As a valued contributor to our team, you will consult with management on the development of processes and procedures for designing and implementing components of technological structures. In this role, you will create solutions with a process-driven view, as well as maintain and/or update existing structures. THE IMPACT YOU WILL MAKE - The Cloud Security - Architecture - Principal will leverage broad technical knowledge of cloud security best practices of key public cloud offerings of providers ... more details
Job Description
As a valued contributor to our team, you will consult with management on the development of processes and procedures for designing and implementing components of technological structures. In this role, you will create solutions with a process-driven view, as well as maintain and/or update existing structures.
THE IMPACT YOU WILL MAKE
The Cloud Security - Architecture - Principal will leverage broad technical knowledge of cloud security best practices of key public cloud offerings of providers such AWS, Azure, and GCP to establish secure design patterns, to architect integrations among cloud and/or on-premises infrastructures. The individual must have deep understanding of cloud policy, security technical architecture and have implemented solutions in a cloud environment. Knowledge of industry best practices around cloud security compliance and architect cloud security practices. This individual must be able to assist in ensuring the security and compliance of the cloud environment based on enterprise cloud security policies, standards, and procedures. The role will ensure that solutions operating on the cloud comply with enterprise security requirements in both off-premises and hybrid environment models.
The role will report to the Director of Cloud Security Architecture will collaborate with Enterprise Architects and Application Dev teams to come up with Security Architecture for applications and enterprise tech capabilities migrating to Cloud.
Determine the needs of diverse and complex customer groups by applying understanding and resolution of complex or unusual business problems.
Translate functional requirements into technical solutions, and may lead matrixed teams.
Oversee existing structures, as well as the implementation and ongoing monitoring of governance.
Perform modeling, analysis, and planning to solve technical business problems and identify opportunities and risks.
Qualifications
THE EXPERIENCE YOU BRING TO THE TEAM
Minimum Required Experiences
8 years of experience
Desired Experiences
Bachelor degree or equivalent
5+ Years of experience in Cyber Security field as an Information Security Architect or Cloud Security Architect
4+ years of experience in AWS as a Cloud Security Architect/Engineer and must be certified in the cloud technologies/infrastructures.
Preferred industry recognized experience in security (e.g., CISSP, CCSK, CISA, CISM, CEH)
Minimum of 5 years of experience in IT security risk assessments and related frameworks (e.g., NIST 800 series, ISO 27000 series, IT General Controls
Strong knowledge of the AWS Infrastructure services.
Strong communication, proactive methods for problem solving, strong documentation and collaboration skills across the enterprise.
Excellent coordination skills and must be detail oriented.
Key Areas of Responsibility
Partner with Enterprise/Portfolio Architecture team and Business Units development squads to collaboratively develop security architectures/designs leveraging approved patterns that ensure applications migrating from on-premises to Cloud, achieving high standards of security practices and compliance.
Drive the development and adoption of cloud security standards, best practices, and technologies within Enterprise IT infrastructure
Liaise on security-related issues with internal business stakeholders, InfoSec, Enterprise Architecture, and application development squads.
Work to develop, enhance, and document security architecture, security policies, patterns, procedures, guidelines, and standards required to design cloud-based solutions.
Educate application, portfolio and solution architects on secure solution design and industry best security practices.
Work on assessments of compliance and standards including and not limited to NIST, FedRAMP, FIPS, etc.
Perform threat modeling and update application security architecture as needed.
Support application development squads with Security implementations and issues
Skills
Serve as an expert in Fannie Mae’s Information Security capabilities, solutions policies, procedures, and standards.
Act to apply NIST frameworks on all cloud patterns, capabilities, and application migrations.
Influence technical patterns and capabilities to apply security and cloud policy to shift left in the development processes.
Act as a central point of contact for all conceptual knowledge of regulations for PCI, Sarbanes-Oxley, GLBA, and FISMA
Responsibilities include setting the compliance strategy for infrastructure and application build, deploy, monitor, and operate applications.
Candidate should have architected applications at scale on modern cloud native architectures (AWS).
The candidate needs expertise to architect cloud native infrastructure using containerization and microservices transformation in application APIs and address platform operational security concerns.
