Information Security Architect

Rocket Central is a centralized hub that delivers thoughtful and innovative solutions for Rocket Companies®. We are the center of operations, technology, marketing, HR, legal, strategy and more that propels our companies forward. Here, we'll give you the opportunity to launch your career and work with various companies, spanning multiple industries from fintech, to auto and real estate. We offer you the tools you'll need to succeed, no matter what stage you're at in your career. You'll be able to master your craft here by working on complex problems in a collaborative culture and challenging yourself to make a real impact.

• 5 years of experience in an information security, architecture or engineering role OR bachelor's degree in information security, information technology or a related field and 2 years of experience
• Understanding of qualitative risk assessments and creating policies and standards
• Practical experience or working knowledge of the following: networking (Traditional, SDN), cloud platforms (AWS, Azure, GCP), infrastructure as code (IaC), OS configuration management and hardening (Windows, Linux, Mac), virtualization/containerization (Kubernetes, VMWare, Docker), identity management (OAuth, SAML, IDP), mobile security (MDM, MAM), encryption implementation (Architecture, PKI), database (Distributed, Operational, NoSQL), application development (API) and DevSecOps/SDLC

• 5 years of experience and bachelor's degree in information security, information technology or a related field
• Practical experience in qualitative risk assessments and creating policies and standards
• CISSP, GIAC, GSEC or other security certifications
• Advanced knowledge of one, some, or all of the following: networking (Traditional, SDN), cloud platforms (AWS, Azure, GCP), infrastructure as code (IaC), OS configuration management and hardening (Windows, Linux, Mac), virtualization/containerization (Kubernetes, VMWare, Docker), identity management (OAuth, SAML, IDP), mobile security (MDM, MAM), encryption implementation (Architecture, PKI), database (Distributed, Operational, NoSQL), application development (API) and DevSecOps/SDLC

• Collaborate with business, leadership, IT, project management, architecture and information security teams to enable the delivery of secure patterns and solutions that support our business
• Create standards and requirements for projects and process plans to ensure security is baked in
• Consult with teams to ensure data is properly handled throughout our environment
• Consult with information security analysts and engineering teams to ensure our standards and requirements enable the visibility and controls required to secure our enterprise
• Collaborate on qualitative risk assessment processes for systems and applications
• Collaborate with architecture teams to build new standards and patterns for IT and non-IT team members
• Evangelize and help to interpret information security standards and requirements for non-information security teams
• Create the requirements and patterns that align with information security initiatives, processes and standards
• Mentor information security team members