IT System Administrator & Security Specialist

Hitachi Rail; United States; Hybrid; USD 95,000 - 135,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

Job summary

Clever Devices, (Hitachi Rail CD U.S. Ltd.) seeks an IT System Administrator & Security Specialist for a hybrid role in the United States. You will plan, implement and maintain IT systems and security programs to protect data assets and ensure compliance with ISO/NIST standards.

Responsibilities include managing access controls, BitLocker, SIEM, CrowdStrike integration, and collaboration with IT, development, and compliance teams. Strong AD, Okta, SAML and vulnerability skills required.

Qualifications

• Bachelor's degree in CS/IT or equivalent experience.
• 3+ years IT security and systems administration experience.
• Proven experience with BitLocker, Active Directory, and ISO/NIST compliance.
• Experience with Okta, SAML, Entra AD, and access management.

Responsibilities

• Manage user access controls, permissions and authentication.
• Implement security measures for network infrastructure and VPNs.
• Maintain incident response plans and investigations.
• Serve as an Okta Administrator for access management.
• Ensure SAML is implemented wherever possible.
• Administer hybrid Windows and Entra AD infrastructure.
• Manage BitLocker across endpoints and servers.
• Monitor security logs, detect threats, and respond to incidents.
• Contribute to CrowdStrike deployment and regular security assessments.
• Collaborate with IT, development and compliance teams on security.

Skills

Okta Administrator

SAML

Entra AD

BitLocker

Firewalls/IDS/IPS

Incident response

Security monitoring

CrowdStrike

VPN

Log analysis

Education

Bachelor's degree in Computer Science or related field

Tools

Windows Active Directory

Entra AD

Group Policy

SIEM

PKI

Penetration testing tools

Job description

As THE leader in transit technology, Clever Devices, (Hitachi Rail CD U.S. Ltd.) vision is to make meaningful contributions to worldwide mobility. Our goal is to be the leading provider of exciting technology that improves the quality of mobility in communities around the world. We are continuing to grow, and are looking for a IT System Administrator & Security Specialist to join our team.

We are seeking a team-oriented, self-motivated individual with a passion for technology and a proven track record in IT systems administration and security to join our team. In this hybrid position, you will ensure the security and integrity of our organization's IT infrastructure.

As the IT System Administrator and Security Specialist, you will contribute to the planning, implementation, and maintenance of our organization's IT systems and infrastructure. You will also contribute to the development, implementation, and management of security policies, procedures, and technologies to safeguard our systems and data assets.

Responsibilities:

Administrative Functions:

• Manage user access controls, permissions, and authentication mechanisms.
• Implement security measures for network infrastructure, including firewalls, intrusion detection/prevention systems, and VPNs.
• Maintain incident response plans and participate in security incident investigations as needed.
• Serve as an Okta Administrator for company-wide access management.
• Ensure SAML authentication is implemented wherever possible.
• Administration, monitoring, and optimization of hybrid Windows and Entra AD infrastructure.

BitLocker Management:

• Implement and manage BitLocker encryption across all relevant endpoints and servers.
• Monitor BitLocker status and ensure encryption keys are effectively managed and securely stored.
• Troubleshoot BitLocker-related issues and provide timely resolution.
• Stay updated with BitLocker advancements and best practices to enhance security measures.

Security ISO Compliance:

• Ensure adherence to security ISO and NIST CSF standards such as ISO 27001, ISO 27002, and ISO 27018.
• Develop and maintain security policies, procedures, and documentation in accordance with ISO standards.
• Conduct regular audits and assessments to evaluate compliance status.
• Collaborate with internal teams to address non-compliance issues and implement corrective actions.

Security Monitoring and Analysis:

• Assesses the need for security reconfigurations (minor or significant) and executes them as required.
• Utilize security tools and technologies to monitor network traffic, detect anomalies, and respond to security incidents.
• Analyze security logs and reports to identify potential security threats or vulnerabilities.
• Monitor security incidents and respond to security breaches in a timely and efficient manner.
• Recommend and implement security enhancements to mitigate risks and strengthen defenses.
• Contribute to the company's CrowdStrike deployment to ensure security across all devices, identifying vulnerabilities and remediation.
• Conduct regular security assessments, penetration testing, and vulnerability scans to identify and mitigate potential risks.

Collaboration and Communication:

• Work closely with cross-functional teams, including IT operations, development, and compliance, to integrate security into all aspects of IT infrastructure and operations.
• Communicate security-related concepts and recommendations to technical and non-technical stakeholders effectively.
• Collaborate with external auditors and regulatory bodies during security audits and assessments.
• Collaborate with other departments to integrate security measures into IT projects and initiatives.
• Stay current on security trends, threats, and best practices to proactively address emerging risks.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or other related field and 3 years of IT security related work experience or additional work experience equivalency as noted below.
• Additional related work experience in lieu of education requirement: Four (4) years of related work experience. PLUS, another 8 years in place of the 4-year degree requirement.
• Proven experience in managing BitLocker encryption and maintaining security ISO compliance within a corporate environment.
• Proficiency in administering Windows Active Directory, Entra AD, Group Policy, and other relevant administrative tools.
• Strong understanding of network security principles, protocols, and technologies (e.g., TCP/IP, VPN, IDS/IPS).
• Experience with security assessment tools and techniques, including vulnerability scanning and penetration testing.
• Well versed in multiple security technologies such as SIEM; Intrusion Detection Systems; Endpoint security; PKI, SAML; Log Analysis; etc.
• Excellent analytical and problem-solving skills with a keen attention to detail.
• Effective communication and interpersonal skills, with the ability to collaborate with diverse teams and stakeholders.
• Knowledge of industry best practices and emerging trends in IT security.

Physical Requirements:

• Manual dexterity to operate, troubleshoot and install technology equipment and systems.
• Mobility to access, install and service computer and other technology-related equipment throughout company work sites.

Clever Devices, (Hitachi Rail CD U.S. Ltd.) is an Aff ...

n addition, Clever Devices, (Hitachi Rail CD U.S. Ltd.) offers a variety of benefits to eligible employees, including health insurance coverage, wellness and family support programs, life and disability insurance, retirement savings plans, paid leave programs, education-related programs, paid holidays and time off, and many others, depending on the level and position offered. Many of these benefits are subsidized or fully paid for by the company.

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change, or new ones may be assigned at any time with or without notice based on business need.