VMS -Network Security Consultant

Experience: 3 - 9 years Max Experience: 9 Network Security & Architecture • Secure Integration: Design, implement, and maintain secure network connectivity (including VPNs, SD-WAN, and Dedicated Circuits) between internal infrastructure and external VMS cloud environments. • Firewall Management: Configure, review, and manage Next-Generation Firewall (NGFW) policies, Access Control Lists (ACLs), and intrusion prevention systems (IDS/IPS) to protect VMS traffic. • Zero Trust Implementation: Apply micro-segmentation and Zero Trust Network Access (ZTNA) policies across all external vendor access points. Identity, Access, & API Security • Identity Governance: Implement and audit Single Sign-On (SSO), Multi-Factor Authentication (MFA), and SAML/OIDC integrations to support the VMS. • API Protection: Secure, monitor, and rate-limit APIs used for automated data transfers between the VMS and internal HRIS, ERP, or procurement systems. • Privileged Access: Administer and monitor elevated privileges for external administrators using Privileged Access Management (PAM) tools. Third-Party Risk & Compliance • Security Assessments: Perform technical security evaluations, vulnerability assessments, and penetration testing review activities for the VMS platform. • Compliance Alignment: Ensure the VMS environment meets regulatory requirements including SOC 2 Type II, ISO 27001, GDPR, and HIPAA. • Vendor Auditing: Conduct periodic audits of third-party vendor compliance with corporate information security policies and Service Level Agreements (SLAs). Monitoring & Incident Response • SIEM Integration: Integrate VMS logs into the corporate Security Information and Event Management (SIEM) platform to enable real-time monitoring and anomaly detection. • Incident Handling: Serve as the primary technical point of contact for security incidents, data breaches, or unauthorized access attempts that originate from or involve the VMS.