IT Cloud Security Architect

Title: IT Cloud Security Architect

Location: Iselin, NJ (Onsite)

Duration:Full time

Responsibilities

• Develop, document, and enforce cloud security policies, standards, and baselines through processes, reporting, and technical means.
• Monitor, benchmark and report progress of cloud security threats, assets, and vulnerabilities.
• Work with asset owners and vulnerability management team to identify and remediate cloud vulnerabilities.
• Participate in enterprise architecture review boards and processes and provide security recommendations for new and existing vendor and user-developed cloud technologies and interfaces.
• Perform monitoring and analysis of cloud logs and data outputs and participate in security and incident tracking, monitoring, and reporting.
• Provide updates for daily and weekly metrics for cloud security events and reporting.
• Deployment and administration of cloud security tooling and associated processes.
• Develop and maintain documentation for new and existing cloud processes and technologies.
• Stay informed and provide recommendations to cloud leadership of new and evolving cloud technologies, products, tooling, methodologies, threats, and risks that would affect the HMH environment.
• Develop, model and evolve cloud attack vectors and design security and/or mitigating controls to mitigate risk.
• Perform cloud assessments using enterprise methodologies and industry better practices.
• Maintain the cloud risk tracker and report to business and technology leadership of status of risks, mitigations, and remediation.
• Serve as a technical resource in the cybersecurity team efforts to build and deploy various configurations in the cloud and on-premise.
• Research and recommend new and evolving industry cloud technologies, solutions, management strategies and effective resource utilization models that can be presented to Senior Leadership (i.e. Directors and above).
• Build relationships with key IT and business leaders across HMH which would include senior leadership (i.e. Directors and above).
• Learn on the job and explore new technologies with little supervision to identify new and emerging cloud threats.
• Other duties and/or projects as assigned.
• Adheres to HMH Organizational competencies and standards of behavior.

Qualifications

Education, Knowledge, Skills and Abilities Required:

• Bachelor's degree preferred, but would consider Associate's degree plus experience outlined below.
• Minimum of 10+ years of overall cybersecurity experience, including time spent as an enterprise Cloud Security Architect or another similar role that builds and supports secure cloud environments for a large enterprise
• Strong knowledge of cloud security concepts with SaaS, PaaS and IaaS platforms and the architectural knowledge of Google Cloud Platform (Google Cloud Platform) and Microsoft Azure cloud services.
• Wide breadth of knowledge across security products, tools, and industry trends; ability to create solutions using a pragmatic, risk-based approach.
• Strong knowledge of networking concepts and architecture, including security considerations associated with networking hardware like routers, switches, firewalls, gateways, etc.
• Understanding of malware, emerging threats, attacks, and vulnerability management.
• Excellent written and verbal communication skills.
• Proficient computer skills that may include but are not limited to Microsoft Office and/or Google Suite platforms.

Education, Knowledge, Skills and Abilities Preferred:

• Strong knowledge of cloud technologies with SaaS, PaaS and IaaS platforms and the architectural knowledge of Google Cloud Platform (Google Cloud Platform), Amazon Web Services (AWS), and Microsoft Azure cloud services.
• Strong deductive reasoning, critical thinking, problem solving, and prioritization skills.
• Experience assisting the development and maintenance of tools, procedure, and documentation.
• Track record of effective project management and project delivery.
• Strong service mentality including the resolution of stakeholder escalations and incident management.
• Ability to work in a fast-paced team environment.
• Ability to develop detailed process and procedure documentation.
• Ability to present complex solutions and methods to both technical and non-technical stakeholders.
• Excellent written and verbal communication and organizational skills.
• Strong team player who collaborates well with others to solve problems.
• Strong interpersonal, problem solving, and communication skills.

Licenses and Certifications Required:

• At least one of the following professional security certifications at hire or must obtain within one (1) year of hire: GIAC certifications, OSCP (Offensive Security Certified Professional), CISSP (Certified Information Systems Security Professional), SSCP (Systems Security Certified Practitioner), Cloud Security Alliance: Certificate of Cloud Security Knowledge (CCSK), or comparable.

Licenses and Certifications Preferred:

• Cloud Engineering or Security certifications (e.g. AWS Solutions Architect, Microsoft Certified, Google Associate Cloud Engineer, etc.).