Security Architect III

Odyssey•Stamford, CT

11d

About The Position

Odyssey Reinsurance Company (OdysseyRe) is the global reinsurance arm of Odyssey Group, one of the world’s leading providers of reinsurance and specialty insurance. OdysseyRe offers a broad range of property, casualty, and specialty reinsurance products, providing capital and risk management solutions for clients to efficiently manage economic risk through a network of branch and representative offices across North America, Latin America, EMEA (Europe, Middle East & Africa), AsiaPacific and London. OdysseyRe is an equal opportunity employer with excellent benefits and a strong commitment to providing training and opportunities for our staff. We provide employees an innovative, enriching environment and take great pride in their career growth. OdysseyRe is rated A+ (Superior) by AM Best and A+ (Strong) by Standard and Poor’s. Odyssey Group is a subsidiary of Fairfax Financial Holdings Limited, which is traded on the Toronto Stock Exchange under the symbol FFH. Are you eager to be part of a dynamic team? Do you want to make a difference and have a passion for excellence? Our team is growing and we are currently seeking to hire a Security Architect to be part of our story. The Security Architect will provide senior technical leadership to Enterprise IT, as well as providing cloud subject matter expertise to Information Security Team. This position requires daily interaction with Management, Information Security, and Information Technology Teams. Applicant must be a positive, flexible, self-starter requiring minimal direct supervision, and able to excel as a leader in the area of their subject matter expertise. Exceptional management, communication and interpersonal skills are a necessity; including the ability to effectively communicate via written and verbal media. This is a hands-on technical position, with a mixture of architecture, design and implementation:

Requirements

You must possess the below minimum qualifications to be initially considered for this position. Experience would be obtained through a combination of relevant previous job and/or internship experience.
5+ years of industry experience in one or more of the following:
CyberSecurity for data centers, clouds and cloud-based services
Data privacy
In-depth understanding of security concepts, such as threat modelling, security lifecycle, secure SW architecture, and design, security implication of various cloud services.
Strong verbal and written communication skills.
Motivated “self-starter” capable of collaborating across organizational boundaries.

Nice To Haves

Developing and updating cloud templates, standards, and best practices to be used by multiple cloud projects
Strong foundation across Microsoft Azure technology stack
Standardizing Azure Security best practices, processes, and procedures
Providing strategic and technical leadership for teams establishing cloud infrastructure design, migrating data centers to cloud, developing infrastructure as code, or deploying cloud solutions
Building and operating automated security operations
Designing and advising against security requirements to support cloud migration efforts

Responsibilities

Develop architecture for security in cloud services.
Define and prototype security mechanisms and contribute to threat model development for a diverse product portfolio in company’s cloud offerings.
Assess all potential attack vectors throughout the product lifecycle and mitigating through architecting mechanisms, establishing internal policies, and monitoring.
Engage with ecosystem partners to bring advanced new ways of securing our cloud offerings based on industry's best and standard practices.
Proliferate robust security principles through your technical contributions and evangelization into the organization work-practices, including threat modeling, architecture reviews, and rapid resolution of security defects
Actualize knowledge of state-of-the-art security principles, theories and attacks and proactively mitigate security vulnerabilities.
Responsible for deploying, configuring, and maintaining security baselines within the Azure.
Provides oversight over the implementation of approved security architecture/policies/procedures for a portfolio projects and initiatives.
Initiate and conduct project security reviews to identify cloud infrastructure security risks
Reviews and oversee the implementation of approved recommendations on cloud security design and implementation
Auditing our Policies and Practices (Spot checks to independently audit against our standards, look for code drift, etc.)
Contribute to Cloud Patterns to validate they are aligned with Security Practices / Policies / etc.
Familiarity with Azure, and at least one of the following languages – PowerShell, Azure CLI, ARM Templates