Info Security Architect, Marlboro or Chelmsford, Full-Time, Hybrid

 

Summary/Objective:

The IT Information Security Architect will work directly the Information Technology teams to ensure the confidentiality, integrity, and availability, as it relates to the credit union’s process, procedures, and systems. They will work with these teams to ensure industry standard security best practices in existing and new systems architectures and 3rd party solutions, processes, and configurations, throughout the organization.

Essential Functions:

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Responsible for developing business outcome driven architectures
• Define Cloud architecture to realize migration to new platforms, including Amazon AWS, Azure, and others as deemed necessary, in a serverless first, CI/CD pipeline environment.
• Evaluate, design, architect, test, deploy, configure and guide the credit union’s systems security and configurations.
• Create Proof-of-concepts (POC) for technology evaluations and for use by implementation teams.
• Create Reference Architectures, Solution Architecture Artifacts.
• Responsible for architecture due diligence of solution architecture proposals
• Review and evaluate technologies, products/services and vendors
• Design and define highly complex, critical, and diverse architectures for security devices, electronic data traffic, network access, cryptography, and access control.
• Coordinate activities and configurations with key architecture resources on the Infrastructure, Network, DevOps, CI/CD, Development, QA, and Information Security teams.
• Define Policies, Standards, best practices and industry standard controls and baseline configurations for a variety of services, systems, devices, endpoints, data, and 3rd party solutions.
• Work with vendors to configure and optimize Information Security solutions and/or systems for the credit union.
• Accountable for Application Portfolio Management systems completeness and accuracy
• Maintain up-to-date knowledge of the IT Security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors
• Perform other job-related duties as assigned by Management.

Other Duties:

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Willingness to wear multiple hats as circumstances demand. Duties, responsibilities and activities may change at any time with or without notice.

Job Competencies:

• Ensures Accountability
• Resourcefulness
• Ability to influence and mentor
• Persuasive and persistent
• Optimizes Work Processes
• Drives Results
• Balances Stakeholders
• Manages Complexity
• Strategic Mindset
• Member Focus
• Collaborates
• Interpersonal Savvy
• Organizational Savvy
• Communicates Effectively
• Instills Trust
• Situational Adaptability

 

Education and Experience Requirements:

• Bachelor's Degree in Information Security, Cybersecurity, Information Technology, or related field
• Security related certifications, such as Amazon AWS Certifications, CISSP, SSCP, ECSA
• 3+ years of experience in Cybersecurity Architecture, including Cloud platforms such as AWS and Azure
• 5+ years of experience in Information Technology
• Experience with CIS Critical Security Controls, NIST 800 and CSF, and FFIEC frameworks, and Financial Institution Regulatory Requirements
• Experience with managing Firewalls, Networks, Microsoft and Linux environments, Virtual Environments, Cloud Security, Office 365, Azure, Active Directory, Group Policy, and DNS
• Experience with managing SIEM, Logs, IDS/IPS, DLP, Web filters, AV, and WAF solutions
• Knowledge of common protocols such as SNMP, HTTP, HTTPS, SMTP, NTP, LDAP, KERBEROS, RADIUS and FTP

Additional Eligibility Requirements:

• Active in the Information Security community, such as groups, conferences, and so on.
• Financial and/or banking industry experience is a plus

Supervisory Responsibility:

• None but demonstrate ability to influence and impact positive outcomes

 

Work Environment:

This job operates in a hybrid environment.  This role routinely uses standard office equipment such as computers, phones, photocopier/scanner, filing cabinets, and fax machines.

 

Physical Demands:

The