developing building/packaging/deployment processes for new projects.
• Work with various IT teams to automate manual release/build related activities utilizing DevOps principles.
• Setup/Configuration/Administration of Binary Repositories like Artifactory, Nexus etc.
• Support the various tools used in the development in the delivery pipeline (Jira, Bitbucket, SonarQube, Sonatype Suite, etc.)

Qualifications:

Education   

• Bachelor’s Degree required.

Minimum Experience  

• Minimum 5 years of experience working with Software Build and Deployments.
• Applicants must be authorized to work in the US without requiring employer sponsorship currently or in the future. CSS does not offer H-1B sponsorship for this position.----(H1-B transfer restrictions do not apply as it is a contract position)

Specialized Knowledge & Skills     

• Hands-on experience with AWS Services (CodeBuild CodePipeline, CodeCommit, ECR, CloudWatch)
• Hands-on experience with Docker, SonaType Nexus, SonaTypeIQ,
• Hands-on working experience with the Source Code Management tools like GIT, Bitbucket, and TFS.
• Implementation experience with Continuous Integration/Continuous Delivery processes using various tools like TeamCity, Jenkins/Bamboo, and Artifactory/Nexus as binary repository.
• Hands-on experience with Docker
• Knowledge of UNIX/Linux systems administration.
• Experience with Scripting/Build tools like MAVEN, Gradle, ANT etc.
• Good written and oral communications skills.
• Ability to communicate effectively and professionally, both verbally and in writing.
• Ability to think quickly and logically to resolve issues.
• Strong attention to detail and follow-through skills.

Job Information

The Quality Assurance Analyst will work to monitor software quality and associated business/technical risks in support of joint functional testing with our partners. They will be dedicated to working with our partners to support joint functional test planning, developing test scenarios, monitoring and supporting execution of test scenarios, and analyzing results.

This position requires strong deductive reasoning, attention to detail, persistence, patience, and creativity. The individual will work with our modules test counterparts at our partner organizations, internal development teams, Database Administrators, Business Analysts, and support teams to analyze, maintain and execute performance testing procedures.

Strong database testing as well as be able to do source to target mapping. Having test automation skill would be a big plus.

Key Job Functions

• Act as the point of contact with our partner organizations for functional testing activities through the project lifecycle
• Work with team to plan sprints and test planning for the modules
• Work with our module teams to design, develop, and execute scripts which validate, to a high degree of confidence, test cases defined within the project’s test plan.
• Support the automated load/performance testing by our partners across multiple messaging protocols (including HTTP), focusing on overall application performance - validating that application response and outputs accurately reflect business requirements.
• Track and communicate task progress, status, and key performance metrics.
• Report defects found in testing diligently, promptly, and accurately, using standard defect tracking tools.
• Communicate effectively across multiple teams/external vendors (Operations, Project Teams, Quality Service, etc.), as well as different personnel (Developers, Scrum Masters, Project Managers, etc.) when required.
• Perform data analysis when needed to analyze issues in Performance and/or Production environments.
• Conduct troubleshooting/performance test execution in support of remediation efforts as required.
• Analyze data and application changes and document their impact on the performance testing task (test cases, scripting, scenario execution, etc.).
• Ensure the test execution results fulfill the defined test objectives. --Schedule/recommends test re-execution if necessary.
• Ensure the appropriate testing and monitoring tools/technologies are configured accordingly with the test objectives/project team requirements.
• Expected to maintain technical expertise via self-education in areas governing computer sciences, performance/load testing dictums, and Quality Assurance.
• Interface directly with the DevOps and Infrastructure teams regarding Functional test environment.
• Work with our partners to establish test data in sufficient quantity to support the performance testing effort
• Active participant in the meeting(s) to verify firewall openings between performance testing software and that of the application.
• Maintain up-to-instance repository of artifacts related to performance test executions.
• Perform initial debugging procedures by reviewing configuration files, logs, or code pieces to determine breakdown source.
• Adhere to defect tracking process; document software defects, using a defect tracking tool (Quality Center), monitor the progress in a timely manner, escalate aging and priority defects.
• Timely and accurate communication of testing events, daily status, and test execution results, etc.

