A cover letter is highly recommended for consideration for this position and should be attached as the first page of your resume. The cover letter should address your specific interest in the position and outline skills and experience that directly relate to this position.
 

Who We Are

The Information Assurance: Michigan Medicine (IA:MM) team was established to protect systems, data, and identities that Michigan Medicine relies upon. The team educates and prepares staff and students for increasing cyber threats and proactively mitigates IT security risks in partnership with the greater U-M community. The IA:MM team enables teaching, learning, research, and healthcare in a large, open environment by helping to balance risks and threats. IA:MM collaborates and coordinates with university efforts and participates in the development of university-wide security, compliance, and privacy strategies and strives to implement best practice cybersecurity efforts. 

The Assurance Platform Management Team at Michigan Medicine is seeking a candidate to fulfill the role of Product and Application Specialist. We are a team that focuses on how we can together help protect Michigan Medicine, patients, researchers, providers, students, data, systems, and identities from cybersecurity threats. We champion our staff, their backgrounds, interests, and abilities with opportunities for training career growth in an increasing critical field. In addition to the benefits of working at one of the best learning and research institutions in the world, we also promote the development of our talented staff's cybersecurity career within an equitable balance of work and home priorities. This position is being made available with the ability for you to negotiate alternative work schedules and remote/on-site options to suit your work-life balance. Non-Michigan residents should inquire about potential employment while working remotely in a state other than Michigan. Apply to be part of a strong team that partners with our institution, community, and each other.

Division's Mission

• We serve as a trusted partner and provide a best-in-class security program to uphold and protect the mission of Michigan Medicine.
   

Division's Vision

• We believe in cultivating a shared responsibility of security to enhance how we provide care, deliver education and create innovation to protect the quality of healthcare.
   

Division's Principles

• Prioritize your self-care, family-care, team-care, then the work.
• Implement balanced assurance solutions.
• Strengthen our department's capabilities.
• Develop an assurance-minded workforce.
• Focus on practical information assurance.

The University of Michigan's Information Assurance team at Michigan Medicine (IA:MM) is seeking a candidate to fulfill the role of Product and Application Specialist. This role will join the Assurance Platform Management Team within IA:MM and will report to the Assurance Platform Manager. The team is responsible for the lifecycle management, configuration, and optimization of the organization's on-premises, hybrid, and SaaS products. This role collaborates with stakeholders, vendors, and IT teams to ensure that our products are secure, reliable, and aligned with organizational needs.

A successful Product and Application Specialist must be a highly motivated, results-oriented and data driven professional that is willing to be part of the team helping to secure the highly dynamic environment within Michigan Medicine.

Product Administration

• Lead the implementation, configuration, and day-to-day management of our SaaS, hybrid, and on-premises products.
• Act as coordinator to business and service partners for the products they consume and build services on.
• Develop and maintain data and metrics for tracking product health.
• Use available tooling, such as ServiceNow, to track and align our products and services for all of MM:IA

Lifecycle Management & Strategy

• Create and maintain product roadmaps.
• Use sources like threat intelligence to help inform strategy and lifecycle decisions for products.
• Coordinate with the HITS enterprise hosting and infrastructure for server and hardware maintenance and upgrades.
   

User and Access Management

• Oversee identity integration (SSO, MFA) and ensure proper user support

Continuous Improvement

• Evaluate existing and new solutions for fit, cost, and value. Make recommendations for upgrades or alternative tools as business needs evolve.

Vulnerability & Risk Management

• Collaborate with security and compliance teams for audits and risk assessments.
• Mitigate vulnerabilities with business owners and vendors.

Change Management

• Facilitate the HITS Change Management process for tracking and managing changes.

Documentation

• Maintain up-to-date documentation of configurations, workflows, access controls, and vendor contacts.
• Curate and maintain required disaster recovery and business continuity processes.

Support and Troubleshooting

• Communicate service outages to end-users and support teams.

Senior Level

• Bachelor's degree in Computer Science, Computer Engineering, or Information Assurance or an equivalent combination of education and experience
• Minimum of 5 years of information technology experience
• Minimum of 3 years of experience applying security related technologies, practices, or services
• Minimum of 3 years of experience of direct security incident response

Intermediate Level

• Bachelor's degree in Computer Science, Computer Engineering, or Information Assurance or an equivalent combination of education and experience
• Minimum of 2 years of information technology experience
• Minimum of 2 years of experience applying security related technologies, practices, or services
• Minimum of 1 year of experience of direct security incident response

• Outstanding verbal and written communication skills
• Demonstrated success completing tasks within established deadlines
• Solid understanding of fundamental information security concepts including: Authentication, Authorization, Audit, Encryption, Firewalls
• Solid understanding of fundamental security related practices including: Risk Management, Incident Response, Vulnerability Management, Penetration Testing, IDS/IPS, System and Application Hardening, Identity and Access Management, Security Information and Event Management, Firewall management, IDS/IPS
• Extensive experience with scripting languages, like Python and Bash
• Comprehensive experience using REST APIs
• Exposure to Ansible automation and associated GUI front end like Rundeck
• Experience assessing the security architecture of proposed IT solutions
• Detailed understanding of the assurance implications associated with cloud-based solutions
• Experience securing virtualized environments
• Extensive system administration background with Microsoft, Macintosh and *nix environments
• Detailed understanding of security controls for Windows, Macintosh, Linux, and Networking platforms
• Demonstrated success working across organizational boundaries
• ITIL v2 Foundation Level certification

This position is being made available with the ability for you to negotiate alternative work schedules and remote/on-site options to suit your work-life balance. 

Non-Michigan residents should inquire about potential employment while working remotely in a state other than Michigan. Apply to be part of a strong team that partners with our institution, community, and each other. 

Positions that are eligible for hybrid or mobile/remote work mode are at the discretion of the hiring department. Work agreements are reviewed annually at a minimum and are subject to change at any time, and for any reason, throughout the course of employment. Learn more about the work modes.

This position may be underfilled at a lower classification depending on the qualifications of the selected candidate.

Benefits

We offer a benefits package that includes comprehensive training and career development opportunities, generous retirement savings plans, ample paid time off, and a wealth of family care support: https://careers.umich.edu/benefits

Michigan Medicine conducts background screening and pre-employment drug testing on job candidates upon acceptance of a contingent job offer and may use a third party administrator to conduct background screenings.  Background screenings are performed in compliance with the Fair Credit Report Act. Pre-employment drug testing applies to all selected candidates, including new or additional faculty and staff appointments, as well as transfers from other U-M campuses.

Job openings are posted for a minimum of seven calendar days.  The review and selection process may begin as early as the eighth day after posting. This opening may be removed from posting boards and filled any time after the minimum posting period has ended.

The University of Michigan is an equal employment opportunity employer.