Information Security Architect

The job overview for this position is that Allworth Financial is seeking an experienced Security Architect to lead the development of information security architecture and ensure technology initiatives are implemented within the framework to make Allworth’s cloud environments more secure. The Security Architect will be responsible for designing security services in cloud-based programs, maintaining and improving the security posture of the computing environment, collaborating with stakeholders to develop security solutions, and identifying and implementing new security technologies and best practices. This position can be based in Sacramento, Dallas, Cincinnati, or remote from most US locations, and offers a salary of $130-145K plus annual bonus potential and full-time benefits.

• Design security services in cloud-based programs based on pre-defined architecture frameworks and risk appropriate controls.
• Maintain and improve the security posture of the Allworth computing environment by defining security controls and policies and monitor alerts to ensure data, apps, containers, infrastructure, and networks are secure.
• Design access configurations within a cloud solution environment using the defense-in-depth principle.
• Collaborate with stakeholders to understand their business requirements and develop security solutions that meet their needs.
• Collaborate with IT Infrastructure in the crafting and implementation of security policies.
• Create and maintain documentation for architectural designs, processes, and policies.
• Perform review and take corrective remediation actions, including patching and configuration changes, for any vulnerabilities or other security defects identified.
• Maintain comprehensive technical knowledge of cloud software and infrastructure platforms.
• Develop auditing methodologies and architecture to manage and protect data in cloud computing environments.
• Identify and implement new security technologies and best practices into Allworth computing environments.

Strong oral and written communications skills that demonstrate a professional demeanor and the ability to interact with a variety of cross-functional roles with occasional executive presence.

Should be highly credible with demonstrable ability to solve business problems -Passion for customers, learning, having proven ability to be client focused.

Hands-on experience in Microsoft security and identity technologies, such as Azure Active Directory, Microsoft Defender, Azure Security Center, Azure Sentinel, and Microsoft 365 Security & Compliance technologies.

Knowledge of Cybersecurity concepts and mitigation practices, such as Advanced Persistent Threat (APT), Credential Theft, Zero Trust, Privileged Access Management, Just-in-time Administration, etc.

Knowledge of Azure compute platforms (Azure Kubernetes Service (AKS), Azure Container Apps, Container Instances, Azure Container Registry, Azure Virtual Machines, Azure Virtual Machine Scale Sets).

Experience with Azure-native Resilience (e.g., VM Availability Sets / Zones, Paired Regions, Storage Geo-Replication) and knowledge of Cloud Disaster Recovery methods.

Hands on experience with Azure Cloud Security Monitoring, Azure Active Directory, Azure Sentinel, Azure Policy, Azure firewall/WAF/Network Security groups.

• Competitive base pay
• Medical insurance options (Blue Shield and Kaiser)
• Dental insurance with MetLife
• Vision insurance with VSP
• Optional supplemental benefits
• Healthcare savings accounts with company contribution
• Flexible spending accounts
• Flexible working arrangements
• Generous 401K contributions
• Flexible paid time off policy for exempt associates
• 25.5 days of paid time off annually for non-exempt associates
• Option to participate in Equity Purchase Program
• Future growth opportunities within the company
• Collaborative and creative work environment
• Full-time associates (working more than 30 hours a week) are eligible for benefits