Qualifications:

Education   

• Bachelor’s Degree

Minimum Experience  

• Minimum 5 years of related work experience

Specialized Knowledge & Skills     

• Experience with system resources measurement
• Experience with relational databases
• Experience with SQL Query tools
• Experience with Unix
• Experience with Agile Scrum methodology
• At least 1 years of experience with Jenkins

Advanced knowledge of J2EE, JAVA, web application development and design patterns

Hands on experience with web services (REST / SOAP)

Strong experience with Spring Framework

Experience with JPA, Hibernate ,AngularJS

Good AWS knowledge

Scripting knowledge

  Performance Testing, and or, automation testing skills would be a plus.

Strong problem solving and analytic skills

Ability to handle multiple projects and assignments simultaneously and effectively in a cross-functional team environment

Ability to work independently, when required, and come up with solutions even when documentation is lacking

Customer service orientation

Summary:The role of the Sr. Oracle Developer is to provide trained resources for any and all Data Services needs of the organization. The client has ETL resources that provide Data Conversion services, Architects that provide Data Modelling services and PL/SQL resources that provide backend solutioning and support.  This contractor will be reporting to the Conversion Specialist and the Development Manager.

What you will do:

• Responsible for all aspects of data migration under the guidance / direction of Data Conversion practice specialists.
• Prepare data conversion requirements / design and facilitate development, testing, and execution.
• Participate in meetings and discussions with functional/technical leads to understand the requirements and work out the conversion blueprint(s).
• Support the data conversion team in data analysis leveraging legacy data sets and provide the results of the analysis on a proactive basis to the client / internal teams to help accelerate legacy data corrections and/or formalization of business rules for effective data migration.
• Participate as an integrator and be able to engage and facilitate discussions between the client and the “core” data conversion / application / backend / database administration teams.
• Maintain data conversion development standards leveraging best practices.
• Support the conversion / migration team in the proper unit testing of conversion artifacts to ensure smooth transition to System Testing and User Acceptance Testing.
• Participate in technical / functional reviews and ensure the conversion artifacts comply with Data Conversion standards and practices.
• Interact with all levels of an organization in a professional, diplomatic, and tactful manner.
• Present technical analysis to internal and external clients.

Who you are:

• You have a Bachelor’s degree in one of the following preferred majors: Computer Science, Information Systems, or a closely related field.
• You have 2 – 7 years of hands-on experience performing data migrations of mainframe and relational data, including identifying and analyzing source data, transforming source data into the required format, loading the transformed data into the target system and validating all source data is tracked and transformed.
• You have an excellent understanding of relational database – Oracle.
• You have 4 – 7 years’ experience working with relational database – Oracle.
• You have experience in fine-tuning SQL queries and improving application performance.
• You have an excellent understanding of conceptual, logical, and physical data models to translate business requirements to update data models.
• You have experience with software development life cycle (SDLC) and software testing life cycle (STLC).
• You have experience working closely with other developers to integrate databases with other applications.
• If you have a Certification in Oracle, it would be “a plus”.

 This role performs vulnerability assessments using various security tools to assess the applications and infrastructure of the Division of Toll Operations - Florida’s Turnpike Enterprise. To identify key security and privacy issues, risks, exposures and vulnerabilities that could affect the security and privacy of our information systems. This role performs network penetration tests on infrastructure, application, or source code using a variety of techniques and tools. Secure Code Review skills a great plus. The candidate should have a deep understanding of TCP/IP, network discovery, DNS enumeration, vulnerability scanning, exploitation methods and privilege escalation. The candidate should also have an excellent grasp of web application exploitation and the OWASP Top Ten list and the SANS 20 list. The candidate must be able to write objective, detailed reports explaining security issues and their remediation. Should be knowledgeable of security best practices (e.g., NIST series); Industry security standards (e.g., PCI-DSS or SOC-2) Must have experience designing and recommending security controls for application development efforts.

