IT Cloud Security Architect

Overview

The Cloud Security Architect builds, maintains, upgrades and continuously improves cloud networks and cloud-based systems across the Hackensack Meridian Health (HMH) network. Responsible for the operations of secure cloud infrastructure, platforms, and software. Partners with Enterprise Architects, Infrastructure, Application and Development Teams to develop a deep technical understanding of HMH's technology ecosystem. Will conduct threat modeling, develop negative use cases / abuse cases, identify weak points, constraints, trust assumptions, and other potential attack vectors. They will document and prioritize these while partnering with other technical teams as a mentor and trusted advisor on remediation coursework. Also conduct architecture reviews, threat modeling, identify risks and advise Information Technology (IT), business owners and technical teams on options to mitigate the risk.

Responsibilities

A day in the life of an IT Cloud Security Architect with Hackensack Meridian Health includes:

• Develop, document, and enforce cloud security policies, standards, and baselines through processes, reporting, and technical means.
• Monitor, benchmark and report progress of cloud security threats, assets, and vulnerabilities.
• Work with asset owners and vulnerability management team to identify and remediate cloud vulnerabilities.
• Participate in enterprise architecture review boards and processes and provide security recommendations for new and existing vendor and user-developed cloud technologies and interfaces.
• Perform monitoring and analysis of cloud logs and data outputs and participate in security and incident tracking, monitoring, and reporting.
• Provide updates for daily and weekly metrics for cloud security events and reporting.
• Deployment and administration of cloud security tooling and associated processes.
• Develop and maintain documentation for new and existing cloud processes and technologies.
• Stay informed and provide recommendations to cloud leadership of new and evolving cloud technologies, products, tooling, methodologies, threats, and risks that would affect the HMH environment.
• Develop, model and evolve cloud attack vectors and design security and/or mitigating controls to mitigate risk.
• Perform cloud assessments using enterprise methodologies and industry better practices.
• Maintain the cloud risk tracker and report to business and technology leadership of status of risks, mitigations, and remediation.
• Serve as a technical resource in the cybersecurity team efforts to build and deploy various configurations in the cloud and on-premise.
• Research and recommend new and evolving industry cloud technologies, solutions, management strategies and effective resource utilization models that can be presented to Senior Leadership (i.e. Directors and above).
• Build relationships with key IT and business leaders across HMH which would include senior leadership (i.e. Directors and above).
• Learn on the job and explore new technologies with little supervision to identify new and emerging cloud threats.
• Other duties and/or projects as assigned.
• Adheres to HMH Organizational competencies and standards of behavior.

Qualifications

Education, Knowledge, Skills and Abilities Required:

• Bachelor's degree preferred, but would consider Associate's degree plus experience outlined below.
• Minimum of 10+ years of overall cybersecurity experience, including time spent as an enterprise Cloud Security Architect or another similar role that builds and supports secure cloud environments for a large enterprise
• Strong knowledge of cloud security concepts with SaaS, PaaS and IaaS platforms and the architectural knowledge of Google Cloud Platform (GCP) and Microsoft Azure cloud services.
• Wide breadth of knowledge across security products, tools, and industry trends; ability to create solutions using a pragmatic, risk-based approach.
• Strong knowledge of networking concepts and architecture, including security considerations associated with networking hardware like routers, switches, firewalls, gateways, etc.
• Understanding of malware, emerging threats, attacks, and vulnerability management.
• Excellent written and verbal communication skills.
• Proficient computer skills that may include but are not limited to Microsoft Office and/or Google Suite platforms.

Education, Knowledge, Skills and Abilities Preferred:

• Strong knowledge of cloud technologies with SaaS, PaaS and IaaS platforms and the architectural knowledge of Google Cloud Platform (GCP), Amazon Web Services (AWS), and Microsoft Azure cloud services.
• Strong deductive reasoning, critical thinking, problem solving, and prioritization skills.
• Experience assisting the development and maintenance of tools, procedure, and documentation.
• Track record of effective project management and project delivery.
• Strong service mentality including the resolution of stakeholder escalations and incident management.
• Ability to work in a fast-paced team environment.
• Ability to develop detailed process and procedure documentation.
• Ability to present complex solutions and methods to both technical and non-technical stakeholders.
• Excellent written and verbal communication and organizational skills.
• Strong team player who collaborates well with others to solve problems.
• Strong interpersonal, problem solving, and communication skills.

Licenses and Certifications Required:

• At least one of the following professional security certifications at hire or must obtain within one (1) year of hire: GIAC certifications, OSCP (Offensive Security Certified Professional), CISSP (Certified Information Systems Security Professional), SSCP (Systems Security Certified Practitioner), Cloud Security Alliance: Certificate of Cloud Security Knowledge (CCSK), or comparable.

Licenses and Certifications Preferred:

• Cloud Engineering or Security certifications (e.g. AWS Solutions Architect, Microsoft Certified, Google Associate Cloud Engineer, etc.).

Starting Minimum RateMinimum rate of $156,062.40 Annually Job Posting DisclosureHMH is committed to pay equity and transparency for our team members. The posted rate of pay in this job posting is a reasonable good faith estimate of the minimum base pay for this role at the time of posting in accordance with the New Jersey Pay Transparency Act and does not reflect the full value of our market-competitive total rewards package. The starting rate of pay is provided for informational purposes only and is not a guarantee of a specific offer. Posted hourly rates may be stated as an annual salary in the offer and posted annual salaries may be stated as an hourly rate in the offer, depending on the level and nature of the job duties and credentials of the candidate. The base compensation determined at the time of the offer may be different than the posted rate of pay based on a number of non-discriminatory factors, including but not limited to: Labor Market Data: Compensation is benchmarked against market data to ensure competitiveness. Experience: Years of relevant work experience. Education and Certifications: Level of education attained, including specialized certifications, credentials, completed apprenticeship programs or advanced training. Skills: Demonstrated proficiency in relevant skills and competencies. Geographic Location: Cost of living and market rates for the specific location. Internal Equity: Compensation is determined in a manner consistent with compensation ranges for similar roles within the organization. Budget and Grant Funding: Departmental budgets and any grant funding associated with the job position may impact the pay that can be offered. Some jobs may also be eligible for performance-based incentives, bonuses, or commissions not reflected in the starting rate. Certain positions may also be eligible for shift differentials for work performed on evening, night, or weekend shifts. In addition to our compensation for full-time and part-time (20+ hours/week) job positions, HMH offers a comprehensive benefits package, including health, dental, vision, paid leave, tuition reimbursement, and retirement benefits.