Enterprise Security Architect

Title: Enterprise Security Architecture - IT

Sector: IT

Job Summary:

The Security Architect will be responsible for designing, overseeing and managing a comprehensive security architecture that encompasses network, database, infrastructure, and container-based security. This role involves collaborating with various teams to embed security practices across the organization, ensuring that systems are robust and resilient against evolving threats.

Key Responsibilities:

• Design Security Architecture: Develop and maintain a security architecture that addresses network, infrastructure, database, and container-based environments.
• Network Security: Ensure impeding network security solutions, including firewalls, VPNs, intrusion detection/prevention systems, and network segmentation to guarantee secure Solutions design.
• Infrastructure Security: Establish and enforce security measures for on-premises and cloud-based infrastructure, focusing on access controls, monitoring, and risk management.
• Database Security: Define security protocols for databases, implementing encryption, access management, and activity monitoring to ensure data confidentiality and integrity.
• Container-Based Security: Develop security practices for containerized applications, including securing Kubernetes clusters, image scanning, and monitoring container runtime environments.
• Risk Assessment and Mitigation: Leverage and utilize regular vulnerability assessments, risk analysis, and penetration testing to identify and address security weaknesses.
• Compliance and Best Practices: Ensure compliance with relevant industry standards and regulations (e.g., PCI, NIST, ISO, CBE requirements, GDPR) and promote adherence to security best practices.

Qualifications:

• Bachelor’s degree in information technology, Computer Science, or related field.
• Relevant certifications such as CISSP, CISM, CEH, or cloud security certifications is a plus.
• 11+ years of experience in security architecture or a related role, with experience in infrastructure, applications, databases, networks, and container-based security.
• Strong knowledge of security protocols for infrastructure, applications, databases, network, and container-based environments.
• Familiarity with security tools and technologies, such as Next Generation Firewalls, IDS/IPS, WAF, vulnerability scanners, SIEM, encryption solutions, and container security platforms.