NG911 Security Architect

Job Title: NG911 Security Architect

Location: Brooklyn, NY 11201 (On Site: Monday through Friday)

Job Type: Contract

Work schedule: Normal business hours Monday-Friday 35 hours/week (not including mandatory unpaid meal break after 6 hours of work).

Duration: 12 Months

Pay Rate: $90 to $100 per hour

Job Description

• Develop a strategic firewall security architecture vision, including standards and frameworks that are aligned with overall business strategy using the current technology roadmap.

• Provide NextGen firewall architecture designs and configurations.

• Research, design, and advocate new firewall technologies, architectures, and security products.

• Provide expert Information Security firewall architecture vision, leadership, analytical guidance, and frameworks.

• Define Information Security firewall architecture, security controls, risk assessment & mitigation.

• Identifying firewall integration issues studying firewall architecture/platform. researching firewall information security standards.

SCOPE OF SERVICES:

IT Security Architect

• Develop a strategic firewall security architecture vision, including standards and frameworks that are aligned with overall business strategy using the current technology roadmap.
• Provide NextGen firewall architecture designs, configurations.
• Research, design, and advocate new firewall technologies, architectures, and security products.
• Provide expert Information Security firewall architecture vision, leadership, analytical guidance, and frameworks.
• Conduct detailed security assessments, threat modeling, and vulnerability analyses to identify potential risks; propose and implement plans to mitigate these risks.
• Define Information Security firewall architecture and security controls.
• Identifying firewall integration issues studying firewall architecture/platform. researching firewall information security standards.
• Design and implement enterprise security architecture.
• Perform risk assessments and identify security gaps in infrastructure and applications.
• Develop security policies, standards, and guidelines for the organization.
• Conduct security audits, penetration tests, and vulnerability assessments.
• Monitor emerging security threats and recommend proactive measures.
• Collaborate with IT and development teams to ensure secure design and integration.

MANDATORY SKILLS/EXPERIENCE Note: Candidates who do not have the mandatory skills will not be considered

• At least 12 years of experience in information security and/or IT risk management with a focus on security, performance, and reliability.

• Ability to interact with a broad cross-section of personnel to explain and enforce security measures.
• Good working knowledge of current IT risks and experience implementing security solutions.
• Provide expert information security architecture, leadership, and analytical guidance for technical framework.
• Ensure technical design incorporate security and provide input into various enterprise architecture.
• Assist Information Security Engineering team to evaluate and design security solutions such as NGFW, DNS/DNSSEC, Cisco ISE, proxy, cloud solution, and Data Loss prevention technology.
• Conduct detailed security assessments, threat modeling, and vulnerability analyses to identify potential risks; propose and implement plans to mitigate these risks.
• Security Architecture & Frameworks: Deep understanding of security architecture principles, including familiarity with frameworks like TOGAF, SABSA, NIST, ISO 27001, and Zero Trust Architecture.

• Network Security: Proficiency in securing network infrastructures (firewalls, routers, switches) and protocols (SSL, TLS, IPsec, etc.).

• Cloud Security: Knowledge of security in cloud environments (AWS, Azure, Google Cloud), including best practices for securing cloud applications and data.

• Encryption & Cryptography: Understanding of encryption techniques, key management, and cryptographic standards.

• Identity & Access Management (IAM): Expertise in implementing and managing IAM systems, multi-factor authentication (MFA), and role-based access controls (RBAC).

• Threat Modeling & Risk Management: Ability to identify potential threats, model attacks, and design secure systems that minimize risk.

• Penetration Testing & Vulnerability Assessment: Familiarity with tools for detecting and assessing vulnerabilities and implementing fixes.

• Review system security controls and design necessary enhancements.
  

DESIRABLE SKILLS/EXPERIENCE:

• Excellent written and verbal communication skills as well as business acumen and a professional outlook.
• One or more relevant information security and/or networking certifications such as: CISSP, CRISC, or CISM

Salary : $90