8-11-Security Architecture Consultant

Job Description

The Infrastructure Security Architect serves as a vital member of the Security Architecture Team, Information Security Office. This position will be part of a team that assists the Office of Information Technology and supports State of Maine (SOM) agencies with meeting the requirements set forth by the Information Security Office. This position provides a broad range of services in strategy and consulting, interactive, technology and operations, with digital capabilities across all of these services.

Key Responsibilities

• Define information security strategies, including guiding principles and future state vision, ensuring that the strategic objectives are aligned with business goals.
• Develop and implement security policies and standards in alignment with industry best practices, state and federal regulations, and emerging security technologies.
• Collaborate with internal and external stakeholders, including IT teams, vendors, and State agencies, to ensure that security measures are integrated into all technology solutions.
• Provide technical guidance and expertise to IT teams and other stakeholders on security-related issues.
• Work closely with customer stakeholders to identify and mitigate risks, perform security reviews, design top-tier security practices, and deliver strategic, innovative cloud-based security offerings.
• Lead the Network and Infrastructure Design and Architecture pertaining to the environment.
• Stay up to date on the latest security threats, trends, and technologies, and recommend solutions to mitigate risks.

Minimum Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• Minimum of 5 years of experience in information security, with at least 3 years in a security architecture or related role.
• In-depth knowledge of security principles and practices, including risk assessment and management, security architecture, compliance, and security testing.
• Experience with security technologies, including firewalls, intrusion detection and prevention systems, vulnerability scanners, and endpoint security solutions.