Information Security Architect – Data Engineering & Security

Highmark Health • Carolina, PA

4d • Onsite

About The Position

Design, architect, and engineer secure data solutions that protect enterprise information across cloud, hybrid, and on premises environments while ensuring compliance with enterprise security standards and regulatory requirements. Partner with security, data engineering, cloud, and application teams to develop scalable data platforms, data pipelines, analytics solutions, and data protection capabilities that enable secure and responsible use of enterprise data. Produce security architecture assessments and gap analyses to identify risks, define mitigation strategies, and recommend technical solutions that strengthen the organization's security posture while supporting business and data initiatives. Advise stakeholders on the design, implementation, and operation of modern data and security technologies, including cloud native services, data governance platforms, encryption, and access management solutions. Responsibilities include architecting and engineering solutions for data discovery, classification, governance, monitoring, identity and access management, application security, cloud security, and secure data exchange across the enterprise.

Requirements

• US Citizen (due to contractual/access requirements)
• Bachelor’s degree in Information Systems, Computer Science, Information Security, or Engineering, or relevant experience and/or education as determined by the company in lieu of bachelor's degree
• 5 - 7 years' experience architecting solutions
• 5 - 7 years' experience in Information Security
• Experience communicating with business partners
• Understanding of the TCP/IP protocol stack, application protocols such as SNMP, SMTP, DNS, and DHCP; IPSec and SSL VPNs; SSL/TLS protocol knowledge
• Understanding of the information technology and information security industries, their current developments, trends, issues, and fundamental concepts
• In-depth expertise in analyzing a wide spectrum of technical systems and services robustness and needs, and making practical recommendations to address them
• Detailed knowledge of web, mobile, and client application security vulnerabilities, attack methods, and countermeasures
• Experience with common information security management frameworks, such as HITRUST, ISO 27001, CobiT, ITIL
• Knowledge of ubiquitous encryption technologies (PGP, SSH, SSL, etc.) and common protocols (RADIUS, LDAP, KERBEROS, SAML, etc.)
• Participate in evaluations and recommend solutions to support enterprises security controls including: networking, firewalls, IDS/IPS, data loss prevention, application security, infrastructure security, and data security

Nice To Haves

• Master’s degree in Computer Science, Information Security or related field
• 7 - 10 years' experience architecting solutions
• Experience designing or supporting cloud data platforms, data lakes, data warehouses, or large scale data processing environments.
• Experience with data engineering technologies such as BigQuery, Snowflake, Databricks, Kafka, Spark, Hadoop, or similar platforms.
• Experience securing cloud platforms in GCP, Azure, or AWS.
• Experience implementing encryption, tokenization, data masking, data governance, or data protection solutions.
• Experience designing secure API, ETL, ELT, and data integration architectures.
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Security Auditor (CISA), etc.

Responsibilities

• Enhance security team accomplishments and competence by planning delivery of solutions; answering technical and procedural questions for less experienced team members; teaching improved processes; mentoring team members.
• Determine security requirements by evaluating business strategies and requirements; conducting system security and vulnerability analyses and risk assessments; identifying integration issues; preparing cost estimates.
• Plan security systems by evaluating network and security technologies.
• Implement security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures.
• Enhance department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments.
• May begin to provide leadership and mentoring in the areas of expertise and architecture to peers, developers, management and business users including technical expertise, coaching, and ad-hoc training.
• Support assurance compliance to required standards, procedures, guidelines and processes.
• Other duties as assigned or requested.

Benefits

• The position adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.
• Employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times.
• Employees must comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures.
• Employees must comply with all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy.
• It is every employee’s responsibility to comply with the company’s Code of Business Conduct.
• Adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior