Information Security Advisor

Elevance Health•Tampa, FL

4d•Hybrid

About The Position

The Information Security Advisor maintains enterprise information security policies, technical standards, guidelines, procedures, and other infrastructure elements needed to support information security in compliance with company policies, regulatory requirements, and generally accepted security controls. The role delivers strategic network security, access control, and secure transaction and messaging solutions, ensuring that technology-based security solutions are well conceived, designed, and implemented in accordance with enterprise standards. The position supports the Protegrity platform and data protection solutions, infrastructure-as-code deployments, secure application integrations across cloud platforms, serverless patterns, Kubernetes platforms, and data integrations. It also supports operational security tooling and processes, including Splunk, ServiceNow, HashiCorp Vault, Snowflake, and hardware security modules. The role is based at one of the listed office locations, with associates expected to work in-office 1–2 days per week. Alternate locations may be considered for candidates within commuting distance of an office; candidates outside reasonable commuting distance will not be considered unless an accommodation is granted as required by law. Standard working hours apply.

Requirements

Bachelor of Science or Bachelor of Arts degree in Information Technology or a related field, and at least 5 years of experience in relevant systems, security, access management, networking, telecommunications, development, hardware, software, or data fields; or an equivalent combination of education and experience.
Experience planning and designing highly complex systems.
Working knowledge of the Protegrity platform, including architecture concepts, deployment patterns, policy administration, integration troubleshooting, performance, and operational support.
Experience deploying and supporting Terraform infrastructure as code, including modules, plan and apply debugging, environment promotion, and state management.
Experience maintaining infrastructure, configuration, and code in GitHub or a similar tool, including pull request reviews, branching strategies, and release or change workflows.
Experience supporting secure application integrations across AWS and at least one additional cloud platform, Azure or GCP, including cross-cloud connectivity and data protection.
Hands-on experience implementing serverless integration patterns using AWS Lambda, Azure Functions, Google Cloud Functions, or Cloud Run, including identity, authentication, and security practices.
Working knowledge of Kubernetes platforms such as EKS, AKS, GKE, or equivalent, including connectivity, identity, secrets management, logging, and operational troubleshooting.
Experience using Splunk to develop searches and analyze logs for troubleshooting, monitoring, and incident investigations.
Experience using ServiceNow for incident, request, and change management.
Experience supporting data protection for object storage, databases, and file-based data transfers.
Working knowledge of Snowflake connectivity, role-based access, its security model, and data integration patterns.
Experience integrating applications and pipelines with HashiCorp Vault, including authentication methods, secret consumption, and rotation.
Experience performing operational activities with hardware security modules, including initialization, partition and user administration, key management, and integration troubleshooting.

Nice To Haves

Experience with multiple technical and business disciplines.
CISSP or another technical security certification, such as Systems Security Certified Practitioner or Certification and Accreditation Professional.
Familiarity with creating or maintaining ServiceNow request workflows and catalog items.

Responsibilities

Maintain enterprise information security policies, technical standards, guidelines, procedures, and supporting infrastructure in compliance with company policies, regulatory requirements, and accepted information security controls.
Deliver strategic network security, access control, and secure transaction and messaging solutions.
Ensure technology-based security solutions are appropriately conceived, designed, and implemented in compliance with enterprise standards.
Support the Protegrity platform, including architecture, deployment, policy administration, integration troubleshooting, performance, and operations.
Deploy and support infrastructure as code using Terraform, including module usage, troubleshooting plans and applies, environment promotion, and state management.
Maintain infrastructure, configuration, and code in GitHub or similar tools, including pull request reviews, branching, and release or change workflows.
Support secure application integrations across AWS and Azure or GCP, including cross-cloud connectivity and data protection troubleshooting.
Implement and support serverless integration patterns, including identity, authentication, and security practices.
Support Kubernetes platforms, including application connectivity, identity, secrets management, logging, and operational troubleshooting.
Use Splunk searches and log analysis for troubleshooting, operational monitoring, and incident investigations.
Use ServiceNow for incident, request, and change management; request workflow and catalog item maintenance may be included.
Support data protection solutions for object storage, databases, and file-based data transfers, considering structured formats, operations, throughput, and access patterns.
Support Snowflake connectivity, role-based access, security models, and data integration patterns.
Integrate applications and pipelines with HashiCorp Vault, including authentication, secret consumption, and rotation.
Perform operational activities with hardware security modules, including initialization, partition and user administration, key management, and integration troubleshooting.
Plan and design highly complex systems.