Rubrik is changing the way enterprises work by transforming the way Systems Integrators and the managed services community that support our joint customer base do business. Using Rubrik’s unique Data Management technology, partners can develop & implement next generation data services.  This role will allow you the opportunity to help build new lines of business for both Rubrik and its partners.

Rubrik Cloud Data Management is a single software fabric that manages all application data in the cloud, at the edge, and on-premises.  This includes backup, recovery, archival, analytics, development, and integration with today’s major public cloud providers. Rubrik enables hybrid cloud enterprises to mobilize applications across clouds, automate intelligent orchestration workflows to enable self-service, and search and analyze application data at scale.

Rubrik has partnered with the World’s leading Global Systems Integrators to develop successful and profitable outcomes for all involved parties. The GSI Sales Engineer candidate will be responsible for building services, driving pipelines for those services, and the broad and deep enablement of select Global Systems Integrators. The GSI Sales Engineer comes to the role with a background that includes: service creation, revenue modeling, large technical proposal authoring, and a successful track-record of managing the technical element of Global partnerships. In addition to the business skills needed, successful candidates will need to demonstrate a high technical acumen with respect to storage, virtualization, and windows/linux management.   SD-WAN and Scripting (python and PowerShell) are highly desirable skills.  This candidate will lead from the front, communicate openly, and set the example of a positive and collaborative work environment.

Required capabilities & experience:

• Successful experience partnering with Global GSIs to create and consume services 
• Provides technical leadership and direction to partners and internal staff in the development of fully integrated technology solutions   
• Architectural experience in complex infrastructures including virtualization, application high-availability, distributed systems, file systems, RDBMS, disaster recovery, public cloud, and security
• Acts as technical expert to develop partner delivered solutions that meet the technology and business requirements
• Serves as a trusted technology advisor and that delivers technical and sales presentations to partners’ technical staff and senior management
• Exemplary relationship building skills with proven ability to drive lasting relationships of mutual value with partners and sales team

Desired capabilities & experience:

• 7-8+ years of sales engineering experience preferably in a software or data center environment
• Driven – need for success, highly energetic with a strong hands-on, “can do” approach
• Entrepreneurial - willing to go the extra mile, strong work ethic, resourceful, “get it done” attitude
• Follow Up - thrives in a moving, fast-paced environment handling multiple activities per day with immediate follow up
• High business acumen and experience working with CxO level personnel, bringing technology solutions to solve complex business challenges
• Ability to demonstrate Rubrik’s RIVET values. To be a role model leading as part of a united management team, collaborating, creating a positive environment

#LI-MR2 

Simtra BioPharma Solutions (Simtra) is a world-class Contract Development Manufacturing Organization, partnering with pharmaceutical and biotech companies to bring their sterile injectable products to market. With facilities in Bloomington, Indiana, US and Halle/Westfalen, Germany, we offer a wide range of delivery systems including pre-filled syringes, liquid/lyophilized vials, diluents for reconstitution, powder-filled vials and sterile crystallization.  

Our product types include biologics and small molecules, cytotoxics, highly potent compounds, diluents for reconstitution and vaccines – which are all directly injected into patients worldwide.  As such, there is a strong emphasis on quality and continuous improvement at Simtra.  We hold ourselves to the highest quality and regulatory standards.

While our primary focus is cGMP manufacturing, we offer many support services including formulation and development, lyophilization optimization, global regulatory support and secondary packaging.  Our teams are driven to help clients scale, innovate and bring life-changing medicines to patients worldwide.

Why join Team Simtra? Because we:

Make it HAPPEN – We bring a growth mindset to every opportunity, developing new skillsets and exceeding our expectations and those of our customers.

Make it TOGETHER – We work as one, respecting each voice and tapping into our unique strengths across teams—so we can solve problems in new ways.

Make it RIGHT – We hold ourselves to a high standard of excellence, fulfilling our commitments to the customer, their patients, and our team members.

Make it COUNT – We take pride in our day-to-day work, knowing the impact we make – taking on challenges big and small to improve patient health.

Senior Desktop Engineer and Executive Support

Overall: The Senior Desktop Engineer and Executive Support serves as the primary Endpoint Manager, responsible for managing all endpoint devices using Microsoft Intune and SCCM to ensure security, compliance, and optimal performance. This role requires deep expertise in Windows operating systems, including registry management, Autopilot, Active Directory (AD), and group policies. The position emphasizes endpoint security, efficient deployment strategies, and enterprise device reliability. Additionally, the Senior Desktop Engineer acts as the on-site technical expert at our Global Headquarters in Parsippany, NJ, providing white-glove IT support to executive leadership and efficient IT support to corporate employees on-site and remotely.

