Security Architect

Entergy•The Woodlands, TX

3d•Hybrid

About The Position

The Security Architect uses IT and information security engineering expertise to lead or participate in projects and solutions, implementing security requirements while maintaining compliance with internal and external policies and regulations. The role works closely with the Enterprise Security Architect to align projects and solutions with Entergy’s Information Security strategy and roadmap, and provides clear direction to project stakeholders as an information security representative. As part of the Security Architecture team, the position helps manage and implement strategic and tactical initiatives to secure Entergy’s network, business, and customers. This hybrid position may be based in The Woodlands, Texas; New Orleans, Louisiana; Jackson, Mississippi; or Little Rock, Arkansas. Other locations within Entergy’s service territory may be considered. The role may be filled at the Security Architect or Senior Security Architect level, depending on qualifications and experience. Travel is up to 25%.

Requirements

For the Security Architect level: at least 3 years of full-time dedicated experience leading Network Security-focused roles delivering security on cloud-native and on-premises platforms and distributed architectural solutions in complex environments.
For the Senior Security Architect level: at least 5 years of full-time dedicated experience leading Cloud Security-focused roles delivering security on cloud-native, distributed architectural solutions in complex environments.
Bachelor’s degree in computer science, cybersecurity, information systems, engineering, or a related discipline, or equivalent work experience.
Strong knowledge of multiple information security domains, with an emphasis on network security.
Familiarity with technologies commonly used in enterprise IT and OT environments, including operating systems, networking and network security, APIs, secure coding/application security, vulnerability management, SIEM, identity and access management, penetration testing, scripting, security process and control development, endpoint protection, OT systems and protocols, and Smart Grid technology.
Some knowledge of IT security regulations and guidance such as NIST, FISMA, and ISO 27001.
Ability to work hands-on with technical engineering and process management, and to advocate positive transformation within the broader information technology organization.
Ability to design and develop reference architectures.
Knowledge of network threats such as DDoS.
Ability to design and develop an API-based services layer for consistent integration with security systems.
Knowledge of the security implications of energy-related regulations, including SOX, HIPAA, NERC CIP, FERC, and NRC Nuclear Cyber (10 CFR 73.54).
Knowledge of security, risk, and control frameworks and standards such as ISO 27001 and 27002, SANS-CAG, NIST, FISMA, COBIT, COSO, and ITIL.
Strong writing and analytical ability, and the ability to communicate concisely and effectively across the enterprise.
Ability to travel.
Self-motivated, organized, and able to manage and follow up on multiple tasks simultaneously and meet deadlines.
Authorization to work in the United States; Entergy will not sponsor work visas for this position.

Nice To Haves

Experience defining security standards and reference architectures used to guide technical resources in secure implementation and configuration of enterprise cloud systems and public cloud consumption.
Familiarity with AWS, Azure, and GCP.
At least one year of experience in a complex, highly regulated industry such as utilities, financial services, or healthcare.
Experience working with outsourced teams.
Experience partnering with colleagues throughout the enterprise.
Familiarity with TOGAF, OWASP, Open Security Architecture, the NIST Cloud Computing Reference Architecture, or other architecture frameworks.
Master’s degree.
ISACA or ISC2 certification such as CISSP, CISM, or CISA.
OSCP certification.
Relevant vendor credentials from companies such as Amazon AWS or Microsoft Azure.

Responsibilities

Oversee cloud security solutions throughout strategy, design, implementation, and operations.
Work across functions and organizations to define and facilitate solutions that improve Entergy’s network security posture.
Participate in, lead, and jointly deliver security evaluation reports for cloud providers, cloud-native platforms, and Software as a Service solutions.
Promote broad adoption and implementation of Network Security plans and services, and provide visibility into security posture across Entergy’s networks.
Establish security requirements for cloud-based network solutions by evaluating business strategies and requirements and researching cloud infrastructure security standards.
Provide expertise in public and private cloud and enterprise technology, facilitating communication and partnerships across teams.
Identify and deliver controls based on industry standards to develop cloud security solutions aligned with business risk and cloud-native threats; retrofit and improve existing network security controls.
Evaluate emerging threats in the network and DMZ, assess their impact on IT and business, and develop and implement security controls.
Assess clients’ cloud security posture, recommend improvements and risk reduction, and oversee vulnerability improvements with clients’ IT staff and third-party vendors.
Use Information Security reference architectures to develop secure project solutions and designs.
Contribute to policies, procedures, standards, processes, and templates aligned with the Information Security strategy and roadmap.
Participate in security and non-security projects to ensure security requirements are defined and implemented.
Assess and threat-model existing and emerging technologies to verify they meet Entergy security and compliance requirements.
Advocate for information security with stakeholders.
Monitor emerging information security and technology trends and recommend or make changes to Entergy’s security posture.
Be available to work additional hours, in alternate locations, or on additional duties during storms, outages, emergencies, or other situations deemed necessary by the company.