What are the responsibilities and job description for the Information Security Architect position at Unisys?
Consultant - InfoSec Architect V / Information Security Architect V
- Hiring for a Senior Information Security Architect position primarily focusing on AWS.
- This position requires deep expertise in Information Security principles including Business Security Architecture, Threat Modelling, Data Security (Data encryption, masking, tokenization, data access controls), AWS Cloud and Systems architecture.
- This individual must be able to architect and ensure the security and compliance of the cloud environments based on enterprise cloud security policies, standards, procedures and industry best practices and frameworks (NIST, OWASP).
- Self-starter and Senior Architect who can lead the AWS Security architecture program in multiple projects simultaneously by collaborating with numerous stakeholders (Product Owners, Enterprise Architect).
Must Have Skills:
Public Cloud - AWS Experience:
- Deep Expertise and proven Track record in AWS Architecture and AWS Services (Compute, IAM, RDS, Resource Policies, Network, Messaging, Data Storage, CI/CD, AI/ML, ETL, Serverless, ECS/EKS).
- Experience with AWS security pillars, best practices and well-designed architecture.
- Experience in AI/ML is preferable.
Cloud Security Expertise:
Candidates who have played a significant and hands on deep expertise experience in cloud security programs, including:
- Architecting multiple complex application migrations to AWS.
- Designing complex, large scale AWS architectures.
- Operating as a senior level architect capable of developing, articulating, and presenting complex security architectures to senior leadership.
- Influencing and shaping direction, roadmaps, and overall security architecture vision.
- AWS expertise is mandatory.
- Deep hands-on Architectural experience is required.
Technical Competency Requirements:
- IAM Expertise, Proficiency in AWS IAM policies (e.g., policy construction, least privilege design, permissions boundaries, identity federation).
- Network Security Expertise, Proficiency in AWS network security controls (e.g., VPC design, security groups, NACLs, PrivateLink, WAF, routing, segmentation).
Core Security Competencies, Candidates must show strong expertise across foundational security pillars, including:
- Encryption (KMS, envelope encryption, key rotation, data at rest / in transit)
- Identity Management (IAM, SSO, federation, identity lifecycle)
- Authentication & Authorization (OAuth, OIDC, SAML, RBAC/ABAC models)
- Network Controls (segmentation, firewalling, ingress/egress patterns, zero trust principles)
Information Security Architecture:
- Key Experience: Application Security, Threat Modelling, API Security, DevSecOps, Pipeline Security, Infrastructure Security, AuthN/Z, Encryption, Key Management, Data Discovery and Encryption, SIEM, CSPM, CWPP, Access Controls, Container Security.
- Industry security standards and frameworks (OWASP, NIST CIS, FED Ramp, ISO, SOX etc.).
- Experience designing Architectures based on Security Standards and threat model the designs to identify issues and design mitigating controls.
Systems Architecture:
- Key Experience: System Design, API Driven architecture, Open Standards, Stateless, Resiliency, High Availability, System and SaaS Integrations.
Nice to Have:
- AWS Certifications (Strongly Preferred)
- AWS Advanced Certifications (Professional, Specialty)
- AWS Solutions Architect – Professional
- AWS Security Specialty
- Certified Information Systems Security Professional (CISSP)
- Certified Cloud Security Professional (CCSP) or equivalent
- Certified Ethical Hacker (CEH)
- Security Certifications (Strongly Preferred)
#LI-CGTS
#TS-3142