Architect, Information Security (network security, cloud security)

Molina Healthcare•Long Beach, CA

23h•$92,474 - $180,324

About The Position

The Information Security Architect partners with technology and business teams to review, design, and improve security controls across cloud, network, and enterprise environments. This role supports security architecture reviews, network change assessments, cloud security design, security exception requests and policy alignment to help ensure solutions meet security standards and regulatory requirements. The ideal candidate has experience in cloud and network security, a strong understanding of security principles, and the ability to work collaboratively across teams to reduce risk and improve security posture.

Requirements

Bachelor’s degree in computer science, Cybersecurity, Information Systems, or equivalent education or work experience
3+ years with demonstrated experience in security design and architecture reviews
Strong knowledge of Azure cloud security (OCI is a plus)
Working knowledge or understanding of network security, cloud security tooling, identity and access management, and container security concepts
Working knowledge of security frameworks (NIST, CIS, ISO 27001, etc.), standards (PCI DSS) and regulations (HIPAA/HITECH)
Proficient in at least one programming or scripting language such as Java, Python, .NET, JavaScript, or C++
Experience in scripting languages such as PowerShell, Python, or Bash
Strong communication & stakeholder collaboration
Strong documentation skills
Ability to work independently, fast paced, and adhere to documented process and SLA’s. Must be able to properly manage time.
Stay current with changing security technologies
Ability to translate technical risks to business leaders
Collaborative mindset – works well with engineering, legal, and architecture teams

Nice To Haves

Security certifications from International Information Systems Security Certification Consortium (ISC2), Information Systems Audit and Control Association (ISACA), SysAdmin, Audit, Network, and Security (SANS)/Global Information Assurance Certification (GIAC).

Responsibilities

Conduct security reviews and assessments for network changes, including Azure NSG, Firewall, and micro-segmentation technologies, Cloud resource firewalls (Azure, OCI, etc.), and Network integrations.
Review and provide recommendations on security tool configurations (SIEM, SASE, EDR, DLP, CSPM, etc.).
Support security reviews for cloud service onboarding (SaaS, IaaS, PaaS) for security risks.
Participate in assessments of internal applications and cloud deployments for security compliance.
Evaluate configuration and policy exception requests to security controls/platforms (DLP, Web Proxy, USB, etc.).
Contribute to defining security requirements for cloud (Azure and M365) and hybrid environments.
Support the design of security controls for applications, data, and infrastructure.
Review third-party integrations for security risks.
Ensure secure integration between services and enterprise data.
Recommend compensating controls for legacy systems where needed for legacy systems with unaddressed gaps.
Assist with security gap analysis and remediation planning.
Update and maintain cloud security policies, standards, and baselines.
Ensure compliance with industry frameworks (NIST, CIS, ISO 27001, etc.) standards (PCI DSS) and regulations (HIPAA/HITECH, various state regulations, etc.).
Work with cross-functional teams to align security with business goals.
Provide security guidance for assigned initiatives and technology solutions.