What are the responsibilities and job description for the Enterprise Info Security Architect position at Henry Ford Health - Careers?
GENERAL SUMMARY:
The Enterprise Information Security Architect works in collaboration with all functional areas relative to information technology systems, networks, applications, voice and data communications, and computing services within Henry Ford Health System (HFHS). The position provides consulting and regulatory compliance guidance on strategic and technical initiatives and is knowledgeable of information security best practices and regulatory and compliance requirements that impact security for the enterprise. This position will work in a collaborative effort with IT to assure security programs and technical controls follow policies, applicable laws and regulations. Additionally, this role will work closely with Enterprise Architecture to ensure developed designs can be implemented and operationalized.
EDUCATION/EXPERIENCE REQUIRED:
- Bachelor's Degree in Information Systems, Computer Science (or equivalent) required.
- Minimum of five (5) years direct and hands-on experience in network layer technologies and security architecture designs.
- Minimum of 10 years of overall work experience in IT, Information Security or related field. Highly seasoned in organizational, time management, decision making and problem-solving skills.
- Working knowledge of IT systems and functions, process development, mobile device management, change management, and software review processes.
- Strong interpersonal skills to interact with customers, senior level personnel, subordinates and team members.
- Strong experience performing detailed analysis of network security infrastructure components (networking, firewalls, servers, IPS/IDS) and assessing the effectiveness of its security implementation.
- Strong experience of the TCP/IP protocol stack and application protocols such as DHCP, SNMP, DNS, etc. IPSec and SSL VPNs along with SSL/TLS protocol understanding.
- Experience planning security systems by evaluating network and security technologies; developing security requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, IPSs, WAP and related security and network devices; designing public key infrastructures (PKIs), including use of certification authorities (CAs) and digital signatures as well as hardware and software; adhering to industry standards.
- Experience reviewing network and security architectures and providing guidance for deployment of new technologies and integration with existing technologies. Strong hands on architect/engineering level expertise in cloud environments (e.g., SaaS, PaaS, IaaS).
- Experience with Visio programs to create detailed physical and logical network diagrams.
- Strong analytical and creative problem-solving skills for design, creation and testing of complex systems.
- Strong communication skills to communicate systems proposals to management and customers and provide systems diagnoses and resolution for current systems.
- Experience in a Healthcare setting.
- Experience with large scale Cisco ISE/AMP/Stealthwatch/Umbrella implementation and configuration.
- Experience with delivering detailed architectural design packages, familiarity with TOGAF or other architectural frameworks/standards preferred. A service focused team player who can lead and mentor team members.
- Excellent customer service and interpersonal skills demonstrated both over the phone and face-to-face in order to communicate technical information in non-technical terms.
- Consensus building and strong cross team collaborative and interpersonal skills.
- Good presentation skills.
- Ability to work under pressure, establish priorities and respond with urgency. Self-motivated with excellent verbal and written skills.
CERTIFICATIONS/LICENSURES REQUIRED:
One of the following secure and vendor specific certifications is required. Security Certification (CISSP, CEH, CISM, CISA, CASP). Vendor Specific Certification (CCNP, CCIE, CWNE, Extreme Certified Specialist, Fortinet NSE, Meraki Master, AWS Security Specialist, Cloud Security Specialist).
