Job ID: TX-302CSD2307 (913791027)5p
Remote Cloud Security Architect with ISO27001, IAM, router, firewalls, CIS Baselines, NIST, TCP/IP, DNS, SMTP, HTTP, API, REST, RPC, testing, EndGame, Crowdstrike, CyberReason, Proofpoint, MimeCast, Microsoft, Symantec, Microsoft, Bitglass, Netskope, Cisco Umbrella, Palo Alto, ZScaler, GSEC, CEH, CISA, CCSP, , AWS, LOB, CIO and CISSP-ISAAP Experience
Location: Austin, TX OAG
Duration: 12 Months
Years Required/Preferred Experience.
5 Required Proven work experience in security architecture, demonstrating solutions delivery, principles and emerging technologies – designing and implementing security solutions. This includes continuous monitoring and making improvements to those solutions.
5 Required Experience designing and implementing security measures needed to protect data stored on public clouds against unauthorized access, including secure authentication methods, encryption, access control lists, intrusion detection systems, firewalls, etc.
5 Required Knowledge and understanding of multi-cloud security architectures covering infrastructure, information security tools, cloud-based application security and other cloud-based technology and infrastructure architectures.
5 Required Experience leading the implementation of complex projects and initiatives that have agency-wide scope
5 Required Experience consulting and engineering in the development and design of security best practices and implementation of solid security principles across the organization, to meet business goals along with customer and regulatory requirements.
5 Required Proven expertise in security considerations of cloud computing; which includes data breaches, broken authentication, hacking, account hijacking, malicious insiders, third parties, APTs, data loss and DoS attacks.
5 Required Experience analyzing threats to an organization’s security and designing solutions to mitigate those threats.
5 Required Knowledge and experience working with relevant National Institute of Standards and Technology (NIST) standards.
5 Required Knowledge and experience working with ISO27001 – specifications for a framework of policies and procedures that include all legal, physical and technical controls involved in an organization’s risk management.
5 Required Experience delivering/managing Identity and access management (IAM) solutions – the framework of security policies and technologies that limit and track the access of those in an organization to sensitive technology resources.
5 Required Experience working with security management tools (e.g., vulnerability scanners, file integrity monitoring, configuration monitoring, etc.) and perimeter technologies (e.g., router, firewalls, web proxies and intrusion prevention, etc.).
5 Required Knowledge of configuration management, change control/problem management integration, risk assessment and acceptance, exception management and security baselines (e.g. CIS Baselines, NIST, vendor security technical implementation guides, etc.).
5 Required Experience designing and developing security architectures that align with an organization’s strategic goals. Creation of architectural artifacts for key technology initiatives.
5 Required Strong awareness of networking and internet protocols, including TCP/IP, DNS, SMTP, HTTP and distributed networks
5 Required Conducting forensic investigations on cyberattacks to determine how they occurred and how they can be prevented in the future.
5 Required Knowledge of web services, API, REST and RPC.
5 Required Ability to resolve complex security issues in diverse and decentralized environments; to learn, communicate, and teach new information and security technologies; and to communicate effectively.
5 Required Excellent communication and organizational skills, and the ability to stay focused on meeting goals within a busy workspace. Extensive skill in effective verbal and written communications with other computer professionals, and stakeholders.
5 Required Strong understanding of data protection and familiarity with methods to safeguard against data corruption, compromise, and loss.
5 Required Knowledge and experience with penetration testing. Familiarity with various types of ethical hacking such as covert pen tests, internal pen tests, and open-box pen tests.
5 Required Experience with security auditing and the development of audit criteria. Help oversee continued compliance once security measures are in place.
5 Required Knowledge and understanding of threat analysis and assessment of potential and current information security risk/threats.
5 Required Experience creating/reviewing/updating security policies and standards for the public/private/hybrid cloud contexts.
5 Required Knowledge of software development life cycle methodologies.
5 Required Ability to establish and always maintain effective and professional working relationships with others in the course and scope of conducting business.
5 Preferred Experience educating employees about the importance of data security and best practices for protecting sensitive information
5 Preferred Experience with Endpoint Detection and Response (i.e. EndGame, Crowdstrike, CyberReason). Detect and respond to alerts from end point detection response tools
5 Preferred Experience with Email Threat Management (i.e. Proofpoint, MimeCast, Microsoft)
5 Preferred Experience with SIEM engineering design/management/analysts (i.e. Splunk, Rapid7, SumoLogic)
5 Preferred Experience with Data Loss Protection/Cloud Access Security Brokers (i.e. Symantec, Microsoft, Bitglass, Netskope)
5 Preferred Experience with Cloud Enterprise Network Security (i.e. Cisco Umbrella, Palo Alto, ZScaler)
4 Preferred Graduation from accredited four-year college/university with major coursework in information technology security, computer information systems, computer science, management information systems, or a related field is generally preferred.
1 Preferred GSEC, CEH, CISA, CCSP certifications desired
1 Preferred Ability to obtain required certification within 6 months and maintain approved baseline certification for position (i.e. CISSP-ISAAP or equivalent)
1 Preferred Certification as an AWS Solutions Architect, Cloud Security Certification, and/or OpenStack Administrator Certification a plus. (Other cloud-related certification also a plus)
1 Preferred Ability to influence and build relationships with LOB stakeholders, technology CIO leadership, external service providers, and architecture teams
1 Preferred Ability to delegate duties and coordinate with fellow team members, displaying active listening, enthusiasm, and empathy.
Design, build and implement enterprise-class security systems for a production environment
Align standards, frameworks and security with overall business and technology strategy
Identify and communicate current and emerging security threats
Design security architecture elements to mitigate threats as they emerge
Create solutions that balance business requirements with information and cyber security requirements
Identify security design gaps in existing and proposed architectures and recommend changes or enhancements
Define and prioritize essential system capabilities or business functions required for partial or full system restoration after a catastrophic failure event
Define appropriate levels of system availability based on critical system functions and ensure that system requirements identify appropriate disaster recovery and continuity of operations requirements to include any appropriate fail-over/alternate site requirements, backup requirements, and material supportability requirements for system recovery/restoration
Develop/integrate cybersecurity designs for systems and networks with multilevel security requirements or requirements for the processing of multiple classification levels of data
Document and address the organization’s information security, cybersecurity architecture, and systems security engineering requirements throughout the acquisition life cycle
Employ secure configuration management processes
Ensure that acquired or developed system(s) and architecture(s) are consistent with the organization’s cybersecurity architecture guidelines
Identify and prioritize critical business functions in collaboration with organizational stakeholders
Perform security reviews, identify gaps in security architecture, and develop a security risk management plan
Provide advice on project costs, design concepts, or design changes
Provide input on security requirements to be included in statements of work and other appropriate procurement documents
Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials)
Define and document how the implementation of a new system or new interfaces between systems impacts the security posture of the current environment
Analyze candidate architectures, allocate security services, and select security mechanisms
Develop a system security context, a preliminary system security Concept of Operations (CONOPS), and define baseline system security requirements in accordance with applicable cybersecurity requirements
Evaluate security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents
Write detailed functional specifications that document the architecture development process
Analyze user needs and requirements to plan architecture
Develop enterprise architecture or system components required to meet user needs.
Document and update as necessary all definition and architecture activities
Determine the protection needs (i.e., security controls) for the information system(s) and network(s) and document appropriately
Translate proposed capabilities into technical requirements
Assess and design security management functions as related to cyberspace