Security Architect

Required skills:
•        5+ years of experience and expert understanding of identity and access control, logging and reporting systems
•        5+ years of experience and expertise in automation development using tools such as python and bash
•        5+ years of experience with linux, windows, network security protocols and procedures
•        5+ years of experience in supporting large it environments and/or system deployments
•        Bachelor's degree in an information technology or information security related field; or 8+ years of work experience as a security architect may be substituted in lieu of education.
•        5+ years of experience in cyber security awareness and understanding.
•        Preferred skills
•        Knowledge of siem analysis and reporting
•        Knowledge of security frameworks including: nist, csf, cjis, irs 1075, cms mars-e
•        Knowledge of application security (appsec)
•        Cissp, cisa, ciso or equivalent advanced security certification. Additional relevant certifications include e.g., ceh, oscp, gpen).

Daily duties / responsibilities:
•        This position will be 100% remote telework.
•        identity and access management – ensuring that appropriate identity management, single sign on,
·        Multi-factor authentication, active directory and applications are properly implemented and configured to support it and security operations.
•        Responsible for automation development and implementation of disparate security and enterprise it tools
•        Responsible for planning, designing, development and implementation of enterprise security solutions that align with business goals and risk tolerance.
•        Design, deploy and manage countermeasures to known security threats and develop preventative mitigation strategies for new and emergent threats to enterprise data, networks and associated services.
•        Ensure, validate and measure the consistent application of protective measures throughout the enterprise business application and infrastructure support environments. Take appropriate action to protect state data and technology services.

Required education/certifications:
•        Bachelor's degree in an information technology or information security related field
•        Eight years of relevant work experience may be substituted in lieu of education preferred
•        Cissp, cisa, ciso or equivalent advanced security certification.
•        Additional relevant certifications (e.g., ceh, oscp, gpen).
•        Vendor certifications in siem or logging technologies.