Position Overview

We are seeking an experienced Security Assurance Engineer to support application modernization and digital transformation initiatives. This role will be responsible for ensuring security is embedded throughout the project lifecycle, from design and development through testing and production deployment.

The ideal candidate will partner with project teams, developers, architects, vendors, and business stakeholders to identify security requirements, assess risks, coordinate security testing, prioritize and remediate vulnerabilities, implement security controls, and validate production readiness.

Key Responsibilities

• Define and document security requirements, controls, and acceptance criteria for applications and technology solutions.
• Review application architectures, integrations, data flows, cloud environments, identity solutions, and infrastructure designs to identify security risks.
• Perform risk assessments and recommend mitigation strategies.
• Coordinate security testing activities, including vulnerability scanning, static and dynamic code analysis, and penetration testing.
• Analyze security findings, prioritize risks, validate vulnerabilities, and work with technical teams to implement remediation plans.
• Support secure deployment of cloud, web, mobile, SaaS, and AI-enabled solutions.
• Assess security risks related to AI technologies, including large language models (LLMs), retrieval-augmented generation (RAG) solutions, and automated workflows.
• Collaborate with engineering teams to implement and validate security controls and vulnerability remediation efforts.
• Maintain security documentation, testing evidence, risk assessments, remediation tracking, and release-readiness records.
• Support incident investigation and assist teams with security-related issues and escalations.
• Coordinate with internal security teams, vendors, and service providers to ensure security requirements are met.
• Monitor project security posture and communicate risks, findings, and recommendations to both technical and non-technical stakeholders.
• Provide regular project status updates, including security testing results, open risks, remediation efforts, and deployment readiness.

Required Qualifications

• 5+ years of experience in application security, cloud security, security engineering, or a related field.
• Strong understanding of vulnerability management, risk assessment, and security testing methodologies.
• Experience with SAST, DAST, penetration testing, and vulnerability scanning tools.
• Knowledge of IAM, RBAC, cloud security, data protection, logging, encryption, and infrastructure security.
• Experience reviewing application architectures, integrations, and technical solutions from a security perspective.
• Familiarity with tools such as Jira, GitHub, security testing platforms, and cloud technologies.
• Strong experience documenting risks, remediation plans, security controls, and production readiness recommendations.
• Excellent communication skills with the ability to work across technical and business teams.

Preferred Qualifications

• Experience securing AWS, Salesforce, SaaS, or cloud-native applications.
• Experience supporting application modernization or cloud migration initiatives.
• Familiarity with AI security, including LLMs, RAG solutions, and AI-enabled applications.
• Knowledge of security frameworks such as NIST, ISO 27001, or CIS Controls.
• Relevant certifications such as CISSP, CCSP, CSSLP, or equivalent.

Senior Security Governance, Risk & Compliance Architect 5660

Hybrid | 18-24+ Month Contract

Tier4 Group is seeking a Senior Security Governance, Risk & Compliance Architect to lead security strategy, governance, compliance, and risk management for a large-scale cloud-based HR and Payroll modernization initiative. This is a highly visible leadership role responsible for establishing enterprise security frameworks, ensuring regulatory compliance, mitigating risk, and guiding security architecture across a complex SaaS environment.

What You’ll Do

• Lead enterprise security governance, risk management, compliance, and security architecture initiatives.
• Design and implement security controls for cloud applications, integrations, data conversion, and third-party platforms.
• Establish security policies, access controls, user provisioning/deprovisioning processes, and governance standards.
• Provide oversight of IAM, SSO, MFA, PAM, SIEM, DLP, encryption, and vulnerability management programs.
• Conduct risk assessments, compliance reviews, audit remediation, and security control validation.
• Drive security strategies related to disaster recovery, business continuity, incident response, and operational readiness.
• Partner with executive stakeholders, business leaders, technical teams, and vendors to ensure security requirements are embedded throughout the program lifecycle.
• Oversee vendor security compliance, SLA monitoring, and implementation of risk mitigation strategies.
• Advise on AI governance, secure use of AI-enabled technologies, and emerging security threats.

