Security Architect - fulltime position in Rosemont, IL

Brand new fulltime position. Hybrid work environment in Rosemont. If you're interested, please let me know.

This role centers around integrating information security controls into business and technology processes. You'll be engaged in threat modeling for products and services, identifying risks, and actively participating in architectural reviews for both internally developed products and those from third-party providers.

Ideal candidates should be adept at conducting architectural reviews specifically focused on enterprise projects, particularly in the realms of SaaS and PaaS. While cloud experience is beneficial, it's important to note that this position does not pertain to Infrastructure as a Service (IaaS). The role necessitates a strong grasp of various InfoSec domains, including data security, identity and access management, application security, API, and encryption.

Requirements:

• Bachelor's degree in Computer Science, Cyber Security, or a similar field, with 5-8 years of professional experience.
• Proficiency in PaaS and SaaS.

Core Qualifications (Required):

• Bachelor's degree or equivalent.
• 5-8 years of engineering or software security expertise.
• Experience in designing and building security architecture and engineering environments at an enterprise level.
• Expertise in secure architecture principles, secure SDLC, security device installations, configuration, and troubleshooting (e.g., firewall, IDS, etc.).
• Familiarity with a subset of common industry standards (ISO27001/2, NIST, COBIT, CIS, DISA, FIPS) and regulatory standards (SOX, PCI, GDPR).
• In-depth knowledge of security policies based on industry standards and best practices.
• Working knowledge of a broad range of security technologies.
• Advanced technical writing skills.
• Ability to lead and communicate efficiently within an enterprise-level environment.
• One or more of the following certifications or a commitment to obtaining within 6 months: CISSP, CISSP-ISSAP, CISSP-ISSEP, CISSP-ISSMP, CSSLP, CCSP, CISA, or CISM.

Responsibilities:

• Understand, research, and contribute to the design and implementation of security solutions across all business units.
• Drive security architectures aligned with a security strategy tailored to enterprise needs.
• Guide the development and validation of authentication and authorization security configurations for applications, 3rd party SaaS and PaaS platforms, and integrated multi-vendor environments.
• Employ a hands-on approach in implementing products and services to define and deliver information security requirements and architectural solutions.
• Develop and deliver product security roadmaps supporting the progression of information security services.
• Act as a subject matter expert on cloud technologies and security, ensuring robust security controls are in place.

[email protected]