Key Responsibilities:

1. Endpoint & Device Management:
• Serve as the primary Endpoint Engineer, managing endpoints with Intune and SCCM.
• Develop, design and support our desktop image, autopilot deployment scripts, and group policies to fully control, secure, and manage our desktop and workstation environments.
• Oversee application deployment for Win32, MSI, and line-of-business apps.
• Monitor device health, troubleshoot, and resolve issues proactively.
2. Windows Operating System Expertise:
• Manage Windows OS, including registry settings, updates, and servicing models.
• Create and manage GPOs for user and device configurations.
• Administer endpoints in Active Directory and Azure AD.
• Troubleshoot advanced OS issues, including performance and compatibility.
3. Security and Compliance:
• Manage endpoint security tools (Defender, BitLocker, AppLocker).
• Ensure compliance with frameworks like NIST and ISO 27001.
• Configure Conditional Access policies integrated with Intune and Azure AD.
4. Executive & VIP Support:
• Provide white-glove IT support to executive leadership.
• Quickly resolve critical issues and act as a trusted advisor for VIP users.
5. Corporate IT Support:
• Resolve technical issues for on-site and remote corporate employees.
• Troubleshoot hardware and software problems efficiently.
6. Automation and Scripting
• Use PowerShell to automate endpoint tasks, app packaging, and deployments.
• Develop scripts to improve efficiency and resolve recurring issues.
7. Audio/Visual & Collaboration Tools:
• Manage AV systems, including Teams Rooms, for events and meetings.
• Test and monitor AV readiness and support high-profile events.
• Ensure seamless integration of M365 tools like Teams and OneDrive.
8. Incident & Problem Management:
• Serve as the primary interface to Microsoft for Windows and desktop-related issues.
• Provide Level 3/4 support, collaborating with IT teams and vendors.
• Identify recurring problems and implement long-term solutions.
9. Infrastructure & Networking:
• Maintain local network infrastructure and perform server administration to ensure the reliability, security, and optimal performance of critical IT systems.
10. Project Management
• Build and maintain strong relationships with corporate users, including executive leadership
• Lead endpoint refreshes, rollouts, and migrations.
• Work with teams to implement new endpoint policies and technologies.

Candidate Requirements:

• Bachelor’s degree (Preferred) in information technology, Computer Science, or a related field.
• Certifications (Preferred): Microsoft Certified (Endpoint, M365, Azure, and/or Teams), ITIL Foundation; CompTIA A+, Network+, Security+
• 8+ years of experience in IT support roles, with at least 3+ years focused on endpoint management using Intune and SCCM
• Extensive expertise in:
• Microsoft Intune: Enrollment, compliance policies, Autopilot, and Conditional Access.
• SCCM: Imaging, application packaging, and software/patch deployment.
• Windows OS: Registry, updates, GPOs, Active Directory, and troubleshooting.
• Endpoint security tools: Windows Defender, BitLocker, AppLocker.
• Strong PowerShell scripting skills for automation and efficiency.
• Strong knowledge of networking, including DNS, DHCP, and VPN for endpoint connectivity.
• Experience with ServiceNow or similar ITSM tools, and remote support technologies
• Exceptional problem-solving skills and ability to handle high-pressure situations.
• Excellent communication and interpersonal skills, with experience supporting executives
• Highly organized and detail-oriented, with the ability to manage multiple priorities effectively.

Why Join Us?
As the Lead IT Support Engineer, you’ll play a crucial role in shaping the technology experience for our executive leadership and broader employee base. This is an exciting opportunity to drive impactful IT initiatives in a fast-paced, biopharma environment.

