We have an Urgent opening .Please see the Job Description Below and let me know if you have any consultant available. *Role: **Arcsight / Windows Event Logging Consultant* *Location: Cumberland, RI* *Duration: 6+ months* This role’s responsibility will be to onboard Windows Event Logs from approximately 2300 devices throughout the infrastructure. This individual will need to have experience specifically with implementing Windows Event Logging through Windows Active Directory (AD) GPO configurations, establishing proper logging policies within AD GPO, and implementation of the Windows Event Forwarding / Collector (WEF / WEC) services. Experience with configuring and implementing Arcsight WUC/WINC SmartConnectors within the WEC a plus. Individual will be working primarily with Windows Server teams to implement controls, and must be able to communicate clearly the requirements and expectations. Experience / Skillset: Skillset will primarily be with implementing Windows Event Log collections within large environments to a sets of Windows servers running Windows Event Collector (WEC) services. Knowledge of applicable GPO configuration to enable Windows Event Forwarding (WEF) and Logging Configurations required. Experience with F5 configurations a big plus; experience with Arcsight WUC/WINC SmartConnectors a plus. *Scope:* • Configuration of four (4) Windows Servers 2012 with WEC service • Implementation of Active Directory GPO settings to implement WEF • Implementation of Active Directory GPO settings to enable system Logging *Objectives:* • Establish GPO configuration to implement WEF logging for a subset of Windows systems within the infrastructure through an F5 device configuration. • Establish GPO configuration to implement Logging policy of AD domain servers • Configure Windows Servers with WEC services. • Support and/or implement configuration of Arcsight SmartConnectors to collect and forward events from WEC servers to Arcsight environment. Thanks & Regards *Wasim Ahmed* Phone : 609-853-0818 X 2178 Fax : 609 799 5746 Email: wasim.ah...@nityo.com www.nityo.com -- You received this message because you are subscribed to the Google Groups "US_IT.Groups" group. To unsubscribe from this group and stop receiving emails from it, send an email to us_itgroups+unsubscr...@googlegroups.com. To post to this group, send email to firstname.lastname@example.org. Visit this group at https://groups.google.com/group/us_itgroups. For more options, visit https://groups.google.com/d/optout.