Required Experience

• 10+ years of experience in Security Architecture, Cybersecurity, Governance, Risk, and Compliance (GRC), or related leadership roles.
• Proven experience designing and implementing security programs for large enterprise SaaS environments.
• Deep expertise with:
• Identity & Access Management (IAM)
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Privileged Access Management (PAM)
• Security Information & Event Management (SIEM)
• Data Loss Prevention (DLP)
• Strong knowledge of security frameworks and controls including:
• NIST
• ISO 27001
• COBIT
• SOX
• ITIL
• Experience leading risk assessments, audit activities, compliance initiatives, and security remediation programs.
• Strong understanding of cloud security architecture and enterprise security operations.
• Excellent stakeholder management and executive communication skills.

Preferred Experience

• Workday Security
• Workday Prism
• Snowflake Security
• AI Security & Governance
• HRIS, Payroll, ERP, or enterprise SaaS transformation programs
• Azure Active Directory / Microsoft Identity Solutions
• Large-scale cloud migration and modernization initiatives
• Public sector or highly regulated industry experience

Technical Environment

Workday • Workday Prism • Azure AD • IAM • SSO • MFA • PAM • SIEM • Snowflake • JIRA • DLP • Cloud Security Platforms • Vulnerability Management Tools • Enterprise Compliance Frameworks

Ideal Candidate

You are a strategic security leader who can bridge business objectives and technical security requirements. You have successfully established security governance frameworks, implemented enterprise security controls, and driven compliance initiatives within large, complex cloud environments. You are comfortable working with executives, technical teams, and external vendors while championing security best practices across the organization.

Additional Details

• Contract Length: 18-24+ Months
• Hours: 37.5-40 hours per week
• Hybrid Schedule: Minimum of four onsite days per month
• Interview Process: Phone screening followed by multiple interview rounds
• Background Requirements: Background check, compliance verification, and professional references required

The BEST Technical Environment Manager will work for the BEST Deputy Program Manager and Solution Technical Lead to support the adoption of the future state Human Resource and Payroll system. Together with the BEST PMO, and BEST Program Operations Lead, and BEST Phase 2 Technical Lead, BEST Phase 2 Risk and Compliance Lead, Product Vendor, Systems Integrator (SI), Office of the Comptroller, and Executive Office of Technology Services and Security (EOTSS) staff to deploy technical configurations and manage the status of data to meet the evolving needs of BEST project throughout the project duration. Each environment will have specific data, end-user security, integration, and configuration needs.

The BEST Technical Environment Manager will be a part of the BEST Technical Implementation team and work closely with the other members of the BEST functional and Comptroller’s Risk and Compliance teams to develop and implement a comprehensive environment management solution. This includes:

• Support security policies, processes and standards related to end user roles and data access for application users.
• Provide operational support for the BEST team, product vendors, and CMW users, during the project.
• Provide necessary reporting and information about each environment.
• Support and oversee proper access to each non-production and production environment that will be needed to implement the new Human Resource Management and Payroll solution.

The BEST Technical Environment Manager is responsible for defining the standards, protocols, procedures, tools, and resources required to manage program’s technical environments during the project and prepare the environments for the on-going operations of the new Human Resource and Payroll solution. This role involves collaboration with a diverse team, including the System Integrator (SI) and product vendor, BEST Phase 2 Technical Lead, BEST Risk and Compliance Lead, and BEST Program Technical Operations Lead, EOTSS Operations, and others. The focus will be particularly on the SaaS software procured for this engagement. The BEST Technical Environment Manager will make recommendations based on the SI and product vendor’s maintenance and support standards and procedures, best practices, and Commonwealth business needs to maintain the new solution.