In return, you’ll be eligible for [1]:

• Day One Benefits
  • Medical & Dental Coverage
  • Flexible Spending Accounts
  • Life and AD&D Insurance
  • Supplemental Life Insurance
    • Spouse Life Insurance
    • Child Life Insurance
  • 401(k) Retirement Savings Plan with Company Match
  • Time Off Program
    • Paid Holidays
    • Paid Time Off
    • Paid Parental Leave and more
  • Adoption Reimbursement Program
  • Education Assistance Program
  • Employee Assistance Program
  • Community and Volunteer Service Program
• Additional Benefits
  • Short and Long-Term Disability Insurance
  • Voluntary Insurance Benefits
    • Vision Coverage
    • Accident
    • Critical Illness
    • Hospital Indemnity Insurance
    • Identity Theft Protection
    • Legal and more
  • Onsite Campus Amenities
    • Workout Facility
    • Cafeteria
    • Credit Union

[1] Current benefit offerings are in effect through 12/31/26

The pay range reflected represents what we reasonably expect to pay for this job.  The pay offered will depend on factors such as the candidate’s education, experience, skills and geographical location.  In addition to base pay, employees are eligible to participate in an annual bonus plan and employee ownership plan.  Eligible employees also receive a comprehensive and highly competitive benefits package, including a variety of health, retirement, caregiving, emotional wellbeing, and other flexible benefits – plus elective options to support the diverse needs of our workforce.

Salary Range – New Jersey

$120,000 - $135,000 annually.

Disclaimer

This job description is intended to provide the minimum knowledge, skills and abilities necessary to perform the job.  It may not be inclusive of all the duties and responsibilities of the job.  Simtra reserves the right to make modifications based on business requirements.

Equal Employment Opportunity

Simtra is proud to be an equal opportunity employer. Simtra evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability/handicap status or any other legally protected characteristic.
                                                                                                                                                            
EEO is the Law 
EEO is the law - Poster Supplement 
Pay Transparency Policy

Data Privacy

To learn more about Simtra's approach to data privacy, please review the Simtra Recruitment Platform Global Privacy Policy:

https://biopharmasolutions.baxter.com/simtra-recruitment-platform-privacy-policy

We are looking for a Cybersecurity Engineer to join our Corporate IT Team in NYC!

ROLE AND RESPONSIBILITIES:

The Cybersecurity Engineer is a hands-on technical role responsible for implementing, maintaining, and optimizing security controls across our hybrid infrastructure environment serves as a subject matter expert in designing, implementing, and administering our comprehensive security technology stack. This role combines deep technical expertise in cybersecurity tools with hands-on system administration skills to support our self-hosted, on-premises security infrastructure. The ideal candidate combines infrastructure knowledge with a strong understanding of security operations, compliance requirements, technical implementation and testing and assessing risk.  They will be capable of supporting our security toolset including CyberArk, Splunk, OKTA, Tenable, SOAR platforms, and other security analytics solutions.

Responsibilities:

Vulnerability & Threat Management

• Conduct vulnerability assessments across containerized and traditional infrastructure
• Perform ethical hacking and penetration testing to identify security weaknesses on our applications periodically and at times of new releases.
  • Candidates should have a CEH and be familiar with Nmap, Wireshark, Metasploit, Hydra and Burp to name a few.
• Lead remediation efforts and track vulnerability lifecycle management
• Analyze security alerts and incidents, performing root cause analysis
• Contribute to threat hunting activities and security monitoring

Security Platform Architecture support and administration

• Administer and optimize enterprise security tools including SIEM, EDR, vulnerability scanners, and container security platforms
• Manage security aspects of VMware infrastructure, storage systems, and network segmentation
• Configure and maintain authentication systems (SAML, RADIUS) and identity management platforms such as OKTA.

Security Tools Administration & Management

CyberArk Privileged Access Management

• Administer CyberArk PAS (Privileged Access Security) including Vault, CPM, PSM, and PVWA components
• Configure privileged account onboarding, password management policies, and access workflows
• Implement CyberArk integrations with Active Directory, applications, and infrastructure systems
• Manage CyberArk clustering, disaster recovery, and high availability configurations
• Troubleshoot CyberArk performance issues and optimize system configurations

Splunk Enterprise & Security Operations

• Administer Splunk Enterprise infrastructure including indexers, search heads, and forwarders
• Configure and maintain Splunk Enterprise Security (ES) for security monitoring and incident detection
• Develop custom Splunk searches, dashboards, and alerts for security use cases
• Manage Splunk data models, knowledge objects, and correlation rules
• Optimize Splunk performance, storage management, and cluster operations

Vulnerability Management & Security Testing

• Administer Tenable Security Center and Nessus scanning infrastructure
• Configure vulnerability scanning policies, schedules, and remediation workflows
• Integrate vulnerability data with other security tools and ticketing systems
• Develop custom vulnerability reporting and metrics dashboards
• Coordinate vulnerability assessment activities and penetration testing support

