- >
- >
- [1473] Information Security Engineer
Information Security Engineer
Background
Registered in Iraq since 2011 with a presence in Erbil and Baghdad, iMMAP Inc. is implementing a project partnership with UNESCO aiming at operating, maintaining, training, and further developing the Education Management Information System (EMIS) for the Ministry of Education in Federal Iraq.
Description of Duties
Part of the EMIS project team, the Information Security Engineer will work under the supervision of the Senior Software Engineer. Throughout the project duration, including the technology transfer process, the Information Security Engineer will conduct comprehensive security assessments to identify and mitigate potential vulnerabilities within the EMIS and its infrastructure. To this end, he will implement and maintain robust security protocols, including access controls, data encryption, and activity logging. He will ensure that web application security protocols and digital certificates are up-to-date and properly configured. He will monitor server activity to detect and respond to suspicious actions or potential security breaches. The Information Security Engineer will also serve as the server administrator and will therefore be responsible for managing and monitoring the virtual servers (VMs) hosting the EMIS to ensure 99.8% uptime. They will perform routine server maintenance, including CPU, memory, and disk space monitoring to prevent performance issues, implement and manage automated backup and restore mechanisms to secure EMIS data, and respond to and resolve server-related issues to minimize system downtime.
Requirements
Education
University degree in Information Technology, mathematics, statistics, computer sciences or related area.
Experience
Mastery of the principles of data handling and processing.
Minimum 5 years of experiences in software development Minimum 4 years of experience in system level programming in C, C++, C#, or higher-level programming language. Knowledge of software engineering tools for conducting data analysis on collected data sets, including reviews of computer logs and messages, to identify and report any possible security related issues, or violations of security. Knowledge and experience in document control.* Years’ experience in web development
