RQ00773 - Security Architect - Senior
Duration: 6 months (124 Business Days) + Possible extension of 6 months
Location: Hybrid at 525 University Avenue
Must Haves:
- 10 or more years of experience in IT security principles, practices, technologies, programs, and procedures with a solid knowledge of cloud architecture and security controls.
- Certifications in in any of the following cyber security and cloud security architecture (e.g., CISSP-ISSAP, CCSP, GDSA)
- Certifications in any of the following are an asset. ArchiMate, TOGAF, SABSA, Zachman
Description
Security architecture assessments and consultations are required as a prerequisite to the go live in order to comply with OH Policies and standards. Security architecture assessments ensure compliance of product/project architectures with approved security architectures standards and cloud decision records prior to the project go-live date. The Sr. Security Architect ,will support the project influx and ensure the mandatory security architecture assessment is done in a timely manner that doesn't intervene with the project's go-live dates.
Required Skills:
- 10 or more years of experience in IT security principles, practices, technologies, programs, and procedures with a solid knowledge of cloud architecture and security controls.
- Certifications in in any of the following cyber security and cloud security architecture (e.g., CISSP-ISSAP, CCSP, GDSA)
- Certifications in any of the following are an asset. ArchiMate, TOGAF, SABSA, Zachman
Responsibilities:
- Develop and maintain security reference architectures, network diagrams and other guidelines to support the policies and standards, enabling the delivery of target state enterprise-level Information Security capabilities, and reducing the risk of siloed and redundant solutions.
- Develop security requirements and advise on technologies to be used in cloud environments during an entire project lifecycle.
- Ensure optimal placement and adequacy of the technology to achieve an ideal cloud security architecture, with respect to the cloud service model being used.
- Analyze proposed solution architectures, technology, design, and IT development processes to identify potential threats and vulnerabilities, and to recommend options that enhance the security of solutions and business processes.
- Acts as a subject matter expert and may take on more complex work in developing plans and deliverables and interacting with key internal partners.
- Manage multiple security related projects simultaneously, and present status updates to upper management.
- Leverage existing best practices in addition to proposing, developing, and integrating best practices as they relate to business, policy, information, security, application and technical infrastructure architecture
- Identify and escalate issues and work with projects to ensure application management and quality standards are adhered to
Desired Skills:
- Strong knowledge and understanding of cloud and on-prem system and applications architectures and security controls.
- Deep understanding of security threats, vulnerabilities and safeguards relevant to application development, test and QA environments, and IT (data center) operations.
- Strong knowledge of a wide variety of information systems and security technologies including Operating Systems security, LAN and WAN, Internet protocols and applications, secure communications, firewalls, IDS/IPS, PKI, identity and access management, identification and authentication techniques, role-based access control, malware defense, etc.
- Strong Knowledge an understanding of information security frameworks such as ISO 27001/2 and NIST.
- Good verbal and written communication skills including preparing and presenting and articulating architecture-related concepts to both technical and non-technical audiences
- Functions at a high level of autonomy in setting objectives based on direction from management
- Ability to build sustainable relationships with stakeholders, partner and colleague
Deliverables:
- Analyze proposed solution architectures, technology, design, conducting an assessment to identify security architecture gaps and deviations from approved standards/patterns and to identify potential threats and vulnerabilities, then recommend options that enhance the security of solutions.
- Development, update and contribution to security architecture standards, patterns, and reference architectures for cloud environments.
- Ensure optimal placement and adequacy of the technology to achieve an ideal cloud security architecture, with respect to the cloud service model being used.
AI Disclaimer: Source Code may use artificial intelligence (AI) tools to assist in certain aspects of its recruiting and business operations.
Note: The higher end of the range is intended for absolutely exceptional candidates who meet all must-have requirements and most or all nice-to-have qualifications. The client will evaluate candidates based on both rate expectations and overall skill set when shortlisting.
INCORPORATED RATE RANGE (7.25 billable hours per day)
-
$88.54/hr - $106.25/hr Inc.
T4 RATE RANGE (7.25 billable hours per day)