Security Orchestration & Response (SOAR)

• Implement and maintain SOAR platforms for security automation
• Develop automated playbooks for incident response, threat hunting, and remediation activities
• Create custom integrations between the SOAR platform and existing security tools
• Design automated workflows for security alert triage and response coordination
• Maintain SOAR platform performance and troubleshoot automation issues

System Administration & Infrastructure

• Test disaster recovery, and business continuity procedures for security systems

Security Operations Support

• Provide Level 2/3 technical support for security incidents and tool-related issues
• Participate in incident response activities and forensic investigations
• Develop and maintain security procedures and troubleshooting guides
• Support 24/7 security operations center (SOC) activities and on-call rotation
• Collaborate with security analysts to optimize detection rules and reduce false positives

Compliance & Governance

• Support compliance initiatives including SOC 2, PCI DSS, NIST SP 800-53 and regulatory audits
• Maintain security tool documentation, configurations, and change management procedures
• Implement logging and audit trail requirements for compliance frameworks
• Develop security metrics and KPI reporting for management and auditors
• Ensure security tools meet data retention and privacy requirements

Cross-functional Collaboration

• • Partner with IT infrastructure teams on security tool deployment and maintenance
  • Collaborate with application development teams on security tool integrations
  • Work with network teams to implement security monitoring and traffic analysis
  • Support risk management activities with technical security assessments
  • Provide security expertise for project planning and technology implementations

Desired Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience
• Relevant certifications preferred: CCSP, CISSP, GCIH, GCFA, Security+, CySA+, GSEC, or equivalent
• Vendor-specific certifications: CyberArk Defender/Sentry, Splunk Certified Admin/Architect, Tenable Certified Security Practitioner

Technical Skills - Core Platform:

Security Tools Proficiency (3+ years each)

• CyberArk: Deep experience with PAS components, policy configuration, and enterprise deployment
• Splunk: Advanced administration of Splunk Enterprise and Enterprise Security, including clustering and performance optimization
• Tenable: Comprehensive vulnerability management experience with Security Center, Nessus, and enterprise scanning
• SOAR Platforms: Hands-on experience with security orchestration tools (Phantom, Demisto, IBM Resilient, or similar)

System Administration (5+ years combined)

• Advanced Linux administration (RHEL, CentOS, Ubuntu) including shell scripting and automation
• Windows Server administration including PowerShell scripting and Active Directory integration
• Network security concepts and implementation (firewalls, IDS/IPS, network segmentation)

Security Specializations

• Enterprise PKI and certificate management
• Log aggregation, analysis, and correlation techniques
• Incident response procedures and forensic analysis
• Threat intelligence integration and threat hunting methodologies
• Security automation and orchestration best practices

Professional Experience

• 4+ years of cybersecurity experience with focus on enterprise security tools
• 4+ years of hands-on system administration in enterprise environments
• Experience with self-hosted, on-premises security infrastructure
• Proven track record of security tool implementations and migrations
• Experience participating in and supporting compliance audits and regulatory requirements

Additional Skills

• Strong scripting abilities (Python, Bash, PowerShell) for automation and integration
• Experience with API integration and custom security tool development
• Knowledge of cloud security platforms (AWS Security Hub, Azure Security Center) preferred
• Understanding of DevSecOps practices and CI/CD pipeline security
• Excellent troubleshooting and analytical problem-solving skills
• Strong documentation and technical writing capabilities

Key Competencies

• Technical Leadership: Ability to serve as subject matter expert across various Security tool sets.
• Problem-Solving: Advanced analytical skills for complex security tool issues and integrations
• Communication: Ability to explain technical concepts to both technical and non-technical stakeholders
• Project Management: Experience leading security tool implementations and upgrades
• Continuous Learning: Commitment to staying current with emerging security technologies and threats

Preferred Qualifications

• Degree in Cybersecurity or related field
• Experience in regulated industries (government)
• Advanced certifications: CISSP, SABSA, TOGAF, or specialized vendor certifications
• Experience with additional security tools: QRadar, Rapid7, Carbon Black, CrowdStrike
• Background in security architecture and enterprise security frameworks

*The salary reflected is a good faith estimate of base pay for the primary location of the position. Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay for this position is up to $155,000 annually. Pay will vary by work location and may also depend on job -related knowledge, skills, experience and abilities of the successful candidate. Your recruiter can share more about the specific salary range for the job location during the hiring process.

