Full-Time
Principal Architect
Enterprise
Direct Staffing
No salary listed
Bellevue, WA, USA
In Person
Category
 IT & Security (1) |
|---|
Required Skills
TCP/IP
Computer Networking
Requirements
- Bachelor of Science in Information Assurance, Computer Science, Electrical Engineering, or Computer Engineering.
- Seven years of technical security solutions experience in a combination of relevant security areas.
- Demonstrated working knowledge of and experience implementing information security architecture concepts, principles, methods, and components.
- Working knowledge of IT architectural concepts and frameworks.
- Foundational technology concepts including how system components are installed, integrated, and optimized.
- Foundational technology concepts including computer networking fundamentals.
- Foundational technology concepts including how traffic flows across the network.
- Foundational technology concepts including server and client operating systems and database systems.
- Foundational technology concepts including network systems management principles, models, methods (e.g., end-to-end systems performance monitoring, fault tolerance), and tools.
- IT supply chain security/risk management policies, requirements, and procedures.
- Demonstrated working knowledge and experience with security objectives, operational objectives, and tradeoffs associated with the network design process.
- Demonstrated working knowledge and experience with network access, identity and access management, and access authentication methods.
- Demonstrated working knowledge and experience with network protocols such as TCP/IP, UDP, DHCP, DNS, and HTTP.
- Knowledge of cryptology and encryption algorithms (e.g., IPSEC, AES, GRE, IKE, MD5, SHA, 3DES).
- Demonstrated working knowledge and experience with the implementation of data security standards/guidance and regulatory/contractual information security requirements.
- Foundational security concepts including risk management processes, secure configuration management techniques, security test and evaluation processes, secure system design tools, methods, and techniques, secure software engineering/development principles and methods.
- Knowledge of the telecommunications industry and associated technologies.
Responsibilities
- Responsible for building effective working relationships, making sound decisions, successfully making changes, initiating action and achieving results.
- Compile, develop, deliver, and evangelize end-to-end technology and security roadmaps that guide the evolution of security services, practices, products, and infrastructure by applying depth and breadth of expertise in multiple related disciplines.
- Compile, develop, deliver, and evangelize security reference architectures and best practices that address critical security challenges and provide commercially responsible security guardrails for technology.
- Influence stakeholders and ensure alignment with security strategy and architecture principles by driving collaboration across the enterprise’s technology architecture functions, the inclusion of security strategy roadmaps into enterprise technology roadmaps, and the adoption of security reference architectures and best practices.
- Mentor team members on information assurance and security best practices in area of expertise.
- Serve as a subject matter expert across multiple security domains to guide technology and security strategy and communicate big-picture enterprise-wide security issues to team and decision makers.
- Also responsible for other Duties/Projects as assigned by business management as needed.
Desired Qualifications
- Ten years of technical security solutions experience in a combination of relevant Security areas.
- Working experience as a lead or participant for security development activities supporting standards bodies and industry associations such as IEEE, GSMA, 3GPP, and CTIA.
- Expertise in determining how a security system should work and how it changes in conditions, operations or the environment will affect the outcomes.
- Knowledge of the methods, standards, and approaches for describing, analyzing, and documenting an organization's enterprise information technology architecture.
- Working knowledge of private/public/hybrid cloud computing and storage, Data Center Virtualization solutions, and Big Data solutions.
- Expertise in designing the integration of hardware and software solutions and applying and incorporating information technology technologies into proposed solutions.
- Working knowledge and experience with architectural development and implementation of public key infrastructure, hardware security modules, OAuth 2.0, SAML, federated identity management, and multi-factor authentication.
- Working knowledge and experience with Cloud Security Alliance, NIST Cybersecurity Framework, Federal Information Security Management Act, International Organization for Standardization 27001, Health Insurance Portability and Accountability Act, Gramm-Leach-Bliley Act, Payment Card Industry, Sarbanes-Oxley, and Customer Proprietary Network Information.
- Expertise in discerning the protection needs (i.e., security controls) of information systems and networks.
- Working knowledge and experience with the wireless telecommunications industry, mobile networks and technologies, and consumer mobile device technologies.
- CISSP, CRISC, CISA