Security Architect

You will work with our team of Architects to craft secure design patterns, perform security assessments, and review system designs using a risk-based, threat-modeling approach. The Security Architect will have the following core responsibilities:

• Partner with business and technology teams to define security designs that meet security requirements and enable business objectives
• Create, maintain and document security architectures & design patterns to be used by technology teams
• Develop relationships, repeatable processes, and resources to usher security champions in the company
• Perform threat-modeling as required to substantiate the recommendations & designs
• Participate in the development and maintenance of security policy, standards & reference materials
• Review and contribute to infrastructure-as-code representations of architecture changes and designs

Jake Lutman

1. Extensive experience designing & building secure cloud-native solutions, especially Amazon Web Services (AWS)
2. Knowledge of Infrastructure-as-Code (IaC) principles & experience reviewing infrastructure configs/changes (Cloud Formation & Terraform)
3. Containers, Kubernetes, Service Mesh, RESTful/gRPC APIs
4. Strong foundation in cybersecurity landscape, especially in identity & access management, network access control and secure configuration management

Top 3 Soft Skills:

1. Strong ability to own your work
2. Strong communications verbal and written, presenting to executives
3. Strong solutioning mindset

Skills and Experience Baseline

• Ability to collaborate & communicate effectively with technical & non-technical teams
• Extensive experience designing & building secure cloud-native solutions, especially in Amazon Web Services (AWS)
• Ability to partner with multiple stakeholders to derive accurate threat models for new/existing systems and reduce information security risk on systems
• Knowledge of Infrastructure-as-Code (IaC) principles & experience reviewing infrastructure configurations/changes in this format (e.g., CloudFormation, Terraform, etc.)
• Strong technical foundations in modern application/microservice architectures & related technologies (e.g., Containers, Kubernetes, Service Mesh, RESTful/gRPC APIs, etc.)
• Understanding of CI/CD & Secure Development processes & tools (e.g., Jenkins, Git, etc.)
• Strong foundation in cybersecurity landscape, especially in identity & access management, network access control and secure configuration management