IT Cloud Security Architect

About the role

At Hackensack Meridian Health, our team members are the heart of what makes us better. We help our patients live better, healthier lives—and we help one another to succeed. With a culture rooted in connection and collaboration, our employees are team members who build, maintain, upgrade, and continuously improve cloud networks and cloud-based systems across the Hackensack Meridian Health (HMH) network.

The Cloud Security Architect is responsible for the operations of secure cloud infrastructure, platforms, and software. This role partners with Enterprise Architects, Infrastructure, Application, and Development Teams to develop a deep technical understanding of HMH's technology ecosystem. The architect conducts threat modeling, develops negative use cases and abuse cases, identifies weak points, constraints, trust assumptions, and other potential attack vectors, and documents and prioritizes these while advising technical teams on remediation.

Responsibilities

• Develop, document, and enforce cloud security policies, standards, and baselines through processes, reporting, and technical means.
• Monitor, benchmark, and report progress of cloud security threats, assets, and vulnerabilities.
• Work with asset owners and the vulnerability management team to identify and remediate cloud vulnerabilities.
• Participate in enterprise architecture review boards and provide security recommendations for new and existing vendor and user-developed cloud technologies and interfaces.
• Perform monitoring and analysis of cloud logs and data outputs; participate in security and incident tracking, monitoring, and reporting.
• Provide updates for daily and weekly metrics for cloud security events and reporting.
• Deploy and administer cloud security tooling and associated processes.
• Develop and maintain documentation for new and existing cloud processes and technologies.
• Stay informed and provide recommendations to cloud leadership on new and evolving cloud technologies, products, tooling, methodologies, threats, and risks.
• Develop, model, and evolve cloud attack vectors and design security and/or mitigating controls to mitigate risk.
• Perform cloud assessments using enterprise methodologies and industry best practices.
• Maintain the cloud risk tracker and report to business and technology leadership on the status of risks, mitigations, and remediation.
• Serve as a technical resource in the cybersecurity team’s efforts to build and deploy various configurations in the cloud and on-premise.
• Research and recommend new and evolving industry cloud technologies, solutions, management strategies, and effective resource utilization models to Senior Leadership.
• Build relationships with key IT and business leaders across HMH, including senior leadership.
• Learn on the job and explore new technologies with little supervision to identify new and emerging cloud threats.
• Other duties and/or projects as assigned.

Requirements

• Bachelor’s degree preferred, but would consider an Associate’s degree plus relevant experience.
• Minimum of 10+ years of overall cybersecurity experience, including time spent as an enterprise Cloud Security Architect or a similar role that builds and supports secure cloud environments for a large enterprise.
• Strong knowledge of cloud security concepts with SaaS, PaaS, and IaaS platforms and architectural knowledge of Google Cloud Platform (GCP) and Microsoft Azure cloud services.
• Wide breadth of knowledge across security products, tools, and industry trends; ability to create solutions using a pragmatic, risk-based approach.
• Strong knowledge of networking concepts and architecture, including security considerations associated with networking hardware like routers, switches, firewalls, and gateways.
• Understanding of malware, emerging threats, attacks, and vulnerability management.
• Excellent written and verbal communication skills.
• Proficient computer skills, including Microsoft Office and/or Google Suite platforms.

Preferred Qualifications

• Strong knowledge of cloud technologies with SaaS, PaaS, and IaaS platforms and architectural knowledge of Google Cloud Platform (GCP), Amazon Web Services (AWS), and Microsoft Azure cloud services.
• Strong deductive reasoning, critical thinking, problem-solving, and prioritization skills.
• Experience assisting the development and maintenance of tools, procedures, and documentation.
• Track record of effective project management and project delivery.
• Strong service mentality, including resolution of stakeholder escalations and incident management.
• Ability to work in a fast-paced team environment.
• Ability to develop detailed process and procedure documentation.
• Ability to present complex solutions and methods to both technical and non-technical stakeholders.
• Excellent organizational and team collaboration skills.

Licenses and Certifications

Required: At least one of the following professional security certifications at hire or must obtain within one (1) year of hire: GIAC certifications, OSCP (Offensive Security Certified Professional), CISSP (Certified Information Systems Security Professional), SSCP (Systems Security Certified Practitioner), Cloud Security Alliance: Certificate of Cloud Security Knowledge (CCSK), or comparable.

Preferred: Cloud Engineering or Security certifications (e.g., AWS Solutions Architect, Microsoft Certified, Google Associate Cloud Engineer, etc.).

Pay

Minimum rate of $156,062.40 annually. The starting rate of pay is provided for informational purposes only and is not a guarantee of a specific offer. Posted rates may vary based on labor market data, experience, education, certifications, skills, geographic location, internal equity, budget, and grant funding.

Benefits

HMH offers a comprehensive benefits package for full-time and part-time (20+ hours/week) job positions, including:

• Health, dental, and vision coverage.
• Paid leave.
• Tuition reimbursement.
• Retirement benefits.
• Performance-based incentives, bonuses, or commissions (for eligible positions).
• Shift differentials for work performed on evening, night, or weekend shifts (for eligible positions).