IT Security Infrastructure Architect

IT Security Infrastructure Architect

Primary Purpose To design and maintain robust, scalable security architecture globally for cloud or on‑premise systems; to oversee design, implementation and maintenance revisions of specified projects; and to evaluate technologies and provide consultation regarding applications and system needs.

• Designs and maintains robust, scalable security architecture globally for cloud and/or on‑premise systems.
• Provides technical guidance on how to design security devices, networks, applications and systems compliant with the requirements of a desired security posture or state.
• Maintains expert knowledge of network and system security principles (i.e., Defense in depth, granularity of privilege) and their application in standard data center and cloud environments.
• Demonstrates expert knowledge of and provides guidance on modern network security technologies such as network forensics, sandboxing, threat intelligence, network and host‑based intrusion prevention, vulnerability assessment, DDOS protection, Security Information Management, host‑based integrity checking, endpoint security, AV, DLP, PKI, Mobile Security, and Cloud Security.
• Provides an understanding of security problems as a mix of technology and process issues and pursues solutions at all layers within the organization.
• Provides leadership, mentorship and advisory services to infosec, business and project teams to ensure solutions align with the architecture direction and business strategies.
• Assists IT groups and business units in designing business or productivity programs securely.
• Works closely with management on assigned projects from inception through implementation, ensuring adequate internal communication and user involvement.
• Assists management in investigating IT or cyber‑security events and developing resolutions.
• Provides feedback and suggestions to improve IT Security processes and procedures.

• Performs other duties as assigned.
• Travels as required.

• Education:
  
  Bachelor’s degree in information management, computer science or a related technology field preferred; related technical institute certification preferred.
• Experience:
  
  Ten (10) years of network, application, system, storage and security architecture experience or an equivalent combination of education and experience required. Experience with cloud security architecture, network topologies, security and access control tools, encryption technologies and algorithms preferred.
• Knowledge and
  
  Skills:
  
  Configuration of security controls for Microsoft Azure and Office
  365; understanding of the confidentiality, integrity and availability (CIA) triad; knowledge of IT security frameworks; experience with Carbon Black Protection, Symantec endpoint protection and SIEM solutions preferred; ability to work with networked computers and servers; independent problem solving; confidentiality handling; continuous learning; strong communication, presentation, PC literacy, analytical, interpretive, organizational and interpersonal skills; ability to produce comprehensive reports; teamwork; and performance excellence.

When applicable and appropriate, consideration will be given to reasonable accommodations. Mental:
Clear and conceptual thinking ability; excellent judgment, troubleshooting, problem solving, analysis and discretion; ability to handle work‑related stress; ability to manage multiple priorities simultaneously; and ability to meet deadlines. Physical:
Computer keyboarding, travel as required. Auditory/Visual:
Hearing, vision and talking.

These statements describe the general nature and level of work performed by a colleague assigned to this description. They do not constitute a comprehensive list of functions, duties or local variances. Management retains the discretion to add or change the duties of the position at any time.

Sedgwick is an Equal Opportunity Employer and a Drug‑Free Workplace.