Jobs at SonSoft Inc.

Design and document contact center requirements and processes; implement and support Genesys 8.x call routing and reporting. Work with Java/WebSphere IVR custom apps, Avaya Experience Portal, NICE call recording and IEX workforce management. Perform project management, planning, coordination, and client-facing consulting with regular travel.

QA automation engineer responsible for designing, developing and executing automated tests for web, mobile and service APIs. Work in Agile teams, produce test artifacts (RTM, test cases), integrate automation into CI/CD, support test data setup, report defects, and collaborate with stakeholders to define acceptance criteria and deployment activities.

Develop and maintain Java/J2EE responsive web applications; design and test using JPA/Hibernate; build SOAP/REST services and MQ integrations; use Spring/Struts (Spring Boot preferred); work with MS SQL/Oracle and PL/SQL; participate in SDLC, design/architecture reviews, and global delivery in financial services.

Design, develop, and maintain enterprise Java applications using Core Java, Netty, NIO, multithreading and concurrency. Participate in architecture and design reviews, database transaction management, PKI integration, and mentor junior developers within a global delivery environment.

Perform SharePoint Online migrations and Office 365 administration, including OneDrive and Exchange (on-prem and Online). Configure and troubleshoot ADFS, mail flow, secure email gateways and IM platforms (Lync/Skype). Provide mailbox provisioning, end-user troubleshooting, and Exchange 2010/2013 architecture and deployment support.

Design and define enterprise data architectures and lead projects using IBM DataStage. Provide technical consulting, mentor staff, author thought leadership, and support project execution in a travel-heavy management consulting environment.

Leads Unified Communications and Messaging teams supporting on-premises and Microsoft Office 365 environments. Provides Level 2–4 operational support, resolves complex technical issues, coordinates integrations and migrations, manages Microsoft and vendor relationships, recommends system improvements, tests new technologies, trains support engineers, and supports global deployments. The role requires expertise in Lync, Skype for Business, Exchange, Exchange Online, PBX, networking, VoIP, SIP, hosted platforms, PowerShell, and Microsoft productivity technologies.

Provide cloud and security operations support: run Nessus scans; manage McAfee installs and policy updates; configure Splunk forwarders and dashboards; monitor AWS security configurations; support incident response, vulnerability analysis, remediation, and change control activities.

Implement and maintain the organization's risk management framework: perform risk identification, assessment, tracking, third-party supplier risk assessments, document security policies and controls, recommend remediation, report risks to stakeholders, and support security awareness, audits, and continuous improvement.

Assess and document security controls, perform risk, vulnerability and business impact assessments, develop test scripts and compliance frameworks, coordinate audits and remediation with business units, and report findings to management while supporting security policy and process development.

Implement and maintain enterprise risk management frameworks and processes. Conduct risk assessments and third-party supplier risk reviews, document security policies and control deficiencies, recommend remediations, report risk status, and provide training and governance support.

Operate vulnerability scanning (Nessus), manage McAfee and Splunk agents/policies, monitor AWS security controls, support incident response and security operations, assist with security hardening (RHEL), application security tasks, and participate in change control and ACI-related security activities.

Design and implement Identity & Access Management solutions (RSA SecurID). Lead process architecture, development/configuration, validation, deployment, and project/talent management. Requires extensive travel and strong communication and analytical skills.

Design, configure, validate and deploy Identity & Access Management solutions (RSA SecurID). Provide business process consulting, architecture/design, development/configuration, solution evaluation, and project/talent management in a consulting environment with regular travel.

Perform web and network penetration testing and secure code analysis using tools such as HP Fortify, WebInspect, Nessus, Burp, and IBM AppScan. Apply security frameworks (OWASP, NIST, ISO27001, PCI), analyze security NFRs/metrics, coordinate multiple projects, manage stakeholders, and support global delivery. Mobile security and telco domain experience are a plus.

Perform web and network penetration testing and secure code analysis using tools like HP Fortify, WebInspect, Nessus, Burp, and IBM AppScan. Apply security frameworks (OWASP, NIST, ISO27001, PCI), collaborate with stakeholders, coordinate projects, and work within global delivery teams. Mobile security and telco domain knowledge are a plus; relevant security certifications encouraged.

Lead application security activities including static and dynamic code analysis, penetration testing, and use of tools like Fortify, AppScan, CodeSecure, BurpSuite, Paros, and TemperIE. Perform development/configuration, solution validation and deployment, manage projects and talent, and work in a consulting environment requiring regular travel.

Lead application security consulting: define business processes, design secure architectures, perform source-code analysis and penetration testing, use Fortify/AppScan/CodeSecure and proxy tools (BurpSuite/Paros/TemperIE). Configure, validate, deploy solutions, manage projects and talent, and support client engagements requiring regular travel.

Lead vulnerability assessment and infrastructure security activities, manage AirWatch MDM and Symantec tools, develop/configure and validate security solutions, perform business process consulting, manage projects and talent, and travel regularly for management consulting engagements.

Lead infrastructure vulnerability assessment and security management activities, manage Air-Watch MDM and Symantec solutions, perform development/configuration/validation/deployment, provide business process consulting, and manage projects and talent in a consulting environment that requires regular travel.