IT Cloud Security Architect

About the role

At Hackensack Meridian Health (HMH), the Cloud Security Architect builds, maintains, upgrades, and continuously improves cloud networks and cloud-based systems across the HMH network. This role is responsible for the operations of secure cloud infrastructure, platforms, and software. The architect partners with Enterprise Architects, Infrastructure, Application, and Development Teams to develop a deep technical understanding of HMH's technology ecosystem.

Key activities include conducting threat modeling, developing negative use cases and abuse cases, identifying weak points, constraints, trust assumptions, and other potential attack vectors. The role involves documenting and prioritizing these findings while partnering with other technical teams as a mentor and trusted advisor on remediation. Additionally, the architect conducts architecture reviews, identifies risks, and advises IT, business owners, and technical teams on mitigation options.

Responsibilities

• Develop, document, and enforce cloud security policies, standards, and baselines through processes, reporting, and technical means.
• Monitor, benchmark, and report progress of cloud security threats, assets, and vulnerabilities.
• Work with asset owners and the vulnerability management team to identify and remediate cloud vulnerabilities.
• Participate in enterprise architecture review boards and provide security recommendations for new and existing vendor and user-developed cloud technologies and interfaces.
• Perform monitoring and analysis of cloud logs and data outputs; participate in security and incident tracking, monitoring, and reporting.
• Provide updates for daily and weekly metrics for cloud security events and reporting.
• Deploy and administer cloud security tooling and associated processes.
• Develop and maintain documentation for new and existing cloud processes and technologies.
• Stay informed and provide recommendations to cloud leadership on new and evolving cloud technologies, products, tooling, methodologies, threats, and risks.
• Develop, model, and evolve cloud attack vectors and design security and/or mitigating controls to reduce risk.
• Perform cloud assessments using enterprise methodologies and industry best practices.
• Maintain the cloud risk tracker and report to business and technology leadership on the status of risks, mitigations, and remediation.
• Serve as a technical resource in the cybersecurity team’s efforts to build and deploy various configurations in the cloud and on-premise.
• Research and recommend new and evolving industry cloud technologies, solutions, management strategies, and effective resource utilization models to Senior Leadership (Directors and above).
• Build relationships with key IT and business leaders across HMH, including senior leadership (Directors and above).
• Learn on the job and explore new technologies with minimal supervision to identify new and emerging cloud threats.
• Perform other duties and/or projects as assigned.
• Adhere to HMH organizational competencies and standards of behavior.

Requirements

• Minimum of 10+ years of overall cybersecurity experience, including time spent as an enterprise Cloud Security Architect or a similar role that builds and supports secure cloud environments for a large enterprise.
• Strong knowledge of cloud security concepts with SaaS, PaaS, and IaaS platforms, and architectural knowledge of Google Cloud Platform (GCP) and Microsoft Azure cloud services.
• Wide breadth of knowledge across security products, tools, and industry trends; ability to create solutions using a pragmatic, risk-based approach.
• Strong knowledge of networking concepts and architecture, including security considerations associated with networking hardware like routers, switches, firewalls, and gateways.
• Understanding of malware, emerging threats, attacks, and vulnerability management.
• Excellent written and verbal communication skills.
• Proficient computer skills, including Microsoft Office and/or Google Suite platforms.

Qualifications

• Bachelor’s degree preferred, but an Associate’s degree plus relevant experience will be considered.
• Strong knowledge of cloud technologies with SaaS, PaaS, and IaaS platforms, and architectural knowledge of Google Cloud Platform (GCP), Amazon Web Services (AWS), and Microsoft Azure cloud services (preferred).
• Strong deductive reasoning, critical thinking, problem-solving, and prioritization skills (preferred).
• Experience assisting in the development and maintenance of tools, procedures, and documentation (preferred).
• Track record of effective project management and project delivery (preferred).
• Strong service mentality, including resolution of stakeholder escalations and incident management (preferred).
• Ability to work in a fast-paced team environment (preferred).
• Ability to develop detailed process and procedure documentation (preferred).
• Ability to present complex solutions and methods to both technical and non-technical stakeholders (preferred).
• Strong team player who collaborates well with others to solve problems (preferred).

Skills

• Excellent written and verbal communication and organizational skills.
• Strong interpersonal, problem-solving, and communication skills.

Licenses and Certifications

• At least one of the following professional security certifications at hire or must obtain within one (1) year of hire: GIAC certifications, OSCP (Offensive Security Certified Professional), CISSP (Certified Information Systems Security Professional), SSCP (Systems Security Certified Practitioner), Cloud Security Alliance: Certificate of Cloud Security Knowledge (CCSK), or comparable.
• Cloud Engineering or Security certifications (e.g., AWS Solutions Architect, Microsoft Certified, Google Associate Cloud Engineer, etc.) (preferred).

Pay

Minimum base pay rate of $156,062.40 annually. The starting rate of pay is provided for informational purposes only and is not a guarantee of a specific offer. The base compensation may vary based on factors such as labor market data, experience, education, certifications, skills, geographic location, internal equity, and budget considerations.

Benefits

HMH offers a comprehensive benefits package for full-time and part-time (20+ hours/week) job positions, including:

• Health, dental, and vision benefits.
• Paid leave.
• Tuition reimbursement.
• Retirement benefits.
• Eligibility for performance-based incentives, bonuses, or commissions (for certain positions).
• Shift differentials for work performed on evening, night, or weekend shifts (for certain positions).