Description
Business Solution Security Architect
Location: Alpharetta, GA preference
Remote candidates will be considered
$70 - 80/hr
1 year + extensions
Must have direct Microsoft Azure exposure
The Business Solution Security Architect will design, integrate and implement security architectures for cloud and on premise based business solutions. The architect will embed within Agile teams to identify and prioritize security-related user stories, epics and themes, create secure-by-default designs that balance business benefit and risk, provide security guidance and facilitate delivery of information security services throughout Agile life cycle. The architect will also perform risk assessments of cloud and on premise applications and infrastructure, develop appropriate risk treatment and mitigation options based on industry standard security controls, and effectively articulate findings and recommendations to IT project teams and management. The architect is expected to work in a highly collaborative global environment; demonstrate excellent interpersonal, communication, and organizational skills working with an Agile environment; and adjust to multiple demands, shifting priorities, ambiguity, and rapid change.
The architect shall have significant working security experience and knowledge in the design, implementation and operation of security controls in one of the following areas:
Agile & DevOps Methodologies - Experience as a contributing member of a balanced team within an Agile development or DevOps environment.
Application Security - Experience with the design of security controls for multi-tier business solutions including the design of application-level access and entitlement management, data tenancy and isolation, encryption, and logging. Working familiarity with REST API and microservices architecture.
Cloud Security -Technical understanding of virtualization, cloud infrastructure, and public cloud offerings and experience designing security configuration and controls within cloud based solutions in Microsoft Azure and Azure PAAS services
Infrastructure Security - Experience with the integration of common infrastructure security technologies and solutions into business solution architectures including the integration of identity & access management, intrusion detection and prevention, security monitoring, and data encryption solutions.
Identity and Access Management - Active Directory based Identity and Access Management and Authorization design experience and integration with IDaaS and Federation technologies.
Although not required, it is preferred that candidates possess additional working security experience and knowledge in one or more of the following areas:
Operational Security - Experience with defining operational models and procedures for business solutions including the operation and maintenance of infrastructure and application security controls.
Information Security Standards - Knowledge of common information security standards such as: ISO , NIST CSF, FEDRAMP, CSA and CIS Controls.
Product Management - working with a broader business team on aspects of security that affect all phases from concept to design to implementation and then operational support.
Experience/Required Skills
Career-Level position within field. Requires experience and proficiency in discipline. Conducts complex work important to the organization. Works with minimal supervision with wide latitude for independent judgment. To qualify, candidates must have:Approximately 10-12 years of experience in information systems architecture methodologies, management, and tracking/analysing budgets. Sound judgment and tact. Excellent management, interpersonal, communication, and organizational skills. Ability to work and team effectively with clients and other management personnel
Education
Advanced degree in Computer Science or a related discipline; or equivalent work experience
For immediate consideration, please forward resume (see below)