Security Architect – Cloud & Application (Senior Specialist - Architecture)

Role Description

The Security Architect – Cloud & Application role is located in Albany, New York. This position involves conducting STRIDE based threat models for the FICC target state architecture, defining security testing frameworks, validating disaster recovery designs, and assessing security controls for various platforms including AWS, IBM MQ, and A3P.

Responsibilities

• Conduct STRIDE based threat model for the FICC target state architecture
• Map security controls to identified threats
• Define security testing framework pre-deployment
• Integrate resilience and continuous validation processes
• Validate multi-region disaster recovery design from a security perspective
• Prepares security implementation guidance and developer checklists
• Assess HiPAM to Vault refactoring scope per SYS ID

Requirements

• AWS Security Specialty certification
• STRIDEDREAD threat modeling methodology
• Financial services security context SIFMU awareness
• IAM design patterns
• OCP RBAC namespace isolation
• OpenShift security SCCs
• Network Policies admission controllers
• Hashi Corp Vault integration experience
• IBM MQ security mTLS
• CONNAUTH key

Skills

• Security Threat Model Controls Mapping
• Security Implementation Guidance
• HIPAM to Vault Migration Scope Assessment

Benefits

• Comprehensive Medical Plan
• Short Term and Long-Term Disability Coverage
• 401(k) Plan with Company match
• Life Insurance
• Vacation Time, Sick Leave, Paid Holidays
• Paid Paternity and Maternity Leave