Cloud Security Architect

Role summary / purpose The Enterprise Cybersecurity Architecture team is searching for a team member that will demonstrate a strong knowledge for effectively identifying and mitigating technology risks while providing direction and input into the security controls that will be implemented and maintained. The candidate will have in depth knowledge in at least one of the following cloud platforms: AWS, Azure, Google, and Oracle with competencies in deployment, configuration, and documentation of cloud security controls. Continuous collaboration will be required with business and technology owners, as well as solution architect teams, providing guidance on the implementation of security controls to maintain compliance with Cybersecurity Policies and Standards. Key responsibilities • Understand complex business IT needs, requirements, and projects scopes with a focus on information security requirements • Conduct architecture security reviews to assess and validate solution security • Develop standards, policies and procedures best practices documentation • Work closely with application developers and system administrators to deliver creative solutions to complex technology challenges and business requirements • Participate in the design of technical solutions, which include creating prototypes and proofs of concept while maintaining a security mindset • Provide specific guidance regarding security requirements and mitigations for securing business use cases with defense in depth • Communicate security risks to different audiences ranging from business leaders to engineers • Articulate the potential of the cloud and provide expert level cloud architectural design guidance so that customers realize excellence in technical strategy • Collaborate with other SMEs to create secure design patterns and libraries for cloud applications in areas such as data protection, key management, authentication, and authorization • Participate in working groups that tailor the company's security policies and standards for use in cloud environments Requirements – education & experience • Experience with enterprise security solution design and implementation skills covering Identity and Access Management (IAM), Infrastructure security (network & endpoint), privacy and data security application security • Clear understanding of customer requirements and security risks • Experience with the various regulatory security controls (e.g., PCI DSS, NERC-CIP, etc.) • Experience working with multiple cloud platform accounts and several VPCs in each account and managing the monitoring of security settings at an enterprise level • Experience deploying automated cloud infrastructure using Terraform, AWS CloudFormation and other tools Nice-to-have / preferred skills • 5+ years in Security Architecture experience • 5+ years in securing and deploying cloud architecture • IT security (e.g., CISSP) or Cloud Security-related certifications (e.g., vendor neutral (CCSK, Certified Cloud Professional/Architect) or Cloud vendor certification (VMware VCP, AWS Certified Solutions Architect, Google, IBM)) • Automate security controls, data and processes to provide better metrics and operational support • Development experience with Python, Java, or Go, and/or other scripting languages • An understanding of modern deployment tools like Jenkins, Git, Docker, K8's • The communication skills required to work with solution architects, application owners, and developer…