Cloud Security Architect Lead

Freddie Mac•McLean, VA

About The Position

Freddie Mac has an exciting and challenging opportunity for a Technical Lead of Security Architecture. The focus will be on improving security designs of existing and new solutions in both on-premise and cloud ecosystems. We are seeking a motivated individual who will play a role in our transformation into an Agile & DevOps focused organization with aspirations of being cloud native. The candidate should have a strong ability to adapt and apply Security expertise at scale as well as individual applications. The goal is to establish architectures that reduce risk while assisting application teams with deployment, all while maintaining operational stability.

Requirements

BA/BS degree in Computer Science, Information Systems or a related technical field or equivalent combination of education and experience.
Minimum 8 years experience working in security architecture, information security, information technology or information risk management related field.
Minimum 4 years experience establishing Cloud Security Architectures in AWS, with Azure, GCP experience additionally beneficial.

Nice To Haves

CISSP, CISA, AWS or/and Azure certifications is desirable

Responsibilities

Set vision, lead and coach security architecture and automation teams accountable for designing and architecting cloud solutions and cloud security controls.
Adopt and champion Agile methodologies to improve workflow velocity and leadership visibility into project timelines and efficiency.
Maintain vigilance about current threat vectors and expertise of the ecosystem of cloud security-related tools.
Develop security patterns to enable developers to design and build applications with appropriate security controls.
Drive and adopt a culture driven by data where key performance indicators are gathered from top to bottom and fed to automated tooling to improve system reliability and performance.
Standardize and automate security tools configuration/patching processes in the cloud.
Prototype new security tools and technologies based on organizational strategy and evolving threats while looking for opportunities to optimize, consolidate and manage out tools that no longer meet company needs.
Automate security testing in the CI/CD pipelines to improve application development lifecycle.