Cybersecurity Solution Architect, Sr

The Sr. Security Architect utilizes their knowledge of IT and information security engineering to lead and/or participate in the development of assigned projects or solutions. The Sr. Security Architect focuses on implementing security requirements for assigned projects and solutions while maintaining compliance with internal and externals policies and regulations. The Sr. Security Architect works closely with the Enterprise Security Architect to ensure projects and solutions are consistent with Entergy's Information Security strategy and roadmap.

The Sr. Security Architect provides clear and concise direction to project stakeholders and acts as the "face" of information security for those teams.

Oversee cloud security solutions across lifecycle strategy, design, implementation, and operations Participate, lead, and jointly deliver security evaluation reports on cloud providers (Azure, AWS, GCP), cloud native platforms (PCF, Docker, Kubernetes, etc.), and Software as a Service solutions Establish security requirements for cloud-based solutions by evaluating business strategies and requirements, researching cloud infrastructure security standards such as NIST CSF and NERC CIP Provide domain expertise in both public and private cloud and enterprise technology Identify and deliver appropriate controls based on industry standards (e.g. CCM) to drive cloud security solutions framework based on business risk and cloud native threats Continually evaluate new threats in the cloud, to identify the impact on IT and Business to develop and implement security controls Provide recommendations for improvement and risk reduction by assessing clients' cloud security posture;

and act as a change agent with customer organizations to oversee the vulnerability improvements with our clients' existing IT staff as well as 3rd party vendors support our clients (most often managed IT service providers) Utilize Information Security reference architectures to develop secure solutions and designs for projects Provide input to policies, procedures, standards, processes, and templates that are consistent with the Information Security strategy and roadmap Participate in security and non-security projects to ensure that security requirements are defined and implemented Perform assessments and threat modeling of existing and emerging technologies to ensure they meet Entergy security and compliance requirements Evangelize and advocate for information security with stakeholders Monitor emerging trends in Information Security and technology and make or suggest changes to Entergy's security posture as necessary