Security Architect

Introduction
A career in IBM Consulting is rooted by long-term relationships and close collaboration with clients across the globe.
You’ll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio; including Software and Red Hat.
Curiosity and a constant quest for knowledge serve as the foundation to success in IBM Consulting. In your role you’ll be encouraged to challenge the norm investigate ideas outside of your role and come up with creative solutions resulting in ground breaking impact for a wide network of clients. Our culture of evolution and empathy centers on long-term career growth and development opportunities in an environment that embraces your unique skills and experience.

Your Role and Responsibilities

• Design and develop the overall security architecture for the cloud environment ensuring alignment with FedRAMP NIST 800-53 and other relevant security frameworks.
• Provide architectural guidance and technical expertise to ensure the secure integration of cloud services infrastructure and applications.
• Collaborate with the Information System Security Officer (ISSO) AWS Security Engineer and other stakeholders to identify security requirements and implement controls.
• Oversee the security risk management process including risk assessments vulnerability management and threat modeling to identify and mitigate potential risks.
• Ensure the security architecture supports continuous monitoring incident response and security assessments required for FedRAMP compliance.
• Work closely with 3PAO (Third-Party Assessment Organizations) to facilitate security assessments and provide necessary documentation.

Required Technical and Professional Expertise

• Proven experience as a Security Architect with expertise in FedRAMP compliance NIST 800-53 controls and cloud security architectures.
• Extensive experience designing secure cloud architectures in AWS including security services like IAM VPC KMS and CloudTrail
• Strong understanding of security frameworks (e.g. CIS NIST 800-53-rev) and regulatory requirements for cloud security.
• Experience with security risk management vulnerability assessments and incident response.
• Certification: CISSP CISM AWS Certified Solutions Architect and CCSP are highly desirable.

Preferred Technical and Professional Expertise

• Deep expertise in cloud security architecture particularly in AWS environments.
• Familiarity with advanced security technologies such as encryption network security and identity management in cloud environments.
• Experience with security automation and continuous integration/continuous delivery (CI/CD) security integration.
• Strong knowledge of threat modeling security testing and vulnerability management.
• Experience working in a highly regulated environment ensuring security controls meet compliance needs.