Jobs at Ask IT Consulting Inc.

Perform enterprise risk assessments of networks, systems, and business applications. Collaborate with system owners and stakeholders to analyze, test, and document security controls across the agency environment.

Perform Security Control Assessments and continuous monitoring for State of Michigan applications per NIST guidance. Validate security plans, execute SCA documentation (POA&M, CAP, DTMB-170), interview and test procedures, author remediation recommendations, lead small assessments, and assist vendors and team members with artifact collection to ensure controls meet NIST and state policies.

Install, configure, maintain and troubleshoot network security devices (LAN/WAN/MAN). Test and modify security configurations, provide consulting to state agencies, fulfill service-desk work orders, and maintain device OS/app security. Requires hands-on experience with Cisco ASA 5500-X and/or Juniper MAG and SRX devices. Must pass background check, be on-call and available onsite within 30 minutes, work flexible hours, and meet physical and driving requirements.

Design, deploy, and operate enterprise information security systems across systems, networks, procedures, and operations. Collaborate with staff and the SOC to enhance data collection/correlation, identify gaps, develop prevention/detection/mitigation solutions, produce installation and operational documentation, train agency personnel on security processes, and administer security services as part of a team.

Conduct interviews with business and technical owners to gather policies and procedures; develop and track InfoSec implementation plans; document findings; assess agency documentation for control compliance; facilitate status reporting; collaborate with agencies and provide compliance recommendations.

Manage multiple concurrent statewide information security projects (encryption, MFA, VPN, SIEM, DLP, patching, privileged access, vulnerability assessment). Lead project planning, risk/scope/quality management, vendor coordination, RFP development, knowledge transfer, and status reporting to ensure successful implementation across state agencies.

Contract security consultant to support and coordinate PCI-DSS compliance assessments (annual QSA engagement), prepare and submit evidence, implement and monitor PCI environments, perform vulnerability assessments and security event investigation, manage PCI training, contribute to hardening standards, and participate in incident response.

Lead and mentor the Cyber Operations team, evaluate and implement security tools, manage SIEM/IDS/IPS, perform vulnerability assessment and mitigation, develop SOPs, support FISMA and DISA STIG compliance, and assist with audits and continuity/disaster recovery planning.

Design and implement information security architecture and controls. Configure and develop SIEM solutions, administer Tenable Security Center, conduct risk and vulnerability assessments, implement application security, RBAC, IAM, DLP/data discovery, and secure web apps, databases, operating systems and network infrastructure (Cisco/Juniper).

Contract Security Architect / Penetration Tester to perform security assessments and architecture work. Requires 10+ years IT experience across Windows, Linux, mainframe and web apps, 5+ years with firewalls, load-balancing and LAN/WAN. Strong communication, documentation, presentation, collaboration, and MS Office skills are required. 12+ month remote contract.

Lead database vulnerability and threat management (VTM) using IBM Guardium for mainframe DB2 and distributed databases. Administer and configure vulnerability tools, schedule scans, assess and risk-rank vulnerabilities, monitor database security, and produce reports and presentations for senior management. Drive VTM strategy and improvements across the agency.

Lead security architect to support CJIS and information security compliance: interview stakeholders, document processes, assess controls, develop and track InfoSec implementation plans, facilitate status reporting, and provide remediation recommendations.

Lead development and maintenance of certification and accreditation (C&A) frameworks from scratch. Manage NIST-800 or DIACAP certification/accreditation, FISMA reporting, security analyses, risk/vulnerability assessments, tests and evaluations. Prepare briefings for senior officials, maintain certification documentation and POA&Ms, coordinate C&A activities with FSO and DAA, and enforce information assurance policies.

Contract Network Engineer in Columbia, SC (6-12 months). Responsibilities include administering network environment, rights management, diagnosing and troubleshooting computer and network issues, configuring/troubleshooting Windows client/server systems, developing admin procedures/policies, and strong verbal/written communication. Preferred experience with security standards (PCI/NIST/Pub1075), networking protocols, MS Exchange, PowerShell, disaster recovery, and change management.

Perform security analysis including installing/using security tools, application security, PCI/NIST implementations and audits, SCSEM compliance, malware analysis, NIST controls, risk and vulnerability assessments, and security across networking, databases, systems, and web operations; develop/maintain SSPs.

Architect, deploy, and integrate enterprise Privileged User Management, IAM, DLP, and data classification solutions. Create repeatable installation/configuration guides, assist agencies with deployment and sustainment, enhance SOC data collection/correlation, identify and mitigate information risks, and provide training and documentation to agency personnel.

Install, configure, and support security appliances and solutions (Next‑Gen firewalls, Cisco ASA, IPSEC VPNs, IDS/IPS, secure mail/web gateways, AV, mobile security, DLP). Document and communicate technical details clearly; maintain and troubleshoot network security infrastructure.

Lead technical security architect responsible for administering network security devices, performing security assessments against NIST/PCI/SCSEM controls, conducting incident response analysis, advising on vulnerability remediation and hardening, evaluating exceptions and privileged access requests, and administering Tenable and McAfee security tooling.

Develop and document information security policies and standards; plan, coordinate and implement security measures; perform risk assessments, compliance reviews, encryption and firewall configurations; monitor and safeguard data access; maintain policy repository and train users on security awareness.

Manage and maintain Salesforce DevOps toolchain, implement CI/CD and deployment scripts, develop deployment/cutover plans, drive release processes, debug deployments, evaluate new tools, and create a transition position description for DevOps Release Management.