Cloud Security Domain Architect
Job Description:
Job Title:
Cloud Security Domain ArchitectDepartment:
Ferguson, Information SecurityReports To:
Manager Security Architecture and DeliveryWe have an exciting opportunity for a Cloud Security Domain Architect to join the Security Architecture and Delivery team, within the Ferguson IT organization.
The Cloud Security Architect will define strategies, roadmaps, priorities, solutions, processes, and security architectures for protecting corporate IT systems and data deployed into different types of cloud and cloud/hybrid environments, with a focus on Azure and Oracle Cloud services.
This position will directly contribute to the overall global enterprise cloud architecture and lead the security vision and strategy around cloud-based infrastructure, applications, and services across all types of cloud (including Infrastructure, Platform, and Software as a Service (IaaS/PaaS/SaaS).
The Cloud Security Architect will serve as a point of contact for technology teams within the organization around matters related to cloud security.
The successful candidate possesses the excellent interpersonal and communication skills required to partner with other leaders across the business to identify opportunities and risks and develop and deliver solutions that support business strategies and protect intellectual property globally.
This position is approved to sit 100% remote.
If local to the Newport News, VA area, you will have the option for in-office work.
DUTIES AND
Responsibilities:
Security Architecture (75%)Design and develop security architectures for cloud and cloud/hybrid-based systems.
Design and implement cloud-native architectures and designs that will meet business requirements and required capabilities within the delicate balance of speed and risk.
Represents Security in the development and implementation of the overall global enterprise cloud architecture.
Acts as the ambassador and technical representative for Enterprise Security in the cloud.
Works with Engineering, Infrastructure Services, and Application Development organizations to evaluate and choose appropriate technology solutions and facilitates complete integration into the company environments.
Engineering, Infrastructure Services, and Application Development.
Shares knowledge and experience across the enterprise by identifying, recommending, coordinating and producing solution designs in a timely manner.
Supports and drives the implementation of overall goals and business outcomes as defined by Enterprise Architecture and the Information Security organization.
Supports mergers and acquisitions by assuring security concerns are identified and managed throughout the approach and into closure.
Security Process Improvement and Organizational Alignment (25%)Develops standards, patterns, and roadmaps in partnership with other Architecture domains, Engineering, Infrastructure Services, and Application Development.
Document various artifacts in support of Architecture.
Identify and lead opportunities to engage, educate, and coordinate other stakeholders, upon which Security and its processes depend.
Understand Security and company objectives and develop support strategies and how they map to Security Service Offerings.
Additional Job Duties and ResponsibilitiesAdhere to all policies, rules, regulations, and procedures.
Perform other duties or functions as requested by management.
QUALIFICATIONS AND REQUIREMENTSFour (4) years of experience, or a four (4) year degree and two (2) years of security architecture experience within a cloud hosted environment.
Industry recognized certifications highly desired:
e.
g.
CISSP, CCSP, CISA, CISM, The Open Group Architecture Certifications, SABSA SCF/SCP/SCM, or other industry relevant certifications.
Experience working with cloud security and governance tools; Key Management Systems (KMS); cloud access security brokers (CASBs); IAM (Azure Roles); Data Security such as Data Loss Prevention (DLP) or Azure Information Protection (AIP) and Encryption technologies; ACL, Security Groups/Zones, and Firewall technologies; Intrusion Prevention; server virtualization technologies to include headless architectures, native compute, or containers and managed container services.
Experience in network security and security tooling implementation, integration, and processes such as vulnerability management, access controls, auditing, and compliance.
Experience with Security Operations Center methodologies, incident response planning and management, as well as threat intelligence integration capabilities and threat hunting analytics.
Ability to organize and prioritize work.
Ability to work on cross-functional teams.
Ability to work with all levels of the organization:
Executives to developers.
Strong ability to work with time/date deadlines.
Builds and maintains good working relationships.
Excellent written, oral, instructional, presentation, and interpersonal skills.
Possess a firm understanding of the offerings within the Microsoft Azure and Oracle cloud platformsProven ability in designing, documenting, and implementing a comprehensive and broad set of security technologies and processes in one or more relevant cloud domains (e.
g.
Application Security, data protection, cryptography, identity and access management (IAM), platform, or network security) within SaaS, IaaS, or PaaS.
Working knowledge of common cloud-native/cloud-friendly authentication mechanisms (e.
g.
OAuth, OpenID Connect, SAML, etc.
).
Ability to automate cloud-based configuration and administration using REST based APIs in support of a proof of concept or proof of viability initiative.
Capability to both perform and document threat models and execute design reviews to assess security implications and document requirements.
Strong written and verbal communication skills supporting the presentation of technical viewpoints and recommended business outcomes to a diverse set of audiences.
Ability to work on cross-functional teams, and within various levels of the organization:
from Senior Management to developers.
Familiarity with Architectural modeling languages such as ArchiMate, UML, BPMN, BPEL, etc.
Familiarity with formal architecture frameworks, such as Zachman, TOGAF, FEAF, DODAF, SABSA, etc.
Physical RequirementsRequires working indoors in environmentally controlled conditions.
Requires giving and/or receiving verbal communication.
Requires giving and/or receiving written communication.
Requires using a computer keyboard and mouse to create letters, memoranda, and reports.
Requires sitting for extended periods.
#LI-REMOTE -The Company is an equal opportunity employer as well as a government contractor that shall abide by the requirements of 41 CFR 60-300.
5(a), which prohibits discrimination against qualified protected Veterans and the requirements of 41 CFR 60-741.
5(A), which prohibits discrimination against qualified individuals on the basis of disability.
Salary:
$10.
12 - $15.
20.
Estimated Salary: $20 to $28 per hour based on qualifications.
|
|
 | |
