Senior Solutions Architect

JOB DESCRIPTION:

I. Strategic Planning and Design:

• Develop Security Architecture:
   Design and develop comprehensive security architectures, frameworks, and solutions tailored to meet the specific needs and requirements of the organization. This involves creating blueprints for secure systems, networks, applications, and data.
• Align Security with Business Goals:
   Translate business requirements and risk assessments into secure and resilient architectures that protect assets and data while supporting overall business objectives.
• Threat Modeling and Risk Assessment:
   Conduct in-depth analyses to identify potential security threats, vulnerabilities, and weaknesses within the organization's systems, networks, and applications. This includes performing vulnerability testing, penetration testing, and risk analyses.
• Security Strategy Development:
   Research, plan, and design robust security architectures for all IT projects. Stay abreast of the latest security standards, emerging threats, and new technologies to proactively recommend improvements.
• Policy and Procedure Development:
   Define, create, implement, and maintain corporate security policies and procedures aligned with industry best practices (e.g., NIST, ISO 27001, GDPR, HIPAA, PCI-DSS).

II. Solution Implementation and Oversight:

• Solution Evaluation and Selection:
   Evaluate and assess security technologies, tools, and solutions (e.g., firewalls, VPNs, IDS/IPS, SIEM, endpoint protection, cloud security platforms) to determine their suitability and effectiveness. Conduct proof-of-concept testing and recommend innovative solutions.
• Secure System Design and Integration:
   Design and oversee the implementation of secure systems, including network security, cloud security (AWS, Azure, GCP), application security, and data security. Ensure security controls are integrated throughout the software development lifecycle (SDLC) and operational processes (DevSecOps).
• Technical Guidance and Supervision:
   Provide technical leadership and guidance to security engineers, analysts, and other technical teams on security architecture and implementation.
• Configuration Review and Approval:
   Review and approve the installation and configuration of security devices and systems like firewalls, VPNs, routers, IDS scanning technologies, and servers.
• Cost Estimation and Integration:
   Prepare cost estimates for cybersecurity measures and identify potential integration issues with existing systems.

III. Monitoring, Maintenance, and Incident Response:

• Security Testing and Monitoring:
   Conduct regular security tests, vulnerability assessments, and penetration tests to ensure systems behave as expected and to identify design gaps in existing or proposed architectures.
• Incident Response Leadership:
   Play a key role in incident response and management, coordinating and leading efforts to detect, analyze, and respond to security incidents and breaches. Develop incident response plans and provide thorough post-event analysis.
• System Upgrades and Enhancements:
   Develop project timelines for ongoing system upgrades and implement necessary enhancements to security measures.
• Continuous Improvement:
   Monitor changes in the technical environment and assess whether risks are still at acceptable levels, proactively addressing potential risks by staying current with emerging security threats and trends.

IV. Communication and Collaboration:

• Stakeholder Communication:
   Effectively communicate security risks, issues, and recommendations to technical and non-technical stakeholders, including senior management, advocating for necessary investments in cybersecurity.
• Cross-functional Collaboration:
   Collaborate with cross-functional teams (IT, development, operations, compliance) to ensure security is integrated into all aspects of system design and development.
• Security Awareness and Training:
   Promote security awareness and education initiatives within the organization, training users on security protocols and best practices.

Job Type: Full-time

Benefits:

• Company events
• Free parking
• Health insurance
• On-site parking
• Opportunities for promotion
• Paid training
• Promotion to permanent employee

Work Location: In person