Principal Security Architect (ETS)

To provide comprehensive architectural leadership in translating Navy Federal strategies into effective IT and business capabilities through the planning, design, implementation, and integration of IT systems and services. Define and drive business transformation efforts by minimizing architectural and operational risk, and by providing proven technical solutions to business challenges. Work is performed under limited supervision. Cloud: The Cloud Computing focus specializes in the delivery of the computing services and the duties associated with it such as designing, planning, administering, developing, or maintaining applications in the cloud-based environments like AWS, Google Cloud Platform or Microsoft Azure.

• Architecture Design:  Develop and maintain a comprehensive security architecture framework that aligns with NFCU’s strategic objectives and regulatory requirements.
  • Develop architectural documentation and/or artifacts for use in business and technology projects, knowledge transfer, decision support, and product evaluation.
  • Develop target architectures ensuring the integration points of end-user technology services and other related services are consistent, scalable, and flexible.
  • Develop and apply architectural reference patterns that guide the selection, development, implementation and use of IT within the enterprise.
  • Develop, review and enforce enterprise architecture standards.
• Security Strategy: Formulate and implement security strategies and standards to safeguard NFCU’s information technology assets.
  • Plan and develop robust and secure technical solutions that align with Navy Federal strategies.
  • Assist in facilitating architectural governance based on business and IT strategies.
• Collaboration: Partner with IT teams, business units, and stakeholders to ensure security considerations are incorporated into project planning and execution.
  • Collaborate on architecture reviews to assess the integrity and quality of proposed technical solutions.
  • Understand the intersection and alignment of technology solutions to planned projects and initiatives to maximize the value to the enterprise.
  • Provide forward-thinking technical expertise and thought leadership in current and emerging technologies, development practices, market trends and best practices.
  • Build and maintain relationships with team members, management, key stakeholders and/or external contacts (e.g., vendors, etc.).
• Risk Assessment: Participate in  risk assessments and security assessments with cross-functional teams to identify vulnerabilities and recommend remediation strategies.
  • Assist in the Identification and provide recommendations for the acceptance or mitigation of any issues and risks associated with requirements, proposed solutions, architectural designs, implementation plans and timelines.
• Compliance: Ensure compliance with industry regulations, such as PCI-DSS, HIPAA, and FFIEC, by implementing appropriate security controls and practices.
  • Anticipate and plan for internal and/or external business challenges (e.g., Regulatory, Compliance, etc.), with the ability to recommend process, product or service enhancements.
• Emerging Threats: Stay informed on the latest security trends, threats, and technology advancements to continuously enhance NFCU’s security posture.
• Mentorship: Provide guidance and mentorship to junior security staff and promote security awareness throughout the organization.
• Perform other duties as assigned.

• Proven Experience in Security Architecture (5+ year’s experience as a Security architect).
• Experience in Zero Trust Architectures.
  • Implementation of zero trust principles in cloud environments.
• Extensive Experience in Cloud Security.
  • Deep understanding of cloud platforms such as AWS, Azure, or Google Cloud.
  • Ability to design and implement secure cloud-based solutions. 
• Significant experience with The Open Group Architecture Framework (TOGAF) v.9 or higher, or relevant architecture framework.
• Significant experience with Service Oriented Architectures.
• Significant experience in utilizing various development and operations framework methodologies including Systems Development Life Cycle (SDLC) and/or Information Technology Infrastructure Library (ITIL).
• Significant experience in communicating technical concepts and practices effectively at all levels, including non-technical audiences, adjusting as needed to a target audience.
• Significant experience in translating business needs and requirements into comprehensive, useful, and clear architecture designs (e.g., logical architecture, system interaction, etc.) and artifacts.
• Signific