Jobs and Careers
ZO
IT Security Architect Lead
Zones, LLCUnited Statesfull_timeVerifiedPosted 9 Sept 2024
About the role
Position Details: Term: 6 months contract-to-hire with our client in the Insurance industry
Location: remote - prefer candidates based in greater Stamford CT region
Hours: Mon-Friday 8-5pm ETThe Information Security Architecture & Engineering Lead is a member of the IT Security Team who leverages extensive experience in Information Systems and Cloud technologies to develop strategies and solutions that support the business and protect against threats over the long term. The Information Security Architecture & Engineering Lead proposes and promotes standards and works closely with other IT practice leads to ensure adoption of secure designs and practices. Candidate must have strong hands-on technical background, and should enjoy researching, designing and implementing secure modern solutions with Azure paradigms and facilities. Candidate must be highly collaborative and is expected to mentor and partner with other teams on a regular basis.What you'll do as the IT Security Architect LeadThe requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Location: remote - prefer candidates based in greater Stamford CT region
Hours: Mon-Friday 8-5pm ETThe Information Security Architecture & Engineering Lead is a member of the IT Security Team who leverages extensive experience in Information Systems and Cloud technologies to develop strategies and solutions that support the business and protect against threats over the long term. The Information Security Architecture & Engineering Lead proposes and promotes standards and works closely with other IT practice leads to ensure adoption of secure designs and practices. Candidate must have strong hands-on technical background, and should enjoy researching, designing and implementing secure modern solutions with Azure paradigms and facilities. Candidate must be highly collaborative and is expected to mentor and partner with other teams on a regular basis.What you'll do as the IT Security Architect LeadThe requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
- Leads the Security Architecture and Engineering practice.
- Strong conceptual thinking and communication skills - the ability to translate complex business and technical requirements into effective and comprehensible solutions.
- Applies strong logic and principles-based reasoning to define solutions and justify proposals.
- Contributes to the development and maintenance of the information security strategy.
- Works closely with other IT architects and staff to ensure that security is appropriately addressed in the definition, design, implementation and operation of all IT services, systems and platforms.
- Researches, designs and advocates new technologies, architectures and solutions supporting security requirements of the enterprise, its customers, business partners and vendors.
- Maintains deep expertise in the growing body of IT security vulnerabilities, threats, exploits and mitigations.
- Plays lead role in definition and implementation of security initiatives.
- Serves as a lead engineer supporting security platforms and services.
- Acts as a key member of the Gen Re CSIRT
- Bachelor's or master's degree in computer science, information systems or other related field, or equivalent work experience.
- Professional security management certification, such as a ISC(2) Certified Information Systems Security Professional (CISSP), SANS GIAC Information Security Professional (GISP), GIAC-Security Expert (GSE), or GIAC Certified Enterprise Defender ( GCED )
- Extensive expertise in NIST and ISO 27001 security practice frameworks.
- Extensive hands-on experience with security infrastructures (e.g. Firewalls, IDS/IPS, VPN, Web Content Filters, Proxies, DLP, SIEM, Log aggregation correlation technologies )
- Extensive hands-on experience operating one or more common IT infrastructures ( Telecom, database, Windows and *NIX systems, virtualization platforms )
- Demonstrable experience securing and managing Cloud infrastructures (e.g. Azure, Kubernetes, )
- Proficiency with scripting / programming languages ( e.g. Python, Powershell )
- Expertise with enterprise identity and namespace services (e.g. Active Directory, LDAP, DNS, Oauth, SAML )
- Expertise with enterprise certificate management and PKI services.
- Familiarity with the benefits and risks of AI/ML with respect to Security
- Familiarity with U.S. and international Data Privacy and Security regulations and best practices ( NYDFS, GDPR, etc...)
- Familiarity with a relevant enterprise architecture methodology (e.g. Zachman Framework, TOGAF, SABSA).
- Exceptional diplomacy and ability to receive and communicate constructive criticism/areas needing improvement to development team and explain why compliance to standards are needed.
- The following are not essential, but are highly valued;
- Professional experience in application or infrastructure penetration testing
- Demonstrable expertise with configuration automation practices and toolchains (e.g. Chef, Ansible, etc…)
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s