What are the responsibilities and job description for the Senior Information Security Architect position at Navitas Business Consulting Inc?
Job Details
Job Summary: We are seeking a Senior Information Security Architect with deep expertise in AWS and Information Security principles. This role involves architecting and ensuring the security and compliance of cloud environments based on enterprise cloud security policies, standards, procedures, and industry best practices and frameworks (NIST, OWASP). The position is hybrid, requiring in-office presence once a week, and offers the potential for contract-to-hire after six months.
Job Title: Senior Information Security Architect
Location: Reston, VA (Hybrid - In-office one day a week)
Key Responsibilities:
- Lead the AWS Security architecture program across multiple projects, collaborating with product owners and enterprise architects.
- Architect secure cloud environments, ensuring compliance with enterprise policies and industry standards.
- Conduct threat modeling and implement data security measures (encryption, masking, tokenization, data access controls).
- Develop and maintain security policies, standards, and procedures.
- Monitor and respond to security incidents and vulnerabilities.
- Provide guidance on security best practices and frameworks (NIST, OWASP).
Must Have:
- Public Cloud: AWS Experience
- Deep expertise and proven track record in AWS Architecture and AWS Services (Compute, IAM, RDS, Resource Policies, Network, Messaging, Data Storage, CI/CD, AI/ML, ETL, Serverless, ECS/EKS).
- Experience with AWS security pillars, best practices, and well-designed architecture.
- Preferable experience in AI/ML.
- Information Security Architecture
- Key experience in application security, threat modeling, API security, DevSecOps, pipeline security, infrastructure security, authentication/authorization, encryption, key management, data discovery and encryption, SIEM, CSPM, CWPP, access controls, container security.
- Familiarity with industry security standards and frameworks (OWASP, NIST CIS, FED Ramp, ISO, SOX).
- Experience designing architectures based on security standards and threat modeling to identify issues and design mitigating controls.
- Systems Architecture
- Key experience in system design, API-driven architecture, open standards, stateless systems, resiliency, high availability, system and SaaS integrations.
Nice to Have:
- AWS advanced certification (Professional, Specialty), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP) or equivalent.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
