Senior Security Architect

Security Architect (with at least 12 years of experience) to work in Brooklyn, New York (Metrotech Center)

Full-time: 35 hours a week

Project Description:

Develop a strategic firewall security architecture vision, including standards and frameworks that are aligned with overall business strategy using the current technology roadmap.  

Provide NextGen firewall architecture designs and configurations.

Research, design, and advocate new firewall technologies, architectures, and security products.

Provide expert Information Security firewall architecture vision, leadership, analytical guidance, and frameworks.

Define Information Security firewall architecture, security controls, and risk assessment & mitigation.

Identifying firewall integration issues studying firewall architecture/platform. researching firewall information security standards. 

Position Description:

• Develop a strategic firewall security architecture vision, including standards and frameworks that are aligned with overall business strategy using the current technology roadmap.  

• Provide NextGen firewall architecture designs, configurations.

• Research, design, and advocate new firewall technologies, architectures, and security products.

• Provide expert Information Security firewall architecture vision, leadership, analytical guidance, and frameworks.

• Conduct detailed security assessments, threat modeling, and vulnerability analyses to identify potential risks; propose and implement plans to mitigate these risks.

• Define Information Security firewall architecture and security controls.

• Identifying firewall integration issues studying firewall architecture/platform. researching firewall information security standards.

• Design and implement enterprise security architecture.

• Perform risk assessments and identify security gaps in infrastructure and applications.

• Develop security policies, standards, and guidelines for the organization.

• Conduct security audits, penetration tests, and vulnerability assessments.

• Monitor emerging security threats and recommend proactive measures.

• Collaborate with IT and development teams to ensure secure design and integration.

MANDATORY SKILLS:  ALL CANDIDATES MUST HAVE ALL AND BE DOCUMENTED IN THE RESUME

•             At least 12 years of experience in information security and/or IT risk management with a focus on security, performance, and reliability.

•             Ability to interact with a broad cross-section of personnel to explain and enforce security measures. 

•             Good working knowledge of current IT risks and experience implementing security solutions.      

•             Provide expert information security architecture, leadership, and analytical guidance for technical framework.    

•             Ensure technical design incorporate security and provide input into various enterprise architecture.  

•             Assist Information Security Engineering team to evaluate and design security solutions such as NGFW, DNS/DNSSEC, Cisco ISE, proxy, cloud solution, and Data Loss prevention technology.  

•             Conduct detailed security assessments, threat modeling, and vulnerability analyses to identify potential risks; propose and implement plans to mitigate these risks.    

•             Security Architecture & Frameworks: Deep understanding of security architecture principles, including familiarity with frameworks like TOGAF, SABSA, NIST, ISO 27001, and Zero Trust Architecture.

•             Network Security: Proficiency in securing network infrastructures (firewalls, routers, switches) and protocols (SSL, TLS, IPsec, etc.).

•             Cloud Security: Knowledge of security in cloud environments (AWS, Azure, Google Cloud), including best practices for securing cloud applications and data.

•             Encryption & Cryptography: Understanding of encryption techniques, key management, and cryptographic standards.

•             Identity & Access Management (IAM): Expertise in implementing and managing IAM systems, multi-factor authentication (MFA), and role-based access controls (RBAC).

•             Threat Modeling & Risk Management: Ability to identify potential threats, model attacks, and design secure systems that minimize risk.

•             Penetration Testing & Vulnerability Assessment: Familiarity with tools for detecting and assessing vulnerabilities and implementing fixes.      

•             Review system security controls and design necessary enhancements.