Skills and Experience Weighting

A = Candidate must have these attributes

B = Management strongly desires that the candidate have these attributes

C = Management desires the candidate to have these attributes

Skills Needed

A – Hands-on expert with experience in administration and configuration of Splunk Core & ES log management tool/SIEM.

B – Hands-on expert with experience in administration and configuration of Tripwire file integrity monitoring system.

A – Hands-on expert with experience in administration and configuration of Carbon Black Protection.

B – Familiarity with NIST SP 800-137 Information Security Continuous Monitoring standard or similar standard

B – Working level knowledge using Vulnerability Assessment tools like Rapid7 Nexpose

B – Working level knowledge using Application Vulnerability Assessment methodologies such as OWASP

A – Working level knowledge of Windows and UNIX/Linux server operating systems

C – Experience with process lifecycle of the creation, management and compliance of security policies, procedures, standards and guidelines

B – Experience with the processes of identifying appropriate controls to comply with security policies and regulations

A – Experience with Threat and Vulnerability Management Tools

A – Experience with the process of remediation of vulnerabilities identified by the Threat and Vulnerability Management Tools

A – Familiar with incident response principles and procedures

B – Familiar with Payment Card Industry (PCI) security requirements

B – Familiar with SOC-2 security requirements

C – Familiarity with ISO/IEC 27000 series of security standards

A – Experience producing threat and compliance reports for a wide variety of audiences (technical and non-technical)

A – Excellent communication and analytical skills

A – Must work well with others as part of larger team and be able to collaborate on cross functional teams

A – Must be available and willing to work extended and/or alternative hours as needed for issue resolutions, roll-outs, system upgrades, etc.

A – Able to work independently toward goals set at a higher level

A – Must be able to understand Check Point NGTX log analysis, and patch management processes.

Knowledge and Experience Needed

A – 7 years of Information Security experience or related field

B – 5 years of experience in the areas of vulnerability mitigation and remediation.

B – 3 years of experience with developing a security baseline within environments and administering systems to manage the baseline

A – 2 years of experience or in depth technical expertise with three major security solutions, such as Splunk Core & ES, Carbon Black Protection, Tripwire, Nexpose-Rapid7, Metasploit, BurpSuite, Kali Security Distro

A – Windows experience (2012 and newer) and Solaris, Linux, Oracle

A – 3 years of experience with TCP-IP, network protocols

B – Ability to write custom scripts, using bash, Python, Pearl

A – 3 years of experience with network and web-application penetration testing

C – some experience with Java, code review experience a plus.

Responsibilities

1. Support the Threat and Vulnerability Management Program

2. Support of Incident Response Process, Risk Assessments

3. Support of Payment Card Industry (PCI) & SOC-2 compliance and other enterprise security initiatives

Education and certifications

A – Bachelor’s degree in Computer Science / Computer Information Systems or related field

B – CISSP, Splunk, or GIAC, or CEH certifications

• Experience in developing applications on Microsoft Azure Platform using Features like Cloud Services, Azure Web App, Azure API App, Azure Blob Storage, Azure SQL, Azure Functions etc. Plus has hands on experience in developing using Logic Apps/MS Flow, API Management, Functions in Azure

• Experience connecting to on premise and SaaS applications

• Good experience on usage of APIs (LogicApps/MS Flow), configuration and connecting to various external & internal systems through exposed APIs

• Understanding on automation scripts  ( and hands on with scripting languages)

• Good Knowledge of HTTP REST architecture.

• Good understanding of JSON.

• Good understanding on various databases like SQL etc.

• Understanding of data orchestration.

