Director, IT Security

Bluebird Fiber; Kansas City (MO); On-site; USD 180,000 - 240,000; Full time

Job summary

Bluebird Fiber, a premier Midwest fiber telecommunications provider, seeks a Director of IT Security to design and implement our cybersecurity strategy for on-prem and cloud environments. You will lead security governance, IAM, and vendor relations while maturing our vulnerability management and AI governance programs.

The role requires 10+ years in cybersecurity with cloud and enterprise deployments, plus strong communication to influence stakeholders and ensure secure business growth in Kansas

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related technical field.
• 10+ years of hands-on experience in Cybersecurity, IT Service Management, Network Engineering, or related field, with a proven track record of building secure, friction-less experiences.
• Proven experience (5+ years) designing and implementing enterprise-level cloud environments, preferably through Terraform.
• Experience (5+ years) managing Microsoft InTune and Purview environments.
• Experience (5+ years) managing Palo Alto firewalls and related technology.
• Experience (5+ years) managing Tenable.io or other Nessus vulnerability scanners.
• Scripting experience (5+ years) with Python and Powershell to automate various Microsoft 365 or internal processes.
• Experience (5+ years) with AWS technologies, including EC2, EKS, Fargate, and Cloudwatch.
• Experience (1+ years) with Generative AI governance and security design;
• Knowledge of how to design and implement network device access utilizing HPE Aruba Clearpass Policy Manager.
• Experience (5+ years) developing Security Policy documentation.

Responsibilities

• Lead the IT Security team and direct security strategy across the organization.
• Protect employees, customers, data, network, and assets from threats.
• Manage IT Security vendor relationships including MSSPs.
• Design and implement Palo Alto Firewall deployment and remote access solutions.
• Oversee vulnerability management programs and policy development.
• Maintain Vendor Management and Generative AI usage policies.
• Manage IAM platforms (on-prem and cloud) and enforce MFA & SSO.
• Guide security posture for on-prem and cloud infrastructure and coordinate audits.
• Develop disaster recovery procedures and security awareness training.

Skills

Security leadership

Cloud security strategy

Security governance

Communication

Threat management

Education

Bachelor’s degree in Computer Science or related field

Tools

Terraform

Microsoft InTune

Palo Alto firewalls

Ten able.io / Nessus scanners

Python

PowerShell

AWS (EC2, EKS, Fargate, CloudWatch)

Aruba Clearpass

Job description

• Location 8330 Ward Parkway,Suite 500,Kansas City, MO, 64114,United States

Description

ABOUT THE COMPANY :

Bluebird Fiber is a premier fiber telecommunications provider of internet, data transport, and other services to carriers, businesses, schools, hospitals, and other enterprises in the Midwest. To learn more, please visit bluebirdfiber.com .

Join an amazing team of telecommunication professionals! Bluebird is a dynamic growing company in need of a Director, IT Security to be a part of a collaborative team. This is a full-time, benefit eligible position. All of us at Bluebird work hard to meet objectives for the organization and live the mission and values of this growing company to meet a common goal. Check out this video that highlights our amazing company culture.

POSITION PURPOSE:

We are seeking a highly skilled IT Security Director to help secure the infrastructure, communications, and data within the organization. This important role will be responsible for designing the organization's cybersecurity strategy. Elements of this strategy will include a defense-in-depth platform; leading the team responsible for implementing and monitoring those defenses; managing security vendor relationships; spearheading security audits; creating security procedures and policies; and ensuring that our systems are secure, reliable, safe, and accessible for business-critical functions. The ideal candidate is an experienced security practitioner and leader who can work with stakeholders throughout the business to understand existing systems, networks, and technologies to secure them as the business grows. This position is full-time and is in the Kansas City, Missouri area.

Requirements

Education & Experience:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related technical field.
• 10+ years of hands-on experience in Cybersecurity, IT Service Management, Network Engineering, or related field, with a proven track record of building secure, friction-less experiences.
• Proven experience (5+ years) designing and implementing enterprise-level cloud environments, preferably through Terraform.
• Experience (5+ years) managing Microsoft InTune and Purview environments.
• Experience (5+ years) managing Palo Alto firewalls and related technology.
• Experience (5+ years) managing Tenable.io or other Nessus vulnerability scanners.
• Scripting experience (5+ years) with Python and Powershell to automate various Microsoft 365 or internal processes.
• Experience (5+ years) with AWS technologies, including EC2, EKS, Fargate, and Cloudwatch.
• Experience (1+ years) with Generative AI governance and security design;
• Knowledge of how to design and implement network device access utilizing HPE Aruba Clearpass Policy Manager.
• Experience (5+ years) developing Security Policy documentation;
• Excellent written and verbal communication skills, with the ability to influence and build consensus with other business units.
• Professional certifications in cybersecurity, networking, AWS, or Microsoft systems management preferred.
• Telecommunications industry experience preferred.

Skills & Abilities:

• Highly motivated, self-starter with a strong sense of duty
• Continual learner, eager to engage with industry trends and new technologies
• Critical thinking, analytical, and problem-solving skills with the ability to troubleshoot and devise a course of corrective action
• Holds people accountable and can keep teams focused
• Highly organized and efficient with the ability to multitask, prioritizes tasks appropriately
• Goes above and beyond to solve complex problems
• Productive without sacrificing quality, maintainability, accessibility, or performance; perform duties at a high degree of accuracy
• Welcomes giving and receiving feedback, while handling such in a positive and respectful manner

Summary

Primary Responsibilities:

• The IT Security Director will be responsible for leading the IT Security team;
• Protecting the company’s employees, customers, data, network, and all other assets from internal and external threats;
• Managing IT Security vendor and partner relationships, including MSSPs;
• Determining Palo Alto Firewall deployment design and remote access solutions;
• Designing and administering a vulnerability management program;
• Developing and maintaining a Vendor Management program;
• Creating and sustaining responsible Generative AI usage policies;
• Managing on-premises and cloud Identity & Access Management platforms;
• Designing and implementing Multi-Factor Authentication (MFA) and Single Sign-On (SSO) for all possible systems.
• Designing and managing on-premises and cloud infrastructure security posture;
• Leading required compliance audits;
• Performing regular access and system log reviews;
• Researching and creating plans to implement advanced information security techniques;
• Creating and maintaining Information Security policy documentation;
• Working with stakeholders during discovery, design, and implementation of new technologies to ensure they are set up with security in mind upfront;
• Handling IT Service Management trouble tickets as advanced-level support for internal users in security related matters;
• Creation and maintenance of Disaster Recovery procedures and documentation;
• Budgeting and planning responsibilities for IT Security expenditures;
• Designing current backup and restore procedures for company systems;
• Selecting and utilizing tools to safeguard company resources and data;
• And designing and leading internal security awareness training programs.