Keywords: #NYC #NewYorkCity #Manhatten, #Cybersecurity, Cybersecurity, CISSP, #CISSP, SecurityTools ,#SecurityTools, SIEM, #SIEM, #InfrastructureEnvirnonments, #CyberArk, CyberArk, #Splunk, Splunk, OKTA, #OKTA, Tenable, #Tenable, #SOARPlatforms, SOARPlatforms, #Telecom, Telecom, #Troubleshoot, #Engineering

Who We Are

Cross River builds the infrastructure behind the world’s most innovative financial products. Our technology and capital solutions power payments, cards, lending, and digital asset capabilities that move money safely, instantly, and inclusively — trusted by leading fintechs, enterprises, and disruptors across the globe.

Our mission is simple: to build the financial infrastructure that expands access and opportunity for all. Guided by a culture of collaboration, curiosity, and purpose, Cross River has been named one of American Banker’s Best Places to Work in Fintech year after year. Whether you’re designing code, solving regulatory puzzles, or developing strategy, you’ll join a team where innovation and integrity drive everything we do — and where your work helps shape the future of finance.

What We're Looking For

Cross River Bank is seeking a VP of Identity & Access Management (IAM) to build and lead a modern, risk-aligned, and automation-forward IAM program. Reporting to the VP of IT Security Engineering, this strategic and technical leader will drive the design, governance, and execution of IAM capabilities across our cloud, on-premises, and SaaS environments.

This role will be instrumental in maturing our identity lifecycle management, enforcing least privilege, and enhancing secure access governance—while ensuring compliance with FFIEC, SOC 2, PCI DSS, and other regulatory standards.

Responsibilities: 

Strategy & Leadership

• Define and own the bank’s IAM vision, roadmap, and architecture, aligned with security, compliance, and business goals.
• Build, lead, and mentor a small but high-performing IAM team, fostering a culture of collaboration, innovation, and accountability.
• Champion secure and scalable IAM practices across business units, product teams, and infrastructure domains.
• Partner with Engineering and Compliance to enhance identity governance maturity.

Lifecycle Management & Automation

• Oversee the design and automation of Joiner-Mover-Leaver processes.
• Drive implementation of access request workflows and access reviews through tools like ServiceNow, with tight policy enforcement and auditability.
• Reduce identity sprawl by enforcing role-based and attribute-based access controls (RBAC/ABAC).
• Support federated SSO and MFA rollout across all SaaS applications to eliminate shadow IT.

Privileged Access & Governance

• Lead the rationalization and control of privileged access across AWS, Azure (PIM), and legacy AD environments.
• Partner with Security Engineering and Audit to execute regular access reviews and design SoD frameworks.
• Define access certification cycles with actionable outputs for business owners.

Cloud & SaaS Identity

• Guide cloud identity strategies for Azure, AWS, and SaaS ecosystems to ensure secure and scalable access models.
• Collaborate with Engineering to securely onboard new SaaS vendors under centralized identity management and SSO.

Audit & Compliance

• Maintain IAM controls to meet FFIEC, SOC 2, and PCI DSS standards, and respond effectively to FDIC audits.
• Establish clear KPIs and metrics for IAM hygiene, access review coverage, and lifecycle automation.

Qualifications: 

• 10+ years in IAM, Information Security, or IT Risk roles, with 3+ years in a people management or technical leadership capacity.
• Hands-on experience with IAM platforms (e.g., SailPoint, Saviynt, Azure AD, CyberArk, Okta), ideally in a financial services or regulated environment.
• Deep knowledge of identity lifecycle automation, JML workflows, RBAC, ABAC, SSO, MFA, and PAM principles.
• Proven success aligning IAM strategy with risk, audit, and compliance functions.
• Familiarity with scripting or automation (PowerShell, Python) and modern identity protocols (SAML, OAuth2, OIDC, SCIM).
• Strong communication, influencing, and documentation skills; able to evangelize IAM to both technical and business audiences.
• Experience implementing or integrating with HRIS systems like Workday and ITSM systems like ServiceNow is a plus.
• Certifications preferred: CISSP, CISM, or vendor-specific IAM certs.

#LI-KR1 #LI-Hybrid #LI-Onsite 

Salary Range: $160,000.00 - $200,000.00