1. Expert level experience on large-scale construction and redevelopment projects such as transportation facilities (stations, airports, transit hubs), corporate office buildings, and operations command centers.  
2. Knowledge of how Technology Design and Deployment lifecycle aligns and integrates with the Architectural and Engineering Construction lifecycles.
3. Experience managing Engineering design and deployment of technology infrastructure specifically building renovations, restacks, relocations, cabling, network and systems
4. Experience managing Engineering design, deployment and integration of multiple technologies such as Audio/Visual systems, Video Surveillance Systems, and Access Control Systems.
5. Business analysis and documentation
6. Procurement processes
7. Professional demeanor with strong communication/presentation skills
8. Ability to multi-task and to work under pressure
9. Based in NYC with 5% travel to Philadelphia, Baltimore and Washington, DC.  

Role

Perform the following for applications based on Intersystems Cache, Cache CSP, HTML, Javascript, Jquery, Json, Ajax, and ASP.Net.

• Create system designs and provide documentation for system feature enhancements and additions and bug fixes, daily, as specified in the work tickets assigned by the Department.
• Modify and create application code and database code, ready for User Acceptance Testing, daily, as specified in the work tickets assigned by the Department.
• Troubleshoot, determine and document resolutions to system issues identified by the HMS Support group and the Applications Management team, daily, as specified in the work tickets assigned by the Department.
• Provide work estimates, communication and updates for Release Planning, Sprint Planning and Daily Scrum, daily, as specified in the work tickets assigned by the Department.
• Document application modifications and additions in a documentation repository, daily, as specified in the work tickets assigned by the Department.
• Complete job required training as assigned by the Department. Completion verification may include certificates, sign-in sheets and/or verification via the Department's Learning Management System

Experience

• 5 years of experience with Software Development Life Cycle Methodology.
• 5 years of experience with the software development of web-based applications utilizing Intersystems Cache, .Net or Java.
• 5 years of experience with object-oriented techniques.
• 5 years of experience using HTML, CSS and Javascript.
• 5 years of experience with formal software testing.
• 5 years of experience with root cause analysis and troubleshooting.
• 3 years of experience with source control software.
• 2 years of experience using SQL queries, JSON, JQuery, Ajax, Bootstrap and XML.
• 2 years of experience creating and maintaining databases

Principal IT Security Analyst within the Vulnerability Management Program (VMP). This role is responsible for providing research, analysis, advice counsel, scanning, vulnerability tracking, remediation and patching tracking.  Performs configurations and maintenance of scanning tools, performs scans and analyzes results in support of the activities described above on all Amtrak computing assets, mobile devices, printers, and includes all Operational Technologies (OT) and Industrial Control Systems (ICS) to assure the safety and cybersecurity of train operations, business functions, and customers. The role serves as the subject matter expert (SME) receiving guidance and instructions from the VMP Director. Can brief and advise  IT Service Owners as required. Directly advises the Security Operations Center (SOC) Director, reports to and assists the VMP Technical Program Lead and supports  CISO.

client relies heavily on the vital tasks above and below to protect its IT, OT and cloud environments.  This work includes operating and maintaining vulnerability assessment tools, databases, and information from various intelligence sources, and aggregates the information into digestible formats for reporting. Vulnerability Management underpins the functionality and availability, while assuring confidentiality and integrity, of Amtrak’s revenue sources, Payment Card Industry (PCI) compliance, OT safety, and OT train operations.

This role serves as a principal of vulnerability management and assists in the execution of remediation strategy, policy development, security policy governance/compliance, and enterprise IT/OT risk assessment.  The KSA of this position is a broad spectrum of NIST, CIS, PCI, COBIT, Cyber framework, etc. with regards to vulnerabilities in order to increase the effectiveness and efficiency of clients enterprise through improvements to each function as well as coordination and communication between support and business functions.

Work requires background and knowledge in Cybersecurity engineering to build upon the existing program to implement automation of many vulnerability management tasks.

Implements strategies defined by the VMP Technical Lead and approve by the CISO for recurring vulnerability scans and assessments of servers, PCI environment, financial servers, revenue systems and kiosks, mobile applications, APIs and web applications. Performs management of and operates the vulnerability assessment tools portfolio to include Nessus Security Center, Nmap, Checkmarx, Webinspect,etc and developments automation and integration specifications.

