Job Summary The Information Security Solutions Architect is responsible for designing and implementing scalable, secure, and cost-effective technology solutions for BCBSKS. This position collaborates closely with business stakeholders, development teams, and external vendors to translate complex requirements into actionable architectural designs ensuring the successful delivery of solutions across various platforms. Your technical expertise combined with your ability to communicate complex concepts clearly will help drive innovation and efficiency in our organization. As an Information Security Solutions Architect, you will lead the architectural design process, ensure alignment with industry's security best practices, and contribute to the continuous improvement of our technical landscape.
What you'll do - Solution Design: Collaborate with business stakeholders to understand requirements and design secure end-to-end solutions that meet both functional and technical specifications.
- Architecture Leadership: Lead the development of architectural frameworks and principles that ensure scalability, security, and performance in complex environments.
- Technical Expertise: Provide deep technical security knowledge in areas such as infrastructure architecture (cloud and on-prem), , software development, networking, data management, and integration, ensuring alignment with business objectives. Identify appropriate tools and frameworks based on use case requirements.
- Stakeholder Engagement: Work closely with business leaders, product managers, and technical teams to translate business needs into actionable technology solutions.
- Collaboration with Teams: Work with cross-functional teams, including developers, operations, and security experts, to implement solutions whilst reducing security risks.
- Cost and Risk Management: Design cost-effective solutions while ensuring the minimization of technical risks. Evaluate trade-offs and recommend alternative approaches when necessary. Identify cost management strategies to maximize resource utilization while minimizing unnecessary expenditures.
- Documentation: Create and maintain clear documentation for architectural designs, decisions, and best practices to support ongoing development and knowledge sharing.
- Continuous Improvement: Stay up to date with industry trends, emerging technologies, and best practices to continuously improve the company's architecture and solution delivery.
- Client and Vendor Interaction: Interface with external clients and third-party vendors to ensure that solutions align with both client expectations and vendor capabilities.
- Implementation and Integration: Oversee infrastructure implementations/integrations (on-prem, cloud, PaaS, etc.), providing guidance and support to ensure minimal disruption and a seamless transition.
What you need Knowledge/Skills/Abilities:- Preferable 2 or more years of information/cyber security experience.
- Proficient knowledge of security best practices within multiple domains including but not limited to identity, networking, endpoints, cloud, data, and/or development.
- Proficient knowledge of security technologies and controls such as Security Information and Event Management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), public key infrastructure (PKI), antivirus, firewalls, and endpoint detection and response (EDR).
- Broad knowledge of identity security technologies and controls such as Okta, Entra ID, Active Directory Federated Services, Single Sign-On, LDAP, authorization and authentication models and protocols.
- Familiarity with compliance security frameworks (NIST 2.0 CSF and HITRUST CSF) and the threat modelling process.
- Infrastructure: Expertise in infrastructure technologies, including networking, servers, storage, and virtualization (VMware, Docker, Kubernetes).
- Cloud Platforms: Experience with at least one of the major cloud platforms (AWS, Microsoft Azure, Google Cloud). Preferably knowledge in Azure infrastructure, such as Azure functions, Azure app services, Azure key vault, Azure DevOps, Azure Pipelines, Azure APIM, Azure Data Factory, etc.
- Software Development: Knowledge of programming languages such as Java, Python, C# or similar. Knowledge of API security and containerization is a plus.
- Databases: Knowledge of data management, data lakes, and big data technologies in the context of analytics and AI solutions. Experience with SQL and NoSQL databases (e.g., MySQL, PostgreSQL, MongoDB, Cassandra) is a plus.
- DevSecOps: Understanding of DevSecOps practices, CI/CD pipelines, and infrastructure as code (IaC) is a plus.
Education and Experience:- High school diploma or equivalent required. Bachelor's degree in computer science, information technology or related field preferred. In lieu of degree, an additional 4 years' progressive, relevant experience within direct or related field required.
- Minimum 6 years' experience in IT, application development, or related field.
- Minimum 2 years' experience in a leadership or senior level role.
Compensation$125,600 - $157,000IT&S 18- Blue Cross and Blue Shield of Kansas offers excellent competitive compensation with the goal of retaining and growing talented team members. The compensation range for this role is a good faith estimate, it is estimated based on what a successful candidate might be paid. All offers presented to candidates are carefully reviewed to ensure fair, equitable pay by offering competitive wages that align with the individual's skills, education, experience, and training. The range may vary above or below the stated amounts.
