Security Architect L1

Wipro•Warwick, RI

About The Position

The purpose of this role is to design the organisation’s computer and network security infrastructure and protect its systems and sensitive information from cyber threats. This role involves leading CyberArk onboarding strategy and wave planning, defining onboarding approaches for various account types, validating platform design, and providing technical guidance. It also includes discovery and assessment, configuration and automation of CyberArk components, testing and governance, and documentation and service transition.

Requirements

9+ years overall IT experience.
5+ years hands-on CyberArk implementation experience.
Strong expertise in PAM onboarding, automation, and platform configuration.
Experience leading enterprise-scale CyberArk deployments.
Demonstrate experience in doing security assessment against NIST Frameworks, SANS, CIS, etc.
Demonstrate experience around ITIL or Key process-oriented domains like incident management, configuration management, change management, problem management etc.
CyberArk Privileged Access Manager.

Nice To Haves

Understand security requirements by evaluating business strategies and conducting system security vulnerability and risk analyses.
Identify risks associated with business processes, operations, information security programs and technology projects.
Identify and communicate current and emerging security threats and design security architecture elements to mitigate threats as they emerge.
Identify security design gaps in existing and proposed architectures and recommend changes or enhancements.
Provide product best fit analysis to ensure end to end security covering different faucets of architecture e.g. Layered security, Zoning, Integration aspects, API, Endpoint security, Data security, Compliance and regulations.
Provide support during technical deployment, configuration, integration and administration of security technologies.
Provide assistance for disaster recovery in the event of any security breaches, attacks, intrusions and unusual, unauthorized or illegal activity.
Develop a direction to manage the portfolio of to-be-solutions including systems, shared infrastructure services, applications, hardware related to cyber risk security in order to better match business outcome objectives.
Analyze technology environment, enterprise specifics, client requirements to set a collaboration design framework/ architecture.
Create complete RFPs depending on the client’s need with particular standards and technology stacks.
Provide technical leadership to the design, development and implementation of custom solutions through thoughtful use of modern technology.
Define and understand current state solutions and identify improvements, options & tradeoffs to define target state solutions.
Clearly articulate and sell architectural targets, recommendations and reusable patterns and accordingly propose investment roadmaps.
Evaluate and recommend solutions to integrate with overall technology ecosystem.
Tracks industry and application trends and relates these to planning current and future IT needs.
Liaise with stakeholders in relation to cyber security issues and provide timely support and future recommendations.
Provide assistance in maintaining an information security risk register and help with internal and external audits relating to information security.
Support audit of security best practices and implementation of security principles across the organization, to meet business goals along with customer and regulatory requirements.
Assist with the creation, maintenance and delivery of cyber security awareness training to team members and customers.
Provide training to employees on issues such as spam and unwanted or malicious emails.

Responsibilities

Design and develop enterprise cyber security strategy and architecture.
Understand security requirements by evaluating business strategies and conducting system security vulnerability and risk analyses.
Identify risks associated with business processes, operations, information security programs and technology projects.
Identify and communicate current and emerging security threats and design security architecture elements to mitigate threats as they emerge.
Identify security design gaps in existing and proposed architectures and recommend changes or enhancements.
Provide product best fit analysis to ensure end to end security covering different faucets of architecture e.g. Layered security, Zoning, Integration aspects, API, Endpoint security, Data security, Compliance and regulations.
Provide support during technical deployment, configuration, integration and administration of security technologies.
Provide assistance for disaster recovery in the event of any security breaches, attacks, intrusions and unusual, unauthorized or illegal activity.
Provide solution of RFPs received from clients and ensure overall design assurance.
Develop a direction to manage the portfolio of to-be-solutions including systems, shared infrastructure services, applications, hardware related to cyber risk security in order to better match business outcome objectives.
Analyze technology environment, enterprise specifics, client requirements to set a collaboration design framework/ architecture.
Create complete RFPs depending on the client’s need with particular standards and technology stacks.
Provide technical leadership to the design, development and implementation of custom solutions through thoughtful use of modern technology.
Define and understand current state solutions and identify improvements, options & tradeoffs to define target state solutions.
Clearly articulate and sell architectural targets, recommendations and reusable patterns and accordingly propose investment roadmaps.
Evaluate and recommend solutions to integrate with overall technology ecosystem.
Tracks industry and application trends and relates these to planning current and future IT needs.
Liaise with stakeholders in relation to cyber security issues and provide timely support and future recommendations.
Provide assistance in maintaining an information security risk register and help with internal and external audits relating to information security.
Support audit of security best practices and implementation of security principles across the organization, to meet business goals along with customer and regulatory requirements.
Assist with the creation, maintenance and delivery of cyber security awareness training to team members and customers.
Provide training to employees on issues such as spam and unwanted or malicious emails.
Lead CyberArk onboarding strategy and wave planning activities.
Define onboarding approaches for VDI, VM, Windows, Linux, local administrator, root, and service accounts.
Validate platform design, safe structure, account grouping, and naming standards.
Provide technical guidance to onboarding engineers and project teams.
Review discovery reports and define onboarding prioritization.
Identify onboarding blockers and remediation requirements.
Coordinate with application, infrastructure, and security teams for readiness activities.
Review account inventory reconciliation and onboarding scope validation.
Configure and optimize: Safes, Platforms, CPM, PSM, Password Rotation, Reconciliation Accounts, Session Recording.
Develop and review onboarding automation using: CyberArk REST APIs, PowerShell, Python, CI/CD Pipelines.
Drive bulk onboarding and automated discovery initiatives.
Lead onboarding validation and testing activities.
Approve onboarding evidence and production readiness.
Manage exception handling and rollback strategies.
Support audit and compliance requirements.
Review SOPs, runbooks, knowledge articles, and transition documents.
Provide technical handover to operations teams.
Prepare executive onboarding dashboards and status reports.