Enterprise Security Architect

Job Description

• Design, Implement, Document, and maintain complex security infrastructure to support Application development under-defined
• Help teams maintain and follow Security Architecture Best Practices, and established standards, and provide solutions/proof of concepts.
• Create, document, and promote a detailed security architectural roadmap.
• Create, document, and promote security solutions consumable by development teams.
• Collaborate with lead cloud architects and peer Information Security teams
• Conduct platform, tool, and process assessments to evaluate existing security controls, identify weaknesses, and make recommendations and process improvements.
• Assess security threats and risks to define and implement appropriate architectural security models.
• Provide guidance to junior security staff and perform deep technical research on the security impacts of new technology.
• Ensure that the platform's security risk controls, mitigations, and approach are aligned with standards, IT, and business goals.
• Provide guidance to ensure security policy, compliance requirements, and best practices are implemented across the project portfolio.
• Broad technical experience in several security disciplines including endpoint and platform (Unix/Linux/Windows, mobile) controls, encryption/tokenization, identity and access management, PKI, data protection, and security tooling integration in complex

• Master's degree in information technology, cyber security, or related field.
• Expert level of knowledge with Cloud technologies; preferably AWS and Azure
• Experience within the transformation of traditional data center security measures into hybrid and Cloud deployment (AWS and Azure)
• Expertise across multiple security disciplines such as Data Protection, Compliance Validation, Vulnerability
• Experience with Network Security, Infrastructure Security (Active Directory, Group Policy, Endpoint management), CICD Security, Identity and Access Management, Logging and Monitoring, Incident Response, Data and Analytics, and Resiliency.
• Experience with Infrastructure as Code deployments and the security review process.
• Ability to communicate complex technical concepts to diverse audiences and guide leadership on value-added calculations and ROI of the technology the team is building.
• Hands-on experience with Security Services in Azure and in AWS such as IAM, KMS, VPC, Security Groups, AWS Inspector, and Guard Duty.
• Hands-on experience with Management Services such as CloudWatch, Lambda, and AWS Config.
• Hands-on experience in Infrastructure and Platform Services such as AWS Networking/VPC, EC2, and RDS.
• Knowledge and Hands-on Skills with Docker, ECS, Kubernetes, and Container Security.
• Experience with IT Security Frameworks such as HITRUST, PCI DSS, and NIST.
• Experience building security reference architectures for complex information systems based on industry frameworks and with AWS & Security Certifications such as CISSP (Certified Information Systems Security Professional), GISP (GIAC Information Security Professional), GSEC (GIAC Security Essentials Certification), AWS Certified Solutions Architect Associate, AWS Certified Security Specialty, AWS Certified SysOps Administrator
• Microsoft Certified Azure Security Engineer
• Experience using security architecture frameworks such as SABSA and or TOGAF