IT Cloud Security Architect - Digital Technology Services

Description

Our team members are the heart of what makes us better.

At Hackensack Meridian Health we help our patients live better, healthier lives — and we help one another to succeed. With a culture rooted in connection and collaboration, our employees are team members. Here, competitive benefits are just the beginning. It’s also about how we support one another and how we show up for our community.

Together, we keep getting better - advancing our mission to transform healthcare and serve as a leader of positive change.

The Cloud Security Architect builds, maintains, upgrades and continuously improves cloud networks and cloud-based systems across the Hackensack Meridian Health (HMH) network. Responsible for the operations of secure cloud infrastructure, platforms, and software. Partners with Enterprise Architects, Infrastructure, Application and Development Teams to develop a deep technical understanding of HMH's technology ecosystem. Will conduct threat modeling, develop negative use cases / abuse cases, identify weak points, constraints, trust assumptions, and other potential attack vectors. They will document and prioritize these while partnering with other technical teams as a mentor and trusted advisor on remediation coursework. Also conduct architecture reviews, threat modeling, identify risks and advise Digital Technology Services (DTS), business owners and technical teams on options to mitigate the risk.

Responsibilties

A day in the life of a Cloud Security Architect at Hackensack Meridian Health includes:

• Develop, document, and enforce cloud security policies, standards, and baselines through processes, reporting, and technical means.
• Monitor, benchmark and report progress of cloud security threats, assets, and vulnerabilities.
• Work with asset owners and vulnerability management team to identify and remediate cloud vulnerabilities.
• Participate in enterprise architecture review boards and processes and provide security recommendations for new and existing vendor and user-developed cloud technologies and interfaces.
• Perform monitoring and analysis of cloud logs and data outputs and participate in security and incident tracking, monitoring, and reporting.
• Provide updates for daily and weekly metrics for cloud security events and reporting.
• Deployment and administration of cloud security tooling and associated processes.
• Develop and maintain documentation for new and existing cloud processes and technologies.
• Stay informed and provide recommendations to cloud leadership of new and evolving cloud technologies, products, tooling, methodologies, threats, and risks that would affect the HMH environment.
• Develop, model and evolve cloud attack vectors and design security and/or mitigating controls to mitigate risk.
• Perform cloud assessments using enterprise methodologies and industry better practices.
• Maintain the cloud risk tracker and report to business and technology leadership of status of risks, mitigations, and remediation.
• Serve as a technical resource in the cybersecurity team efforts to build and deploy various configurations in the cloud and on-premise.
• Research and recommend new and evolving industry cloud technologies, solutions, management strategies and effective resource utilization models that can be presented to Senior Leadership (i.e. Directors and above).
• Build relationships with key DTS and business leaders across HMH which would include senior leadership (i.e. Directors and above).
• Learn on the job and explore new technologies with little supervision to identify new and emerging cloud threats.
• Other duties and/or projects as assigned.
• Adheres to HMH Organizational competencies and standards of behavior.
  
  

Qualifications

Education, Knowledge, Skills and Abilities Required:

• Bachelor's degree preferred, but would consider Associate's degree plus experience outlined below.
• Minimum of 10 years of overall cybersecurity experience, including time spent as an enterprise Cloud Security Architect or another similar role that builds and supports secure cloud environments for a large enterprise
• Strong knowledge of cloud security concepts with SaaS, PaaS and IaaS platforms and the architectural knowledge of Google Cloud Platform (GCP) and Microsoft Azure cloud services.
• Wide breadth of knowledge across security products, tools, and industry trends; ability to create solutions using a pragmatic, risk-based approach.
• Strong knowledge of networking concepts and architecture, including security considerations associated with networking hardware like routers, switches, firewalls, gateways, etc.
• Understanding of malware, emerging threats, attacks, and vulnerability management.
• Excellent written and verbal communication skills.
• Proficient computer skills that may include but are not limited to Microsoft Office and/or Google Suite platforms.
  
  

Education, Knowledge, Skills And Abilities Preferred

• Strong knowledge of cloud technologies with SaaS, PaaS and IaaS platforms and the architectural knowledge of Google Cloud Platform (GCP), Amazon Web Services (AWS), and Microsoft Azure cloud services.
• Strong deductive reasoning, critical thinking, problem solving, and prioritization skills.
• Experience assisting the development and maintenance of tools, procedure, and documentation.
• Track record of effective project management and project delivery.
• Strong service mentality including the resolution of stakeholder escalations and incident management.
• Ability to work in a fast-paced team environment.
• Ability to develop detailed process and procedure documentation.
• Ability to present complex solutions and methods to both technical and non-technical stakeholders.
• Excellent written and verbal communication and organizational skills.
• Strong team player who collaborates well with others to solve problems.
• Strong interpersonal, problem solving, and communication skills.
  
  

Licenses And Certifications Required

• At least one of the following professional security certifications at hire or must obtain within one (1) year of hire: GIAC certifications, OSCP (Offensive Security Certified Professional), CISSP (Certified Information Systems Security Professional), SSCP (Systems Security Certified Practitioner), Cloud Security Alliance: Certificate of Cloud Security Knowledge (CCSK), or comparable.
  
  

Licenses And Certifications Preferred

• Cloud Engineering or Security certifications (e.g. AWS Solutions Architect, Microsoft Certified, Google Associate Cloud Engineer, etc.).
  
  

If you feel that the above description speaks directly to your strengths and capabilities, then please apply today!