Information Security Architect

About This Role

Designing and building the network security architecture for the company's environment is the core of this role, from firewall and segmentation design through cloud network architecture. The Network Security Architect will stay engaged through implementation alongside engineering, not hand off a design and move on. This role sits within the Chief Information Security Officer Office, reporting to the Director of Security Architecture and Engineering (SA&E).

Responsibilities

• Design network security architecture from the ground up: firewall policy and configuration, network segmentation, Zero Trust access design, and cloud network architecture in Microsoft Azure
• Lead technical migrations end to end: assess the current environment, design the target state, build the configuration, and manage the cutover
• Work directly alongside engineering through the build and implementation phase of every project designed, adjusting the design in real time when engineering encounters something the design did not account for
• Review existing network security architecture, identify gaps, and design the remediation, including hands-on work to resolve technical debt in legacy configurations
• Assess, scope, and estimate the work and hours required to deliver security architecture components of larger projects and programs
• Serve as the technical expert and trusted advisor to engineering, IT, and business partners on network security design questions
• Document and diagram architecture in both conceptual and physical form, including the underlying configuration, not just high-level diagrams
• Work assigned Request Security Architecture (RSA) tickets and related efforts in ServiceNow
• Stay current on emerging network security technologies and threats and incorporate them into architecture as needed
• Perform other duties as assigned

Requirements

• Bachelor's degree in Computer Science, Information Security, or related field
• Seven (7) years or more experience in an Information Security Architect role
• Seven (7) years or more experience with regulatory compliance and information security frameworks (NIST 800/CSF, ISO 27001, COBIT, etc.)
• Advanced, hands-on knowledge of network technologies: protocols, design concepts, segmentation, and access control
• Advanced, hands-on knowledge of security technologies: encryption, data protection, access privilege design
• Direct configuration experience with firewall platforms, not solely policy or diagram level experience
• Comfortable working side by side with engineers through build and cutover, including off-hours implementation windows when required
• Strong communication skills, able to explain technical design decisions clearly to both engineers and non-technical stakeholders