RQ00773 - Security Architect - Senior

Security architecture assessments and consultations are required as a prerequisite to the go live in order to comply with OH Policies and standards. Security architecture assessments ensure compliance of product/project architectures with approved security architectures standards and cloud decision records prior to the project go-live date. The Sr. Security Architect ,will support the project influx and ensure the mandatory security architecture assessment is done in a timely manner that doesn’t intervene with the project’s go-live dates. Required Skills: 10 or more years of experience in IT security principles, practices, technologies, programs, and procedures with a solid knowledge of cloud architecture and security controls. Certifications in in any of the following cyber security and cloud security architecture (e.g., CISSP-ISSAP, CCSP, GDSA) Certifications in any of the following are an asset. ArchiMate, TOGAF, SABSA, Zachman Responsibilities: Develop and maintain security reference architectures, network diagrams and other guidelines to support the policies and standards, enabling the delivery of target state enterprise-level Information Security capabilities, and reducing the risk of siloed and redundant solutions. Develop security requirements and advise on technologies to be used in cloud environments during an entire project lifecycle. Ensure optimal placement and adequacy of the technology to achieve an ideal cloud security architecture, with respect to the cloud service model being used. Analyze proposed solution architectures, technology, design, and IT development processes to identify potential threats and vulnerabilities, and to recommend options that enhance the security of solutions and business processes. Acts as a subject matter expert and may take on more complex work in developing plans and deliverables and interacting with key internal partners. Manage multiple security related projects simultaneously, and present status updates to upper management. Leverage existing best practices in addition to proposing, developing, and integrating best practices as they relate to business, policy, information, security, application and technical infrastructure architecture Identify and escalate issues and work with projects to ensure application management and quality standards are adhered to Desired Skills: Strong knowledge and understanding of cloud and on-prem system and applications architectures and security controls. Deep understanding of security threats, vulnerabilities and safeguards relevant to application development, test and QA environments, and IT (data center) operations. Strong knowledge of a wide variety of information systems and security technologies including Operating Systems security, LAN and WAN, Internet protocols and applications, secure communications, firewalls, IDS/IPS, PKI, identity and access management, identification and authentication techniques, role-based access control, malware defense, etc. Strong Knowledge an understanding of information security frameworks such as ISO 27001/2 and NIST. Good verbal and written communication skills including preparing and presenting and articulating architecture-related concepts to both technical and non-technical audiences Functions at a high level of autonomy in setting objectives based on direction from management Ability to build sustainable relationships with stakeholders, partner and colleague Rated Criteria: Threat Modeling: - 5-7 years of hands-on experience with threat modeling techniques such as STRIDE, PASTA, and MITRE ATT&CK, including the development of data flow diagrams and identification of attack vectors to inform secure design decisions and guide risk mitigation strategies across systems and applications. 30 Points 5–7 years of extensive experience with cloud and on-prem security controls and architecture, with a strong ability to identify gaps between the current security posture and industry standards, best practices, and regulatory requirements and proposing security architecture enhancements and mitigations. 30 Points Team Player: - Demonstrates strong collaboration skills by working effectively with colleagues across functions, openly sharing information, supporting others to achieve shared goals, and contributing to a positive, respectful team environment. 20 Points Presentation Deck: - Over 5 years of experience authoring technical and executive-level reports, and delivering presentations to stakeholders and senior leadership. 20 Points Requirements Deliverables: Analyze proposed solution architectures, technology, design, conducting an assessment to identify security architecture gaps and deviations from approved standards/patterns and to identify potential threats and vulnerabilities, then recommend options that enhance the security of solutions. Development, update and contribution to security architecture standards, patterns, and reference architectures for cloud environments. Ensure optimal placement and adequacy of the technology to achieve an ideal cloud security architecture, with respect to the cloud service model being used. Must Haves: 10 or more years of experience in IT security principles, practices, technologies, programs, and procedures with a solid knowledge of cloud architecture and security controls. Certifications in in any of the following cyber security and cloud security architecture (e.g., CISSP-ISSAP, CCSP, GDSA) Certifications in any of the following are an asset. ArchiMate, TOGAF, SABSA, Zachman

The Senior Security Architect will conduct security architecture assessments to ensure compliance with organizational policies and cloud standards before project go-live. They will also develop security reference architectures and provide expert guidance on threat mitigation throughout the project lifecycle.

Candidates must have 10 or more years of experience in IT security principles and cloud architecture, along with relevant professional certifications. Strong expertise in threat modeling techniques and the ability to communicate complex security concepts to diverse stakeholders is essential.

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• Security Architecture
• Cloud Security
• Threat Modeling
• Risk Mitigation
• CISSP-ISSAP
• CCSP
• GDSA
• ISO 27001
• NIST
• Identity And Access Management
• Firewalls
• PKI
• Network Security
• Information Security
• Security Controls
• Vulnerability Assessment
• Cloud Security Architecture
• Attack Vectors
• MITRE ATT&CK Framework
• Cloud Services
• Infrastructure Architecture
• Industry Standards
• Certified Cloud Security Professional (CCSP)
• IT Security
• ArchiMate
• Data Center Operations
• IT Security Architecture
• Application Development
• Application Lifecycle Management
• Authentications
• Management
• Business Process
• Certified Information Systems Security Professional
• Cloud Computing Architecture
• Communication
• Information Systems
• Cyber Security
• Data Flow Diagram
• Operating Systems
• Firewall
• GIAC Certifications
• Leadership
• Internet Protocols Suite
• ISO/IEC 27001
• Information Systems Security Architecture Professional
• Local Area Networks
• Network Diagrams
• Public Key Infrastructure
• Presentations
• Systems Development Life Cycle

• Security & Safety
• Technology
• Software
• Consulting
• Security Architect
• Cyber Security Architect
• Database and Network Professionals Not Elsewhere Classified
• Information Security Engineers
• Computer Occupations, All Other

Formation minimale

Diplôme professionnel

Expérience minimale

10+ ans

Langue de l’offre

anglais

Heures de travail

40 heures par semaine