Senior Security Architect

CDM Smith•Honolulu, HI

1d•Remote

About The Position

The Senior Security Architect role is responsible for leading the architecture of public, private, and hybrid clouds. The senior architect will lead and advise on advanced secure cloud infrastructure supporting business needs. The role requires deep technical knowledge of cloud computing architecture, security principles, and cybersecurity best practices. The position will design secure infrastructure and applications that align with business and cybersecurity strategies to support a fast-paced environment. Senior architects work in a cross-disciplinary role and plan comprehensive, full-stack security architecture and resilient applications to support the needs of the business. This senior-level role accepts responsibility to provide timely, secure, and cost-efficient solutions that elevate the company’s cloud security posture and security rigor. A Senior Security Architect is highly technical and proficient in cybersecurity and systems administration across a wide variety of infrastructure (SaaS, IaaS, PaaS). Senior architects continuously refine playbooks, processes, workflows and procedures for operational excellence. Automation and provisioning and managing cloud resources across multiple environments with infrastructure as code (IaC) principles is required. Senior architects establish business relationships and have strong interpersonal and communication skills, as well as the ability to delegate tasks to junior teammates and guide them. In tandem with security leadership, senior cloud architects will consistently assess the threat landscape and adapt quickly to protect the business from risk. The senior architect will mentor junior employees to help strengthen the depth of the team. This role will report to security leadership and have strong working relationships with IT and application development leadership.

Requirements

Extensive combined IT, cloud, and cybersecurity experience
Experience with Azure, AWS, and GCP.
Passion for Cybersecurity & Enterprise Architecture
Ability to stay current with evolving cybersecurity technologies, trends and best practices.
Demonstrates good communication, influencing, and stakeholder management skills.
Excellent analytical, problem-solving, and decision-making skills.
Excellent organizational skills with the ability to manage competing priorities.
Ability to balance strategic and tactical priorities in a fast-paced environment.
Bachelor's Degree.
5 years of related experience.
Equivalent additional directly related experience will be considered in lieu of a degree.

Nice To Haves

One or more GIAC certifications: GCAD, GCSA, GCLD, GPCS
Microsoft SC-100, SC-500, AZ-305, AB-100, AI-500
Gov Cloud deployments
AWS Certified Cloud Practitioner
Excellence in communicating business risk from cybersecurity issues.
Experience driving measurable improvement in monitoring and response capabilities at scale.

Responsibilities

Architect and articulate a scalable and resilient vision for secure public, private and hybrid clouds.
Advise our Cloud team and Cloud Center of Excellence (CCoE) on secure deployments and configurations
Review architecture plans and closely partner with our Enterprise Architecture (EA) group
Lead security architecture design with SaaS, PaaS and IaaS.
Provide guidance and direction on secure design, build, testing and deployment across cloud infrastructure.
Collaborate with security, architecture and engineering leadership to support business objectives.
Identify and enforce enterprise standards to support secure, resilient and compliant solutions.
Serve as a subject matter expert and escalation point of contact for problem resolution, including incident response.
Identify risk-related issues and architect solutions to avoid potential security incidents and business impact.
Mentor junior team members and share knowledge with technical and project team leads.
Create architecture policies aligning with industry best practices for cybersecurity and resiliency.
Draft cybersecurity strategies aligning with business objectives to comply with regulations. (CMMC, NIST, etc.)
Design security for monitoring, logging, IAM, encryption, data protection, detection and preventive controls.
Require technical leads and other subject matter experts to ensure configurations are aligned, adopted and implemented.
Oversee compensating controls for vulnerability management mitigation in technical teams’ operational responsibilities.
Orchestrate scalable, resilient and efficient containerized microservices.