Information Security Architect – Data Engineering, Security

• Design, architect, and engineer secure data solutions across cloud, hybrid, and on-premises environments
• Ensure compliance with enterprise security standards and regulatory requirements
• Partner with security, data engineering, cloud, and application teams on scalable data platforms, pipelines, analytics solutions, and data protection capabilities
• Produce security architecture assessments and gap analyses
• Identify risks, define mitigation strategies, and recommend technical solutions
• Advise stakeholders on cloud-native services, data governance platforms, encryption, and access management
• Architect and engineer data discovery, classification, governance, monitoring, identity and access management, application security, cloud security, and secure data exchange solutions
• Plan delivery of security solutions and answer technical and procedural questions for less experienced team members
• Teach improved processes and mentor team members
• Determine security requirements through business evaluation, security and vulnerability analyses, risk assessments, and integration reviews
• Prepare cost estimates
• Plan security systems by evaluating network and security technologies
• Implement security systems, intrusion detection methodologies, equipment, installation, calibration, and preventive/reactive measures
• Provide technical leadership, coaching, and ad-hoc training
• Support compliance with required standards, procedures, guidelines, and processes
• Perform other duties as assigned or requested

• Candidate must be a US Citizen due to contractual/access requirements
• Bachelor's degree in Information Systems, Computer Science, Information Security, or Engineering, or relevant experience and/or education as determined by the company in lieu of bachelor's degree
• Minimum 5-7 years' experience architecting solutions
• Minimum 5-7 years' experience in Information Security
• Experience communicating with business partners
• Business communication skills, written and verbal
• Ability to solve unconventional problems
• Understanding of TCP/IP, SNMP, SMTP, DNS, DHCP, IPSec, SSL VPNs, and SSL/TLS
• Understanding of information technology and information security industries, developments, trends, issues, and concepts
• Expertise analyzing technical systems and services and making practical recommendations
• Knowledge of web, mobile, and client application security vulnerabilities, attack methods, and countermeasures
• Experience with information security management frameworks such as HITRUST, ISO 27001, CobiT, and ITIL
• Knowledge of encryption technologies including PGP, SSH, and SSL
• Knowledge of RADIUS, LDAP, KERBEROS, and SAML
• Experience evaluating and recommending enterprise security controls including networking, firewalls, IDS/IPS, data loss prevention, application security, infrastructure security, and data security
• Required licensure:
  None
• Other than English language requirement:
  None

Demonstrates expertise in architecting secure data solutions across cloud, hybrid, and on-premises environments, ensuring compliance with enterprise security standards and regulatory requirements. Proficient in risk assessment, data governance, and implementing security systems while providing technical leadership and mentoring to team members.

• Data Architecture
• Information Security
• Risk Assessment
• Data Governance
• Technical Leadership

• TCP/IP
• Information Security Management Frameworks
• Encryption Technologies
• Application Security
• Data Security
• Network Security
• Vulnerability Analysis
• Security Architecture Assessment
• Data Protection
• Cloud Security

• Business Communication
• Problem Solving
• Mentoring
• Team Collaboration
• Stakeholder Advising

• Compliance
• Security Standards
• Data Solutions
• Cloud-Native Services
• Data Classification
• Identity and Access Management
• Intrusion Detection
• Network Technologies
• Security Systems
• Technical Recommendations

• HITRUST
• ISO 27001
• CobiT
• ITIL
• RADIUS
• LDAP
• KERBEROS
• SAML
• IDS/IPS
• Data Loss Prevention