Information Security Architect

About the role

The Network Security Architect role sits within the Chief Information Security Officer Office, reporting to the Director of Security Architecture and Engineering (SA&E).

Responsibilities

• Designs network security architecture from the ground up: firewall policy and configuration, network segmentation, Zero Trust access design, and cloud network architecture in Microsoft Azure.
• Leads technical migrations end to end: assesses the current environment, designs the target state, builds the configuration, and manages the cutover.
• Works directly alongside engineering through the build and implementation phase of every project they design, adjusting the design in real time when engineering encounters something the design did not account for.
• Reviews existing network security architecture, identifies gaps, and designs the remediation, including hands on work to resolve technical debt in legacy configurations.
• Affords assessments, scopes, and estimates the work and hours required to deliver security architecture components of larger projects and programs.
• Serves as the technical expert and trusted advisor to engineering, IT, and business partners on network security design questions.
• Documents and diagrams architecture in both conceptual and physical form, including the underlying configuration, not just high level diagrams.
• Works assigned Request Security Architecture (RSA) tickets and related efforts in ServiceNow.
• Stays current on emerging network security technologies and threats and incorporates them into architecture as needed.

Qualifications

• Bachelor's degree required, Computer Science, Information Security, or related field.
• Seven (7) years or more Experience in an Information Security Architect role required.
• Seven (7) years or more Experience with regulatory compliance and information security frameworks (NIST 800/CSF, ISO 27001, COBIT, etc.) required.
• Advanced, hands on knowledge of network technologies: protocols, design concepts, segmentation, and access control.
• Advanced, hands on knowledge of security technologies: encryption, data protection, access privilege design.
• Direct configuration experience with firewall platforms, not solely policy or diagram level experience.
• Comfortable working side by side with engineers through build and cutover, including off hours implementation windows when required.
• Strong communication skills, able to explain technical design decisions clearly to both engineers and non-technical stakeholders.