Security Architect

If you are an internal associate, please login to Workday and apply through Jobs Hub.

Job Purpose

The Security Architect role is responsible for developing security policies, ensuring compliance with regulatory requirements, and implementing security measures to protect the organization's data and systems. This position requires knowledge of hybrid computing and technology systems, as well as experience designing and transferring applications to the cloud to meet business needs. The Security Architect will mentor engineers during the transition from concept to production deployment. The Architect must possess excellent analysis, execution, and communication skills.

Essential Responsibilities

• Accountable for reviews for all projects in their assigned security pillar; and applies the standard delivery methodology process to all projects.
• Leads major security initiatives related to security deployments, security architecture, future roadmaps, and security projects.
• Reviews and contributes to the development of specifications for new and/or modified products/applications/systems.
• Utilizes architecture deliverable templates, populating security architecture documents for projects and systems, clearly articulating goals, constraints and rationale for all architecturally significant decisions.
• Presents security information to management, clients and peers.
• Provides leadership and executes hybrid cloud security architecture initiatives to advance the organization’s ongoing cloud transformation efforts.
• Offers technical expertise and architectural guidance in project planning and design to ensure alignment with the organization's hybrid cloud security strategy.
• Provides recommendations for hybrid cloud security infrastructure design, secure software development architecture, secure application frameworks, and secure system interfaces.
• Oversees the incorporation of hybrid cloud security and compliance standards within the hybrid cloud architecture framework, ensuring seamless security integration with on-premises and additional cloud environments.
• Delivers technical concepts and solutions to both internal and external audiences with different levels of technical knowledge concisely.
• Develops and updates both high-level and technical security documentation to facilitate effective planning and execution.
• Designs and develops security architecture solutions, encompassing integrated processes, applications, data and technology, to address security objectives in alignment with the Jackson Information Security and Privacy program.
• Ensures all projects within a security pillar aligns with the security standards, principles, best practices, models, design patterns, roadmaps, and target states.
• Promotes and applies optimal architecture and design practices to ensure project consistency and compliance with security policies and procedures.
• Expert in designing, integrating, and engineering Policy as Code (PaC), primarily using Terraform to manage Azure Policy and Open Policy Agent (OPA), integrated into CI/CD pipelines.
• Mentors less experienced team members.

Other Duties

• Provides after-hours On-Call assistance as needed.
• Performs other duties and/or projects as assigned.

Knowledge, Skills and Abilities

• Expert understanding of hybrid cloud computing and technology systems, as well as experience designing and transferring applications to cloud.
• Positive attitude and a strong commitment to delivering quality work.
• Effective communication skills (written and verbal) to properly articulate complicated hybrid cloud security reports to management and other IT development partners.
• Demonstrated ability to collaborate effectively in a team environment to achieve desired results.
• Demonstrated ability to successfully manage assignments on multiple projects, in a fast-changing technical environment.
• Demonstrated ability to successfully lead others through projects.
• Demonstrated Security Discipline Expert in two disciplines such as Network, Endpoint, Data, Identity or Cloud (Preferably Azure).
• Experienced in automating and engineering multiple security systems.
• Experience integrating CI/CD tools into pipelines, such as build automation tooling, Git based code repositories, artifact and library repositories and code deployment tools.
• Demonstrated strong scripting skills in a system automation language such as bash, Perl, or PowerShell.

Qualifications

• Bachelor's Degree in computer science, computer engineering, information technology, or another relevant field or equivalent experience and/or education required.
• 10+ years relevant technology experience required or 5+ years’ experience architecting, designing, executing, and supporting security solutions required.
• At least one current certification in technologies such as: Azure Solutions Architect Expert, AWS Certified Solutions Architect, Linux LPIC-2 or higher required.
• At least one current security certification, preferably CISSP Certified Information Systems Security Professional or GSE preferred.

Jackson is proud to be an equal opportunity workplace. The Company subscribes to and endorses federal and state laws and regulations relating to equal employment opportunity for all persons without regard to race, color, religion, gender, age, national origin, legally-recognized disability, marital status, legally-protected medical condition, citizenship, ancestry, height, weight, sexual orientation, veteran status, or any other factor not related to the needs of the job. The Company is committed to a policy of equal opportunity. Company facilities and campuses are tobacco-free environments.