Information Security Architect

Company

Federal Reserve Bank of Kansas City

As a part of the nation's central bank, the Federal Reserve Bank of Kansas City supports a stable financial system. We work across diverse communities throughout our region and the nation to promote trust in understanding in our economy, the payments system, and financial institutions for people from all walks of life.

Together, we serve everyone from our neighbors next door to the entirety of the United States. We serve the public in an innovative environment that values the highest ethical standards. Here you'll find the support to develop professionally, united in a clear and common purpose, and with a diverse team.

We are seeking talented cybersecurity professionals to join our Information Security Architecture team.

In this role you’ll have ownership over how to reduce security risks by identifying security challenges, developing innovative technical solutions, and implementing them with the broader team. As an information security architect you will inform on emerging and existing threats, define best practices to meet their challenges, and ensure the confidentiality, integrity and availability of information assets. You’ll partner with business areas, vendors, and our diverse network of security professionals to identify, design, implement and support security across the organization.

Candidates with interests in code analysis, security-as-code strategies, and secure implementations for on-premise and cloud environments makes this position ideal for you.

Key Activities:

Engineering

• Implements hardened and secured infrastructure workloads. This includes deploying infrastructure as code (IAC) and policy as code (PAC) as part of a DevSecOps capability and continually enforcing security on the workload either by immutability (i.e., investigate, tear down and replace unsecured workloads and workloads acting outside defined parameters) or by implementing additional security measures.

• Consults and provides information security expertise to support various projects.

• Evaluates and implements security products and/or processes to enhance productivity and effectiveness for various platforms and initiatives.

• Implements and consults on secure continuous integration and continuous delivery (CI/CD) pipelines, evaluating code and/or applications, or creating code to facilitate the process.

Architectural

• Researches current security threats, techniques, and landscapes

• Evaluates secure design strategies to identify and recommend improvements to potential security design problems.

• Creates, analyzes and revises existing system logic and documentation

• Identify gaps/opportunities for enhancements to workflows and processes for enhancing the detection and response lifecycle.

• Acts as a technical or security advisor in our risk management processes.

• Takes ownership and manages information security projects that vary in size and scope depending on requirements.

• Monitors information security policy compliance using security tooling.

• Supports leadership's decision-making processes through timely analysis of and additions to viable solutions.

• May mentor junior members of the team.

Qualifications:

• Typically requires at least 6 years of relevant experience.

• Bachelor’s degree specializing in an information technology field from an accredited college or university, or equivalent combination of directly related education and/or work experience. Master’s degree specializing in an information technology field from an accredited college or university, or equivalent combination of directly related education and/or work experience preferred.

• Certified Information Systems Security Professional CISSP, CSSLP, CCSP, AWS Security certification or other IS industry certification required.

Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future.

This position has additional screening requirements due to the information accessed while performing the job. These additional screenings would be initiated at the time of offer acceptance and can take up to a couple of months to be completed. You can begin work before the screening is completed; however, continued employment is contingent on acceptable screening results. The areas screened may include education/employment verification, criminal history, credit history, and reference checks.     

* This position is a hybrid role that will be subject to be onsite 20% of the time at an FRB location in either Kansas City, Denver, Omaha, or Oklahoma City.

Benefits