IT Security Infrastructure Architect PRIMARY PURPOSE: To design and maintain robust, scalable security architecture globally for cloud or on-premise systems; to oversee design, implementation and maintenance revisions of specified projects; and to evaluate technologies and provide consultation regarding applications and system needs. ESSENTIAL FUNCTIONS and RESPONSIBILITIES • Designs and maintains robust, scalable security architecture globally for cloud and/or on-premise systems. • Provides technical guidance on how to design security devices, networks, applications and systems compliant with the requirements of a desired security posture or state. • Maintains expert knowledge of network and system security principles (i.e. Defense in depth, granularity of privilege) and how they are applied in the standard data center and cloud domain. • Demonstrates expert knowledge of and provides guidance on modern network security technologies such as network forensics, sandboxing, threat intelligence, network and host-based intrusion prevention, vulnerability assessment, DDOS protection, Security Information Management, host-based integrity checking, end point security, AV, DLP, PKI, Mobile Security, and Cloud Security. • Demonstrates an understanding of security problems as a mix of technology and process issues and pursues solutions at all layers within the organization. • Provides leadership, mentorship and advisory services to infosec, business, and project teams to ensure that solutions are in line with the architecture direction and business strategies. • Assists IT groups and business units as necessary in designing business or productivity programs securely. • Works closely with management on assigned projects from inception through implementation ensuring adequate internal communication and user involvement is maintained. • Assists management in investigating IT or cyber-security events and developing resolutions. • Provides feedback and suggestions to improve IT Security processes and procedures. ADDITIONAL FUNCTIONS and RESPONSIBILITIES • Performs other duties as assigned. • Travels as required. QUALIFICATIONS Education & Licensing Bachelor's degree in information management, computer science or related technology field preferred. Related technical institute certification preferred. Experience Ten (10) years of network, application, system, storage, and security architecture experience or equivalent combination of education and experience required. Experience with cloud security architecture, network topologies, security and access control tools, encryption technologies and algorithms preferred. Skills & Knowledge • Knowledge with the configuration of security controls for Microsoft Azure and Office365 • Knowledge of the confidentiality, integrity and availability (CIA) triad • Knowledge of information technology security frameworks • Knowledge of Carbon Black Protection, Symantec endpoint protection and security information and events management (SIEM) solutions preferred • Ability to work with networked computers and servers • Ability to work independently and solve problems • Ability to handle confidential and sensitive information with integrity • Ability to continuously learn new technologies • Excellent oral and written communication skills, including presentation skills • PC literate, including Microsoft Office products • Analytical and interpretive skills • Strong organizational skills • Excellent interpersonal skills • Ability to create and complete comprehensive, accurate and constructive written reports • Ability to work in a team environment • Ability to meet or exceed Performance Competencies WORK ENVIRONMENT When applicable and appropriate, consideration will be given to reasonable accommodations. Mental: Clear and conceptual thinking ability; excellent judgment, troubleshooting, problem solving, analysis, and discretion; ability to handle work-related stress; ability to handle multiple priorities simultaneously; and ability to meet deadlines Physical: Computer keyboarding, travel as required Auditory/Visual: Hearing, vision and talking The statements contained in this document are intended to describe the general nature and level of work being performed by a colleague assigned to this description. They are not intended to constitute a comprehensive list of functions, duties, or local variances. Management retains the discretion to add or to change the duties of the position at any time.