• Develops, plans, and implements internal and external systems audits and compliance-related work (e.g.,PCI DSS compliance) and other system and operations compliances audits. Experience with 2019-2020 PCI DSS requirements for merchant level 1 with demonstrated experience regarding compliance certification process.
• Review technical systems controls, identify control weakness, and communicate significant control and develop compliance risk matrix and provides recommendations to correct or mitigate IT systems control and completeness.
• Prepares findings and reports on action items and recommendations on how the Department will mitigate findings in system audits.
• Provides recommendation and updates Department Policies and Procedures related to system controls, audits non-compliance issues.
• Assist the Department management with managing access to system users and reviews segregation of duties and makes recommendations on roles and compliance in the system.
• Plans, manages, directs and reviews the work of technical auditors and coordinates other staff required to conduct the audits. Coordinates with other Department IT and business leaders to ensure all policies and procedures are followed.

Job Description Summary

Responsible for the operation support, maintenance and activities related to the network infrastructure (computers, network software, network monitoring tools, network hardware, LAN/WAN, Load balancers, etc.).

Job Description

Responsible for the operational support, maintenance and activities related to the network infrastructure (computers, network software, network monitoring tools, network hardware, LAN/WAN, Load balancers, etc.).

Troubleshoots network problems in a timely manner. Works with vendors to evaluate new networking products and resolve equipment problems. Fully proficient in applying established networking and data center standards. Works independently to create, update , implement and model best practices, Leads projects of project steps of varying size and has accountability  for ongoing activities related to projects, programs and/or operations. Applies in-depth professional level knowledge to independently solve a full range of complex problems and offers sensible solutions. Represents team in meetings with other work units. Ensure the high availability of networking devices and associated infrastructure by quickly responding to and resolving network incidents. Responds to numerous network service requests related to DNS, new server builds, firewalls, etc. Serves as a reliable resource of management.

• Prior working knowledge of run and maintain core network environment including incident & problem management-Intermediate
• Strong Familiarity of TCP/IP and enterprise networks
• Strong familiarity working on newer networking technologies to support improved network efficiency, performance, team productivity, and proactive monitoring of the network.
• Network troubleshooting – Advanced
• Network performance tuning – Intermediate
• Prior working knowledge and migration to cloud (AWS, Azure etc.) – Intermediate
• Microsoft Office suite and WebEx – Intermediate
• Prior working knowledge of network monitoring tools – Intermediate
• Experience with supporting IP telephony (IPT) and software -based PBX
• Prior working knowledge of ITSM process such as change and problem management – Intermediate

Design, plan, configure, deploy and maintain network systems across the enterprise and LAN. Plans, prepares and verification, operational maintenance, and perform analysis. Create and maintain system documentation and metrics supporting the core network infrastructure. Additional responsibilities include supporting public Cloud migrations using AWS.

Responsible for Data Center operations functions such as removing and installing computer/ networking hardware as needed. Labelling equipment, cabling equipment, receiving equipment, escorting vendors, etc.

Additional Job Descriptions/ Key to Success in this Role

• Strong attention to detail, outstanding problem-solving skills, experience performing impact and root cause analysis on network incidents.
• Ability to work and collaborate effectively in a team environment including persuading others to get things done to meet objectives.
• Ability to perform root cause analysis and remediation for any network disruption for users.
• Demonstrated effective communication skills both orally and in writing. Makes clear and convincing presentation. Active listening.
• Strong documentation skills.
• Ability to schedule, manage, and facilitate virtual and in-person meetings using WebEx.
• Ability to develop project status reports and metrics as needed.
• Availability to work after hours or on-call as needed for incident and change management activities,
• Ability to act with a sense of urgency to support strategic initiatives and maintain high availability of all critical applications running on core network infrastructure.
• Ability to manage multiple, competing workloads and priorities while maintaining focus on dead lines and high-quality results.