Specific Duties

The specific duties for the BEST Technical Environment Manager role, includes:

The roles and responsibilities of the SI, product vendor, and other Commonwealth staff regarding systems operation will be clearly identified in coordination with the Environment Manager, including such as:

• Manage and support the overall configuration of each environment in coordination with SI and Vendor, including but not limited to:

o User access status

o Data status

o Solution functional configuration – high level

o Integration solution status

o Monitoring SI and product vendor operational protocols and mitigation of identified issues.

o Manage timing and procedures for software upgrades and configuration updates

o Monitor performance of the infrastructure hosting solution

o Oversee Service Level Agreement (SLA) metrics for SaaS operations and support/maintenance services.

• Manage and support the detail configuration of each environment aligned with program business, testing, and technical needs

o Functions specific configuration and version

o Batch jobs supporting daily and other timing requirements

o Assisting in management of end user security.

o Support on-going and new configuration tasks.

• Designing and implementing a cross-system monitoring solution, including Cloud SaaS vendor, legacy on-premises vendor solutions, EOTSS responsible services, and other tasks that support the management of the end state business solution.
• Work with Commonwealth and BEST teams to implement, monitor status, and operational performance of connected Commonwealth integrated “touch points” appropriate for each environment, including but not limited to:

o CIW (data warehouse)

o Single Sign on (SSO)

o Mobius (reporting)

o Time Reporting System(s)

o PrintShop

o MOVEit (file sharing tool)

o Oversee and align typical operational support tasks such as data backups, application and network performance monitoring, and data, etc.

• Provide regular written communications on

o Reporting Environment status

o Coordination issues with CMW touchpoints, SI, Product vendor, Agencies, or other

o Provide regular status updates and status reports on the condition of each environment and it’s future plans.

• Ensure quality and effectiveness of operational documentation.
• Assist all phases and cycles of testing, including end-to-end testing, user acceptance testing, payroll parallel testing, and pre go live operational solution testing.
• Assist execution of “tabletop” operational reviews of end-to-end go live operational processes.
• Oversee on-going systems training for system administrators and operational support staff.
• Define protocols and tools to troubleshoot the system to maintain operational integrity and security.
• Coordination of efforts with SI and product vendor for upgrades and routine maintenance.
• Manage, oversee, and communicate the data refreshes into the various environments
• Participate in the BEST Program Maintenance and Operations Workstream to enable the future state operational solution, transitioning existing roles and responsibilities to agreed future business solution delivery model. This includes but not limited to:

o Provide advise on operational processes for business and IT

o Identify gaps in future state on-going operations

o Define regular / monthly maintenance functions

o Alignment of CMW managed components with Workday solution

o Identify best practices and recommend procedures and organizational structures for overseeing the day-to-day running of the new Human Resource and Payroll solution.

o Align with SI and product vendor and Commonwealth on roles and responsibilities for on-going systems maintenance tasks such as upgrades and defect fixes by the product vendor, and SLA reporting.

o Recommend procedures and tools for ensuring that the system delivers consistently on the Service Level Agreement (SLA).

o Recommend additional operational “unofficial” metrics, that simplify business and IT operational support functions.

o Recommend procedures and tools for troubleshooting software issues, applying patches, dealing with exceptions, and escalating problems in meeting SLAs.

o Recommend procedures for managing future upgrades.

o Support program technical workstreams, including: data conversion, integration, security, data oversight, and other as defined by BEST technical leadership.

o Work with the BEST Risk and Compliance Lead to recommend procedures for monitoring vendor data security protocols.

o Align with CTR, BEST, and EOTSS on disaster recovery testing and documentation approach by the product SaaS vendor and risk mitigation steps that the Commonwealth and the SI and product vendor could undertake to ensure business continuity and data security.

o Work with the BEST Risk and Compliance Lead to

 recommend procedures for provisioning end user security.

 ensure that compliance requirements are implemented as necessary

o Participate in the generation of detailed operational procedures and processes that will operate across multiple delivery partner environments and teams.

