Senior Technical Lead/ Security Architect - TechDigital Corporation
Frisco, TX
About the Job
Required skills
Frameworks:
- Accountable for translating private cloud implementation into a well-defined blueprint that uses Cloud Security Products to enhance IT security. Understands the vision and enabler to autonomously cater to user needs.
- In-depth knowledge of system design and architecture with the technologies and experience implementing a wide range of solutions
- Delivered hybrid cloud architectures that are secure, resilient, scale and adhere to best-practice procedures. (AWS, Microsoft Azure, GCP)
- Deep understanding of cloud computing principles, including virtualization, containerization, microservices, and serverless computing; Risk Management, RHCOS security, container security, Kubernetes security, IAM security, network security, auditing, encryption, secrets management and data protection, securing CI/CD
- Manage the selection and architecture of cloud security tools and controls, including existing enterprise tools that can extend into the cloud, cloud-native security controls and third-party offerings.
- Develop IAM architectures where Identity becomes the new perimeter and moves defenses from static, network-based perimeters to focus on users, assets, and resources. (IGA, IDaaS, PAM, MFA)
- Advances knowledge of Identity Security concepts, least-privilege, separation of duties, and Zero trust design principles.
- Experience with IAM Policy 'as code' ; OPA – Open Policy Agent (Styra Enterprise version of OPA); Cedar – Aws opensource policy agent
- Ability to be a technically strong individual with an IT Security background who has demonstrated skill in managing product teams; solid understanding of how IT Security enhances Digital Transformation and identifies new ways of helping bring new business solutions to market while remaining secure
- Leading a team of IAM, network structuring, and enhancing the self-service experience.
- Act as a Thought Leader to stakeholders such as CISOs and executive sponsor with regards to emerging technologies and market trends
- Accountable for customer orientated communications plan, focusing on strategic business value
- Work closely with the project team, CISO to manage and govern security forums with CISOs, NITSOs, CIOs and CTOs
| Enterprise Architecture | Certificate management |
| Cybersecurity Strategy | Identity and Access Management |
| Project Management & Planning | Zero trust |
| Governance Risk and Compliance | Privileged account security |
| Cyber threat management | Data governance & security |
| Functional cybersecurity operations | Business continuity management |
| DevSecOps practices | Vulnerability management |
| Microservices and container security | Threat management |
| Hybrid cloud security | SIEM & SOAR |
Frameworks:
- ISO 27001 , NIST CSF, NIST SSDF , CIS controls , OWASP Top 10, SAMM , GDPR, SOX type 1 & 2 , TOGAF
- Minimum 15 years of qualified experience
- Bachelor's degree in computer science(s), information technology/security, systems engineering or relevant work experience
- Good to have Professional certifications in information technology and cloud security -- CISSP preferred CISM (optional), CCSP (optional), CISA (optional), CEH (optional), OSCP (optional); Architect Certification,
Source : TechDigital Corporation