Cloud Security Architect

Posting End Date: 01/09/2024 

Work Place Flexibility: Hybrid 

Legal Entity: Entergy Services, LLC 

***THIS IS A HYBRID POSITION (Remote & Onsite)***

 

***This position will be filled as a Security Architect or Security Architect Sr depending on qualifications and experience of the candidate***

 

***This position may be filled in The Woodlands TX, New Orleans LA, Jackson MS, or Little Rock AR. Other locations within Entergy’s service territory may be considered***

 

Job Summary

The Cloud Security Architect utilizes their knowledge of IT and cybersecurity engineering to lead and/or participate in the development of assigned projects or solutions. The Cloud Security Architect focuses on implementing security requirements for assigned projects and solutions while maintaining compliance with internal and externals policies and regulations.

 

The Cloud Security Architect works closely with the Enterprise Security Architect to ensure projects and solutions are consistent with Entergy’s Cybersecurity strategy and roadmap. The Cloud Security Architect provides clear and concise direction to project stakeholders and acts as the “face” of Cybersecurity for those teams.

 

Key Responsibilities

• Oversee cloud security solutions across lifecycle strategy, design, implementation, and operations
• Participate, lead, and jointly deliver security evaluation reports on cloud platform providers, cloud native platforms (PCF, Docker, Kubernetes, etc.), and Software as a Service solutions
• Establish security requirements for cloud-based solutions by evaluating business strategies and requirements, researching cloud infrastructure security standards such as NIST CSF and NERC CIP
• Provide domain expertise in both public and private cloud and enterprise technology
• Identify and deliver appropriate controls based on industry standards (e.g. CCM) to drive cloud security solutions framework based on business risk and cloud native threats
• Continually evaluate new threats in the cloud, to identify the impact on Technology and Business to develop and implement security controls
• Provide recommendations for improvement and risk reduction by assessing clients’ cloud security posture; and act as a change agent with customer organizations to oversee the vulnerability improvements with our clients’ existing Technology staff as well as 3rd party vendors support our clients (most often managed Technology service providers)
• Utilize Cybersecurity reference architectures to develop secure solutions and designs for projects
• Provide input to policies, procedures, standards, processes, and templates that are consistent with the Cybersecurity strategy and roadmap
• Participate in security and non-security projects to ensure that security requirements are defined and implemented
• Perform assessments and threat modeling of existing and emerging technologies to ensure they meet Entergy security and compliance requirements
• Evangelize and advocate for Cybersecurity with stakeholders
• Monitor emerging trends in Cybersecurity and technology and make or suggest changes to Entergy’s security posture as necessary

 

Experience needed

Security Architect Sr: 5+ years of full-time dedicated experience in Cloud Security roles focused on delivering security on cloud native, distributed architectural solutions in complex environments 

 

Security Architect: 3+ years of full-time dedicated experience in Cloud Security roles focused on delivering security on cloud native, distributed architectural solutions in complex environments

 

• Experience in defining security standards and reference architectures used to guide technical resources in secure system implementation and configuration for enterprise cloud systems and consumption of public cloud is a plus
• Familiarity with predominant public cloud providers
• Understanding of Industry trends in cloud technologies for public, private and hybrid cloud deployments
• Experience working with outsourced teams
• Experience in working in partnership with colleagues throughout the enterprise

 

Education needed

Bachelor’s degree in computer science, cybersecurity, information systems, engineering or a related discipline or equivalent work experience. Master’s degree is a plus.

 

 Minimum Knowledge, Skills, and Abilities needed

• Familiarity with technologies commonly utilized within an enterprise IT and OT environment
• Strong knowledge of multiple information security domains with an emphasis in Cloud services
  • Operating systems (*nix, Windows, IOS, etc.)