Security Architect (Zero Trust)

Posting End Date: 01/09/2024 

Work Place Flexibility: Hybrid 

Legal Entity: Entergy Services, LLC 

***THIS IS A HYBRID POSITION (Remote & Onsite)***

 

***This position will be filled as a Security Architect or Security Architect Sr depending on qualifications and experience of the candidate***

 

***This position may be filled in The Woodlands TX, New Orleans LA, Jackson MS, or Little Rock AR; Other locations within Entergy’s service territory may be considered***

 

Job Summary

The Zero Trust Security Architect utilizes their knowledge of IT and Cybersecurity engineering to lead and/or participate in the development of assigned projects or solutions. The Zero Trust Security Architect focuses on implementing security requirements for assigned projects and solutions while maintaining compliance with internal and externals policies and regulations.

 

The Zero Trust Security Architect works closely with the Enterprise Security Architect to ensure projects and solutions are consistent with Entergy’s Information Security strategy and roadmap. The Zero Trust Security Architect provides clear and concise direction to project stakeholders and acts as the “face” of information security for those teams.

 

Key Responsibilities

•  Zero Trust Architect will plan, manage, and coordinate the complex cybersecurity governance activities requiring multi-disciplinary collaboration.
• Experience with System Maturity Model.
• Participate, lead, and jointly deliver security evaluation reports on cloud providers , cloud native platforms (PCF, Docker, Kubernetes, etc.), and Software as a Service solutions
•  Zero Trust Knowledge of NIST guidelines and compliance requirements.
• Provide domain expertise in both public and private cloud and enterprise technology
• Continually evaluate new threats in the cloud, to identify the impact on IT and Business to develop and implement security controls
• Knowledge and experience using relevant cybersecurity and analysis tools. Utilize Information Security reference architectures to develop secure solutions and designs for projects
• Provide input to policies, procedures, standards, processes, and templates that are consistent with the Cybersecurity strategy and roadmap
• Participate in security and non-security projects to ensure that security requirements are defined and implemented
• Perform assessments and threat modeling of existing and emerging technologies to ensure they meet Entergy security and compliance requirements
• Evangelize and advocate for information security with stakeholders
• Monitor emerging trends in Information Security and technology and make or suggest changes to Entergy’s security posture as necessary

Education needed

Bachelor’s degree in computer science, cybersecurity, information systems, engineering or a related discipline or equivalent work experience. Master’s degree is a plus.

 

Experience needed

Security Architect Sr: 5+ years of full-time dedicated experience in Cloud Security roles focused on delivering security on cloud native, distributed architectural solutions in complex environments 

Security Architect: 3+ years of full-time dedicated experience in Cloud Security roles focused on delivering security on cloud native, distributed architectural solutions in complex environments 

 

• Experience in defining security standards and reference architectures used to guide technical resources in secure system implementation and configuration for enterprise  systems
• Familiarity with predominant public cloud providers
• Understanding of Industry trends in Zero Trust Identity
• Experience working with outsourced teams
• Experience in working in partnership with colleagues throughout the enterprise

 

Minimum Knowledge, Skills, and Abilities needed

• Familiarity with technologies commonly utilized within an enterprise IT and OT environment
• ZeroTrust Knowledge of NIST guidelines and compliance requirements.
• Strong knowledge of multiple information security domains with an emphasis in Cloud services
  • Operating systems (*nix, Windows, IOS, etc.)
  • Networking and network security
  • APIs
  • Secure coding/application security
  • Vulnerability Management
  • SIEM
  • Identity and Access Management
  • Penetration testing
  • Scripting (Python, PowerShell, Perl, etc.)
  • Security process and control development
  • Endpoint protection technology
  • OT systems and protocols
  • Smart Grid technology
• Some knowledge of IT Security regulati