Role description
Title: Security Architect - Cloud & Application
Location: Albany, New York
• Conduct STRIDE based threat model for the FICC target state architecture
• Map security controls to identified threats
• Define security testing framework pre deployment integration resilience continuous
• Validate multi region DR design from a security perspective split brain prevention audit trails
• Design Hashi Corp Vault integration patterns OCP auth method per SYS ID ACL policies
• Assess IBM MQ RDQM security mTLS channel authentication
• Review A3P platform security controls SCPs account boundaries
• Define Ping Federate cloud connectivity security requirements
• Produce security implementation guidance and developer checklist
• Assess HiPAM to Vault refactoring scope per SYS ID Skillset Required
• AWS Security Specialty certification STRIDEDREAD threat modeling methodology
• Financial services security context SIFMU awareness
• IAM design patterns OCP RBAC namespace isolation
• OpenShift security SCCs Network Policies admission controllers
• Hashi Corp Vault integration experience
• IBM MQ security mTLS CONNAUTH Key Deliverables Primary Owner
• Security Threat Model Controls Mapping
• Security Testing Framework
• Security Implementation Guidance
• HiPAM to Vault Migration Scope Assessment