Required Skills

• Experience in technical configurations, technologies, and processing environments in one or more projects of similar size and complexity to BEST.
• Experience with system administration and monitoring for various application platforms particularly SaaS delivery models.
• Demonstrated experience at leading root-cause analysis (RCA) document creation and work with other administrators or integration developers to drive resolution.
• Experience with all phases of large program system implementation, including requirements definition, Testing: unit, system, integration, parallel, user acceptance, Go live conversion, and post go live on going operations.
• Experienced with LAN/WAN/VPN and remote network technologies and protocols (such as, but not limited to, TCP/IP, HTTP, FTP, Ethernet, token ring, ARCNET, HTML CGI, ATM, CDPD) routers, hubs, and servers.
• Experience at learning new technologies and vendor solutions and applying past experience to understand complexity and potential risks quickly.
• Excellent customer service attitude.
• Demonstrated written and verbal communication and interpersonal skills.
• Experience with Agile based operations.
• Demonstrated ability to work across multiple operational delivery partners and ensure quality and compliance to enable a business solution.
• Demonstrated experience in working in a 24 X 7 operational environment and business solution.

Preferred Qualifications

• Experience in designing and implementing Human Resource and Payroll based applications.
• Exposure to implementing end user security protocols in a large public or private sector entity comparable in size to the Commonwealth.
• Exposure with WorkDay Human Resource and Payroll solution, with an additional preference of implementation within a government agency.
• Exposure with WorkDay Prism data and reporting solution.
• Exposure with WorkDay user security management as a member of a business (non-IT) team.
• Experience with Software-as-a-Service cloud implementations particularly those in which legacy on premise applications have been migrated to cloud delivery options.
• Experience at implementing technical configurations, technologies, and processing environments in one or more projects of similar size and complexity to BEST.
• Experience with Audit, compliance, or governance actions.
• Experience in generation of operational materials, including but not limited to operational procedures, operational processes, third party operational oversight, support ticket / ticketing processes, data flow diagrams, sequence diagrams, and network and security diagrams.
• Experience in management of multiple environments within a large government IT solution implementation
• Experience in configuration management concepts and tools
• Experience with Microsoft security tools and functions
• Experience with Snowflake solution and security

Minimum Entrance Requirements

• Bachelor’s degree in computer science, system analysis or a related study, or equivalent experience.
• Minimum of seven years of overall IT experience
• Minimum of at least one large application migration project
• Minimum of three years of experience in operations architecture or definition role.

Technical Security Analyst

We are seeking an experienced Technical Security Analyst to support the implementation and ongoing operation of a large-scale Human Resources and Payroll platform. This role will focus on identity and access management, security controls, user provisioning, compliance, and operational security support across a complex enterprise environment.

Key Responsibilities

• Define, implement, and support end-user security roles, permissions, and access controls.
• Manage user provisioning and de-provisioning processes throughout the user lifecycle.
• Collaborate with technical teams, vendors, and business stakeholders to identify and implement security requirements.
• Support security operations, incident response, risk mitigation, and compliance initiatives.
• Configure and maintain security controls for enterprise applications and cloud-based systems.
• Monitor security logs, access reports, and system activity for unusual events and potential risks.
• Conduct security analyses, risk assessments, and business impact evaluations.
• Support implementation of identity management solutions, including Single Sign-On (SSO) and directory services integrations.
• Assist with data conversion, testing, implementation, and go-live readiness activities.
• Develop and maintain security policies, procedures, standards, and operational documentation.
• Provide guidance on data security, role-based access controls, and governance best practices.
• Coordinate with administrators and technical teams to resolve security issues and vulnerabilities.
• Support audit, compliance, and governance activities.
• Research emerging threats and recommend improvements to enhance security posture.
• Contribute to operational support processes and long-term maintenance planning.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
• Minimum 5 years of IT, security, risk, compliance, or operational security experience.
• Strong experience with Identity and Access Management (IAM) and Role-Based Access Control (RBAC).
• Experience supporting enterprise security operations within cloud and SaaS environments.
• Knowledge of enterprise security best practices, including data security, encryption, network security, and access management.
• Experience implementing and supporting security controls in large, complex organizations.
• Familiarity with security frameworks such as NIST, ISO 27001, COBIT, and ITIL.
• Experience with security risk assessments and compliance monitoring.
• Strong analytical, troubleshooting, and problem-solving skills.
• Experience with issue tracking and incident management tools such as JIRA.
• Excellent communication and stakeholder management skills.

