Cyber Security Architect - SR (Hybrid) - Electric Reliability Council of Texas

At ERCOT, our diverse and dynamic work environment provides a platform on which employees can work together to build the future of the Texas power grid and wholesale market utilizing the latest technologies and resources. We encourage you to join our talented, dedicated workforce to develop world-class solutions for today and tomorrow’s energy challenges while learning new skills and growing your career. ERCOT is committed to fostering diversity and inclusion at all levels of our company. It is the cornerstone of our corporate values of accountability, leadership, innovation, trust, and expertise. We accept and celebrate those that join us and recognize that individuals with a wide variety of talents, ideas, and experiences propel the innovation that drives our success. A diverse and inclusive workforce strengthens us and allows for a collaborative environment to solve the challenges that face our industry today and in the future. ERCOT offers the flexibility to work both in and out of the office within the state of Texas, providing our employees with an enhanced work life balance. JOB SUMMARY Develops and executes architecture strategy and support strategic system development initiatives. Provides design recommendations. Develops enterprise level solutions and evaluates proposed system and application architectures. Reviews requests for firewall changes and evaluates third party vendors. Participates in project meetings and provides guidance. JOB DUTIES Understands and applies principles, theories and concepts related to the profession and ERCOT's culture. Exercises judgment within defined procedures and practices to determine appropriate action. Impact is generally limited to specific assignments or projects. May respond to inquiries and/or provide guidance to lower-level workers. ADDITIONAL JOB DUTIES Level 2 Represents the Cyber Security Department by providing expert technical and architecture consulting on security requirements Analyzes complex systems architecture (application, network, system, and database, process) to identify design gaps and recommend security enhancements Understands current as well as emerging security threats and design security architecture to mitigate threats where possible Works with project stakeholders to identify appropriate security requirements, engineer practical security solutions and implement measurable security guidelines Works with project managers and stakeholders to develop practical, effective implementation plans with measurable project milestones for all security solutions Reviews current security policy and standards to ensure technical security requirements, guidelines and best practices are communicated and put into practice for each assigned project Supports stakeholders across the organization as a technical expert on information security architecture. Ensures the design of business solutions meets security mandates. Analyzes complex projects to identify potential vulnerabilities, security control points, and risk mitigation measures to ensure compliance with Security Policy, Standards, and technical security requirements. Securely achieves the functional requirements of business initiatives. Consults on projects to provide security expertise on how to implement best security practices for application, database, and system technologies Supports cloud adoption of ERCOT applications as they are being transformed and/or modernized Knowledge of: Application Security (SDLC, CI/CD, DevSecOps, OWASP etc.) access authentication methods computer algorithms cryptology database systems embedded systems encryption algorithms (e.g., IPSEC, AES, GRE, IKE, MD5, SHA, 3DES) fault tolerance network design traffic flows across the network (e.g., Transmission Control Protocol (TCP) and Internet Protocol (IP), Open System Interconnection Model (OSI), Information Technology Infrastructure Library, v3 (ITIL) Interfaces between applications - that is: events, messages, and data flows Data classifications, Databases and supporting data models Hardware, platforms, hosting: servers, network components and devices Local and wide area networks, Internet connectivity diagrams, Networking concepts Cloud computing concepts, architectures, and technologies. Cloud platforms such as AWS, Azure or Google Cloud. Level Senior and Lead - Above + Develops the ERCOT Cyber security Architecture Strategy including ERCOT Cloud Strategy Serves as the information security subject matter expert, providing advisory and consulting service and functioning as a high-level security consultant to all projects and provide security expertise on how to implement best security practices for application, database, and system technologies Partners with stakeholders across the organization to securely achieve the functional requirements of business initiatives as the technical expert on information security architecture Works on the most complex issues where analysis of situations requires an in-depth evaluation of variable factors. Has the ability to resolve complex issues in creative and effective ways Maintains knowledge of emerging trends and industry best practices Leads projects or provides guidance to and coordinates activities of other workers Experience designing and implementing security solutions Demonstrated superior knowledge of security principles and technologies Designs and secure architecture for ERCOT’s cloud platforms EXPERIENCE REQUIRED Security Architect Level 2 requirements: Requires minimum 2 years related work experience in excess of degree requirements Senior Security Architect requirements: Requires minimum 5 years related work experience