Information Security Architect Sr. (2026-0913)

About the Role

The Information Security Architect Sr. is responsible for ensuring the confidentiality, integrity, and availability (CIA) of VMC computer systems and information to safeguard personnel and patient safety, while maintaining compliance with HIPAA, PCI-DSS, cybersecurity industry best practices, frameworks, and standards.

Responsibilities

• Configure, manage, and operate security tools including firewalls, AV, SIEMs, SEG, PKI, etc.
• Conduct internal risk assessments and threat hunting within the internal environment.
• Research, recommend, and implement changes to procedures, systems, or infrastructure to enhance security and address non-compliance.
• Review and recommend updates to team-related procedures, resources, and documentation.
• Research and recommend patching for known threats and zero-day vulnerabilities.
• Provide security guidance for new technology requests and implement security training and awareness campaigns.
• Assist lower-level analysts and take instruction from senior-level analysts and supervisors.
• Design, engineer, and architect network, endpoint, and infrastructure security.
• Perform HR-approved internal audits and recommend new technology to advance the security posture.
• Manage the risk registry and design training materials.

Qualifications

• Working knowledge of scripting languages (Python, PowerShell) and automation.
• Experience securing cloud services (Azure, AWS) and operating systems (Windows, Mac, Linux).
• Experience with securing networking, wireless, and virtual environments, including subnetting, segmentation, and zero-trust zones.
• Professional experience with PKI/certificate authority, OpenSSL, SEG, NGFW, AV, EDR, SIEMs, and SOC management.
• Experience with multi-factor authentication implementation.
• Familiarity with security compliance standards (HIPAA, PCI-DSS, GDPR) and frameworks (HITRUST, NIST, OWASP, ISO 27000, SANS CIS 20, STIGs, ITIL).
• Understanding of the OSI model, TCP/IP protocol suite, vulnerability management, and patch cycles.
• Experience with risk assessments, pen-tests, table-top exercises, BCDR, and change management.
• Ability to write and implement IT policies, CSIRT plans, and training programs.

Requirements

• Master's degree in computer science + 4 years experience, OR Bachelor's degree + 5 years experience, OR Associate's degree + 6 years experience, OR 7 years industry experience.
• Advanced-level information security certification (e.g., (ISC)2, OffSec, EC-Council, GIAC, CompTIA).
• Experience as a Cybersecurity Practitioner, SOC Analyst, Risk Assessment Auditor, Penetration Tester, Incident Response Handler, or Computer Forensics Investigator.
• Up to 3 years of Systems Administrator or Network Engineer experience may be considered.

Physical/Mental Demands and Working Conditions

• Ability to lift up to 70 lbs.
• Handle highly confidential information with discretion.
• Work independently or on a team with minimal instruction, both onsite and remotely.
• Manage multiple tasks with tight deadlines and prioritize effectively.
• Demonstrate professionalism, collaboration, and excellent communication skills (verbal and written).
• Stay updated on cybersecurity events and zero-day exploitations.
• Exhibit critical thinking, problem-solving, and attention to detail.

Location: Renton, WA
Schedule: Typically Monday - Friday (hours may vary)
Salary Range: $116,909 - $175,364/annual DOE