Cloud Security Architecture Principal (Hybrid)

Company Description

At Fannie Mae, futures are made. The inspiring work we do helps make a home a possibility for millions of homeowners and renters. Every day offers compelling opportunities to use tech to tackle housing’s biggest challenges and impact the future of the industry. You’ll be a part of an expert team thriving in an energizing, flexible environment. Here, you will grow your career and help create access to fair, affordable housing finance.

Job Description

As a valued contributor to our team, you will consult with management on the development of processes and procedures for designing and implementing components of technological structures. In this role, you will create solutions with a process-driven view, as well as maintain and/or update existing structures.

THE IMPACT YOU WILL MAKE

The Cloud Security - Architecture - Principal will leverage broad technical knowledge of cloud security best practices of key public cloud offerings of providers such AWS, Azure, and GCP to establish secure design patterns, to architect integrations among cloud and/or on-premises infrastructures. The individual must have deep understanding of cloud policy, security technical architecture and have implemented solutions in a cloud environment. Knowledge of industry best practices around cloud security compliance and architect cloud security practices. This individual must be able to assist in ensuring the security and compliance of the cloud environment based on enterprise cloud security policies, standards, and procedures. The role will ensure that solutions operating on the cloud comply with enterprise security requirements in both off-premises and hybrid environment models.   

The role will report to the Director of Cloud Security Architecture will collaborate with Enterprise Architects and Application Dev teams to come up with Security Architecture for applications and enterprise tech capabilities migrating to Cloud. 

• Determine the needs of diverse and complex customer groups by applying understanding and resolution of complex or unusual business problems.
• Translate functional requirements into technical solutions, and may lead matrixed teams.
• Oversee existing structures, as well as the implementation and ongoing monitoring of governance.
• Perform modeling, analysis, and planning to solve technical business problems and identify opportunities and risks.

Qualifications

THE EXPERIENCE YOU BRING TO THE TEAM

Minimum Required Experiences

• 8 years of experience

Desired Experiences

• Bachelor degree or equivalent
• 5+ Years of experience in Cyber Security field as an Information Security Architect or Cloud Security Architect 
• 4+ years of experience in AWS as a Cloud Security Architect/Engineer and must be certified in the cloud technologies/infrastructures.
• Preferred industry recognized experience in security (e.g., CISSP, CCSK, CISA, CISM, CEH)
• Minimum of 5 years of experience in IT security risk assessments and related frameworks (e.g., NIST 800 series, ISO 27000 series, IT General Controls
• Strong knowledge of the AWS Infrastructure services.
• Strong communication, proactive methods for problem solving, strong documentation and collaboration skills across the enterprise.  
• Excellent coordination skills and must be detail oriented. 

Key Areas of Responsibility

• Partner with Enterprise/Portfolio Architecture team and Business Units development squads to collaboratively develop security architectures/designs leveraging approved patterns that ensure applications migrating from on-premises to Cloud, achieving high standards of security practices and compliance. 
• Drive the development and adoption of cloud security standards, best practices, and technologies within Enterprise IT infrastructure 
• Liaise on security-related issues with internal business stakeholders, InfoSec, Enterprise Architecture, and application development squads. 
• Work to develop, enhance, and document security architecture, security policies, patterns, procedures, guidelines, and standards required to design cloud-based solutions. 
• Educate application, portfolio and solution architects on secure solution design and industry best security practices. 
• Work on assessments of compliance and standards including and not limited to NIST, FedRAMP, FIPS, etc. 
• Perform threat modeling and update application security architecture as needed.  
• Support application development squads with Security implementations and issues  

Skills

• Serve as an expert in Fannie Mae’s Information Security capabilities, solutions policies, proced