in excess of degree requirements EDUCATION Bachelor's Degree: Cybersecurity, Computer Science, MIS or related field (Preferred) Master's Degree: Cybersecurity, Computer Science, MIS or related field (Preferred) or a combination of education and experience that provides equivalent knowledge to a major in such fields is preferred Certifications (all levels) CISSP, CISM, CISA, CCSP, ISSAP, SANS GIAC, AWS, Azure or other security certifications (Preferred) Salary and level will be based on overall experience as determined by ERCOT. WORK LOCATION – Taylor, TX: Employees will be required to be on-site in Taylor, TX at minimum 2 days per week, or more, as needed based on the business needs as determined by management On-site schedules are flexible or may be rotated based on business needs as determined by the Manager Remote work is required to be performed from your Texas residence. Employees may opt to work on-site more than required or 100% of the time The foregoing description reflects the minimum qualifications and the essential functions of the position that must be performed proficiently with or without reasonable accommodation for individuals with disabilities. It is not an exhaustive list of the duties expected to be performed, and management may, at its discretion, revise or require that other or different tasks be performed as assigned. This job description is not intended to create a contract of employment with ERCOT. Both ERCOT and the employee may exercise their employment-at-will rights at any time. #LI-Hybrid Expected Salary Range: $122,262 - $207,828 Are you an ERCOT Employee? If so please log in to Workday to apply. The Electric Reliability Council of Texas (ERCOT) manages the flow of electric power to 24 million Texas customers - representing about 90 percent of the state's electric load. As the independent system operator for the region, ERCOT schedules power on an electric grid that connects more than 52,700 miles of transmission lines and 1,100 generating units. ERCOT also performs financial settlement for the competitive wholesale bulk-power market and administers retail switching for 8 million premises in competitive choice areas. ERCOT is a membership-based 501(c)(4) nonprofit corporation, governed by a board of directors and subject to oversight by the Public Utility Commission of Texas and the Texas Legislature. ERCOT's members include consumers, cooperatives, generators, power marketers, retail electric providers, investor-owned electric utilities (transmission and distribution providers,) and municipal-owned electric utilities. ERCOT offers an excellent benefits package, which includes health, dental, vision, life insurance, long/short-term disability insurance, long-term care insurance, Section 125 Flexible Spending Account, and a Retirement Savings Plan. The medical, dental, vision, and quality-of-life benefits offered by ERCOT are second to none. Full-time employees are eligible to enroll in benefits on the first of the month following the date of hire. Additionally, 401(k) plans are available to help employees plan for the future. The ERCOT Internship Program provides college students the opportunity to develop their skills in a professional work environment. Each intern will receive unique projects and assignments that aim to solve real challenges facing the electric industry. ERCOT internships provide professional learning experiences that offer meaningful, practical work related to each student's desired career path. Eligible candidates should be enrolled in an academic bachelors or post graduate degree program maintaining a GPA of 3.0 or higher. The ERCOT Engineer Development Program (EDP) is a 12- to 16-month, self-paced program geared toward entry-level engineers looking to start a career in the power industry. Through the program, an EDP Engineer receives one-on-one mentoring, specialized training, and exposure to the work performed by each of the engineering groups at ERCOT. The program allows engineers to develop the fundamental skills necessary to reach their full potential while gaining an understanding of the types of engineering work ERCOT has to offer. EDP management supports participants each step of the way as they progress through the program. Upon completion, graduates are placed as full-time engineers within one of ERCOT’s engineering groups. The GMS Development Program (GDP) is designed to provide entry-level and early career professionals with the skills necessary to become successful Power System and Computer Engineers. The program, which is based in ERCOT’s Grid and Market Solutions (GMS) Department, will provide experience in day-to-day work and instruction in the fundamentals of electric power systems engineering, grid and market applications, software programming, and IT service and operations management. The GDP offers one-on-one mentoring, training, field trips, and special assignments. These assignments allow GDP engineers to become knowledgeable and familiar with the various business areas at ERCOT. The GMS leadership team prepares GDP engineers for a future career at ERCOT in power systems and computer engineering. The System Operator Development Program (ODP) is intended to combine real-time daily operations in an exciting work setting to prepare participants with the vital skills necessary to be successful in such a critical position — providing 24x7x365 on-demand support to manage the flow of electric power to more than 26 million Texas customers. If you are new to the industry, this program introduces you to the Bulk Electric System by combining introductory courses with the NERC Certification Exam Preparation Program in preparation to pass the NERC Certification Exam.