Architect, Information Security; network security, cloud security

Job Description

The Information Security Architect partners with technology and business teams to review, design, and improve security controls across cloud, network, and enterprise environments. This role supports security architecture reviews, network change assessments, cloud security design, security exception requests, and policy alignment to help ensure solutions meet security standards and regulatory requirements. The ideal candidate has experience in cloud and network security, a strong understanding of security principles, and the ability to work collaboratively across teams to reduce risk and improve security posture.

Key Responsibilities:

• Security & Network Change Reviews:
• Conduct security reviews and assessments for network changes, including:
• Azure NSG, Firewall, and micro-segmentation technologies
• Cloud resource firewalls (Azure, OCI, etc.)
• Network integrations
• Review and provide recommendations on security tool configurations (SIEM, SASE, EDR, DLP, CSPM, etc.)
• Support security reviews for cloud service onboarding (SaaS, IaaS, PaaS) for security risks
• Participate in assessments of internal applications and cloud deployments for security compliance
• Evaluate configuration and policy exception requests to security controls/platforms (DLP, Web Proxy, USB, etc.)

Security Architecture & Design:

• Contribute to defining security requirements for cloud (Azure and M365) and hybrid environments
• Support the design of security controls for applications, data, and infrastructure
• Review third-party integrations for security risks
• Ensure secure integration between services and enterprise data
• Recommend compensating controls for legacy systems where needed for legacy systems with unaddressed gaps
• Assist with security gap analysis and remediation planning

Policy & Standards Development:

• Update and maintain cloud security policies, standards, and baselines
• Ensure compliance with industry frameworks (NIST, CIS, ISO 27001, etc.) standards (PCI DSS) and regulations (HIPAA/HITECH, various state regulations, etc.)

Collaboration & Advisory:

• Work with cross-functional teams to align security with business goals
• Provide security guidance for assigned initiatives and technology solutions

Required Qualifications:

• Bachelor's degree in computer science, Cybersecurity, Information Systems, or equivalent education or work experience
• 3+ years with demonstrated experience in security design and architecture reviews
• Strong knowledge of Azure cloud security (OCI is a plus)
• Working knowledge or understanding of network security, cloud security tooling, identity and access management, and container security concepts
• Working knowledge of security frameworks (NIST, CIS, ISO 27001, etc.), standards (PCI DSS) and regulations (HIPAA/HITECH)
• Proficient in at least one programming or scripting language such as Java, Python, .NET, JavaScript, or C++
• Experience in scripting languages such as Power Shell, Python, or Bash

Preferred Qualifications:

• Security certifications from International Information Systems Security Certification Consortium (ISC2), Information Systems Audit and Control Association (ISACA), Sys Admin, Audit, Network, and Security (SANS)/Global Information Assurance Certification (GIAC).

Soft Skills & Work Style:

• Strong communication & stakeholder collaboration
• Strong documentation skills
• Ability to work independently, fast paced, and adhere to documented process and SLA's. Must be able to properly manage time.
• Stay current with changing security technologies
• Ability to translate technical risks to business leaders
• Collaborative mindset – works well with engineering, legal, and architecture teams