Security Architect

Introduction
At IBM work is more than a job – it’s a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better but to attempt things you’ve never thought possible. Are you ready to lead in this new era of technology and solve some of the world’s most challenging problems? If so lets talk.

Your Role and Responsibilities
Security architects work to understand strategic priorities business requirements technical requirements issues identification issue remediation and are called on to develop and articulate robust and innovative security solutions to address these all. Our Security Architects provide subject matter expertise in creating implementing and maintaining enterprise security programs.

A Security Architect is a subject matter expert in DevSecOps and/or system administration. The architect fills a critical role in the overall success of a project and are the primary source of security solution design and development. The Security Architect will work in conjunction with larger teams to deliver amazing technology solutions that delivers a secure experience and helps to build the Hybrid Cloud functionality.

The Security Architect is also a subject matter expert in regulatory bodies’ cloud requirements reviewing newly introduced regulations that impact Cloud environments worldwide. The architect must also be able to advise and in some cases prototype how to become compliant with these emerging security standards from differing industry regulatory bodies and national regulatory works. Experience with FedRAMP programs and certification a plus.

The Security Architect reviews the Security of Cloud services keeping in mind Data Security Network Security Infrastructure Security and Access Control.

The Security Architect Incorporates Security and Privacy by Design in a bottom up fashion in the Cloud Services.

The Security architect depending on the area of work perform evaluation and selection of the components design of hardware software process and service components of the solution assurance of deployment architectures and guide secure engineering practices in development.

• Drive and maintain security throughout the entire Software Development Life Cycle of Services.
• Oversee Application Security Testing including Static and Dynamic Code scans (SAST/DAST) Vulnerability Assessment and Penetration Testing (VAPT) for completeness.
• Conduct Security assessments and threat modelling of Services

Required Technical and Professional Expertise

• 5+ years of experiences in building deploying and managing large scale services / platforms for Cloud Platforms like AWS Azure IBM Cloud or Google Cloud.
• Delivering micro services at scale; designing micro services solutions
• Good understanding of real time streaming analytics and batch data processing architectures.
• Familiarity with distributed architecture event-driven architecture.
• Python Go Lang experience (Can also have Java Scala Rust)
• Container orchestration performance and security (Kubernetes / Docker)
• DevSecOps practices
• Experience with one or more of the following: NoSQL Databases (eg: Cassandra Mongo) Columnar Databases (eg RedShift Snowflake) Search Engines (eg Elastic Search) Spark Hadoop.
• Sound understanding of data science concepts model development & performance tuning processes as well as coding version control and CI/CD best practices
• 2+ years UI Development experience using React (Can also have angular)
• Scripting languages like Python JavaScript shell
• Release Engineering (Git Branching versioning tagging) and experience with Agile software development
• CI/CD tooling (Preferred ArgoCD Tekton)
• 1+ years experience with one or more of these Monitoring tools: Sysdig Zabbix Grafana Prometheus ELK etc..
• Experience with one or more automation and configuration management tools/solutions: Ansible Terraform Salt Chef python bash puppet Rundeck etc.
• Working knowledge of Compute Network Storage and Virtualization technologies
• Excellent verbal and written communication skills
• Highly responsible motivated follow / establish development practices and able to work with little direction

Preferred Technical and Professional Expertise
System Admin area :

• CORE: Linux system administration experience 6+ years.
• CORE: Linux container experience Kubernetes Docker any LXC based technologies 4+ years
• CORE: 3+ years with any Regulatory bodies or regulatory frameworks ISO27001 FinRA/FFIEC HiTrust HIPAA NIST 800-53 GDPR FedRAMP PCI-DSS and EBA
• CORE: Applied experience with application security modeling to include threat modeling and identification of attack vectors – 3+ years
• CORE: Red Team (White hat) pen tester team experience – 4+ years

DevSecOps or DevOps area:

• CORE: Applied experience with application security & threat modeling to include threat modeling and identification of attack vectors – 2+ years
• CORE: Red Team (White hat) pen tester team experience – 2+ years
• CORE: Web application development experience with Javascript Java (J2EE) Golang – 2+ years (combined across these languages)
• CORE: Web API experience writing and interacting with REST or SOAP API interfaces – 3+ years
• CORE: Security Architecture Design and Review of Architecture threat modelling 6+Years

Preferred Skills :

• OPTIONAL: Patching and benchmarking (CIS L1 for example) automation via in-house scripting or enterprise tooling
• OPTIONAL: Secure Image (CIS images for example) use and automation for example secure boot network boot from images image deployment and refresh etc.
• OPTIONAL: years of Software defined Networking experience Openflow ONUS or any of the vendor implementations (Calico Beacon OpenDaylight Open vSwitch etc)
• OPTIONAL: Experience as an admin or superuser on Security Tools such as: SIEMs SOAR platforms vulnerability scanning DAST SAST Privileged ID mgmt. AuthZ solutions enterprise logging analysis EDR any zero trust tools (otherwise known as trusted execution or application whitelisting)
• OPTIONAL: experience with provisioning & provision automation in AWS Azure IBM Cloud Oracle or Google Cloud (experience can be with compute nodes storage database any of the “as a Service” offerings integration with on-prem systems for Hybrid cloud or bare metal systems)
• OPTIONAL: Experience with secure coding practices and testing to prevent and avoid attacks such as http state handling XSS OWASP Top 10 ZAP etc.
• OPTIONAL: Attack vector/pen testing tools experience (Kali Cobalt Strike Nmap BurpSuite etc.)
• OPTIONAL: Strong experience with scripting languages such as Python Ruby Bash Typescript etc.
• OPTIONAL: Web developer front end experience REACT Angular bootstrap or similar
• OPTIONAL: Regulatory bodies or regulatory frameworks ISO27001 FinRA/FFIEC HiTrust HIPAA NIST 800-53 GDPR FedRAMP PCI-DSS and EBA