Description:
Working with business, Security and other ITS technical team members, Security Architect will assist with technical security architectural requirements, design, and delivery. Work in a collaborative fashion with team members including security analysts, project managers, solution architects, business, and QA analysts. Provide technical consultancy and guidance, as needed, to other ITS teams as well as internal business service lines
What you will do
- Responsible for aligning and translating business requirements into secure solutions, reviewing technical architectures for applications and products to ensure they meet security standards and creating reference architectures that can be leveraged by technology functions across the firm to develop secure solutions in a multi-cloud environment.
- Perform assessment of existing platforms and processes to understand limitations and weaknesses to identify security challenges and identify opportunities for efficiencies, as well as for improvements in security controls
- Build secure architectures in Azure, AWS or GCP for defined workloads
- Participate and provide guidance in the design, development and delivery of technical security solutions that aligns to industry standards and business goals.
- Act as a subject matter expert in areas pertaining to DevSecOps and Cloud technology security with responsibilities to coach other members of the broader Technology Architecture function with ITS.
- Develop and maintain security architecture artifacts (models, templates, standards, and procedures) that can be used to leverage security capabilities in projects and operations.
- Provide analytical and technical security recommendations to other team members and stakeholders and identify requirements based upon need or as the result of a security issue that puts organizations systems at risk
- Conduct code reviews of applications to determine security flaws or other issues that would impact the confidentiality, integrity, or availability of the software.
- Coordinate with DevOps teams to advocate secure coding practices and escalate concerns related to poor coding practices to the Sr. Manager of Security or CISO
- Configure and implement cloud security services, including identity and access management, detective controls, infrastructure protection, and data protection.
- Analyzing requirements for security tools and technology (SIEM, Endpoint Protection, Vulnerability Management, DLP, other).