Preferred Qualifications

• Experience supporting HR and Payroll platforms.
• Workday security administration experience.
• Experience with Workday Prism reporting.
• Experience with Azure Active Directory and Single Sign-On implementations.
• SaaS security and cloud transformation project experience.
• Audit, governance, risk, and compliance experience.
• Experience with Microsoft security technologies.
• Experience with Snowflake security administration.
• Experience transitioning legacy applications to cloud-based platforms.
• Experience supporting enterprise user security programs and access governance.

Top Skills

• Identity & Access Management (IAM)
• Role-Based Access Control (RBAC)
• SaaS & Cloud Security
• Security Risk & Compliance Management
• Workday Security Administration

Business Analyst

Position Summary
The Business Analyst serves as a key liaison between business stakeholders and technology teams, helping to translate business needs into actionable process and system requirements. This role supports strategic initiatives, application enhancements, and technology modernization efforts by gathering, analyzing, documenting, and validating business requirements. The ideal candidate is comfortable working in a dynamic, cross-functional environment and can effectively collaborate with stakeholders to deliver solutions that improve business operations and customer experiences. Experience supporting underwriting processes and platforms is highly desirable.

Key Responsibilities

• Gather, analyze, document, and validate business requirements, functional specifications, business rules, and testing requirements.
• Partner with business and technical stakeholders to identify opportunities for process improvement and technology enhancements.
• Document business requirements and translate them into detailed technical and functional specifications.
• Analyze process flows and system interactions to ensure alignment across applications, teams, and business functions.
• Serve as a liaison between business units and technology teams, facilitating communication and driving consensus on requirements and solutions.
• Translate customer, employee, and business needs into practical and measurable solutions that support organizational objectives.
• Create and maintain documentation to support product development, prioritization, implementation, and ongoing enhancements.
• Collaborate with business leaders, product managers, project teams, and technical resources to align requirements with strategic roadmaps.
• Support User Acceptance Testing (UAT), defect resolution, and validation activities to ensure solutions meet business expectations.
• Develop and maintain process documentation, procedures, and training materials related to system and process changes.
• Apply change management principles to support successful adoption of new processes, systems, and enhancements.
• Build strong cross-functional relationships to ensure effective delivery of projects and initiatives.
• Partner with underwriting stakeholders to support system enhancements, process improvements, and platform modernization initiatives, where applicable.
• Drive continuous improvement efforts and identify opportunities to increase efficiency and effectiveness across business processes.

Required Qualifications

• Bachelor’s degree or equivalent combination of education and experience.
• 7+ years of Business Analyst experience supporting complex projects, systems implementations, or technology initiatives.
• Strong experience gathering, documenting, and managing business and functional requirements.
• Experience supporting underwriting systems, underwriting operations, or similar risk evaluation and decisioning platforms.
• Knowledge of both Agile and Waterfall methodologies and related documentation practices.
• Experience facilitating stakeholder discussions and translating business needs into actionable deliverables.
• Strong analytical, problem-solving, and critical-thinking skills.
• Ability to understand both high-level business objectives and detailed process requirements.
• Excellent communication, documentation, and collaboration skills.
• Proven ability to work effectively across multiple teams, functions, and organizational levels.

Preferred Qualifications

• Experience with underwriting platform implementations, modernization efforts, or process transformation initiatives.
• Knowledge of life insurance, property & casualty insurance, financial services, lending, or other underwriting-related business functions.
• Strong process improvement and business process analysis experience.
• Familiarity with customer experience (CX) and user experience (UX) principles.
• Experience partnering with cross-functional teams to design, configure, test, and deploy solutions.
• Ability to adapt quickly to changing priorities and business needs.
• Experience with requirements management and collaboration tools such as Jira, Confluence, or similar platforms.
• Demonstrated success working in complex, matrixed organizations and managing multiple priorities simultaneously.