Plan and document design methods for the optimization and integration of various technology platforms, tools, policies, and principles that lead to target state implementation with cloud policy and compliance.
Tools
Deep Knowledge in containerization of applications, design, and deployment
Skilled in Amazon Web Services (AWS) offerings, development, and networking platforms
Experience with Agile Tools and methodologies.
Experience in object-oriented programming preferrable JAVA, Python, etc.,
Knowledge of storage software platforms such as NetApp, Nimble, and Pure Storage
Knowledge of ITSM Tools e.g., ServiceNow to manage digital workflows.
Experience using APIs for developing or programming software.
Skilled in CICD Tools and Pipelines
Knowledge of virtualization software such as Microsoft Hyper-V, VMWare vSphere, or Citrix XenDesktop.
Nice-to-Haves
Cloud agnostic security architecture experience a plus
Container Security experience to protect container workloads during build and run-time.
API Security architecture experience with industry standard API Gateways
The group of skills related to Security including designing and evaluating security systems, identifying security threats, securing computers, assessing vulnerability, etc.
The group of skills related to Relationship Management including managing and engaging stakeholders, customers, and vendors, building relationship networks, contracting, etc.
Skilled in presenting information and/or ideas to an audience in a way that is engaging and easy to understand.
The group of skills related to Risk Assessment and Management including evaluating and designing controls, conducting impact assessments, identifying control gaps, remediating risk, etc.
Experience identifying and determining levels of risk to an organization's networks and systems using cybersecurity techniques
Working with people with different functional expertise respectfully and cooperatively to work toward a common goal.
Skilled in cloud technologies and cloud computing
The group of skills related to Influencing including negotiating, persuading others, facilitating meetings, and resolving conflict.
Additional Information
The future is what you make it to be. Discover compelling opportunities at careers.fanniemae.com.
Fannie Mae is an Equal Opportunity Employer, which means we are committed to fostering a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, religion, national origin, gender, gender identity, sexual orientation, personal appearance, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation in the application process, email us at [email protected].
The hiring range for this role is set forth on each of our job postings located on Fannie Mae's Career Site. Final salaries will generally vary within that range based on factors that include but are not limited to, skill set, depth of experience, certifications, and other relevant qualifications. This position is eligible to participate in a Fannie Mae incentive program (subject to the terms of the program). As part of our comprehensive benefits package, Fannie Mae offers a broad range of Health, Life, Voluntary Lifestyle, and other benefits and perks that enhance an employee’s physical, mental, emotional, and financial well-being. See more here.
Job Abstracts is an independent Job Search Engine. Job Abstracts is not an agent or representative and is not endorsed, sponsored or affiliated with any employer. Job Abstracts uses proprietary technology to keep the availability and accuracy of its job listings and their details. All trademarks, service marks, logos, domain names, and job descriptions are the property of their respective holder. Job Abstracts does not have its members apply for a job on the jobabstracts.com website. Additionally, Job Abstracts may provide a list of third-party job listings that may not be affiliated with any employer. Please make sure you understand and agree to the website's Terms & Conditions and Privacy Policies you are applying on as they may differ from ours and are not in our control.
We would like to take a second to Welcome You to Job Abstracts, the nation’s largest Pure Job Board. With over 3.1 million job listings from 15,000+ Companies & Organizations, we help job searchers find careers that match their interests. As an anonymous user, you have probably discovered how easy our system is to use. However, you have just scratched the surface of what we can offer.
We encourage you to Register so you can use our most powerful features: searching with multiple terms, setting up multiple locations, establishing favorite companies, and accessing your search history. If you find a job you like, you can apply directly for it, and then, keep notes on it. We will also keep a lookout for jobs that match your search terms and email you when we find something you may like.
You can register for free and the system is free to use. If you like our system so far, click on Register and unlock the power required by serious job searchers.
Any time you conduct a search, the system shows you job matches, ranked by their Relevance Score (RS).
The score is calculated by a proprietary algorithm that uses Intelligent Machine Learning.
The Relevance Score tells you how well the job opportunity matches your search term or terms.
When not logged in, the system is limited to one search term. Scores for single term matches are usually lower.
When you register, log in, and set up multiple terms prioritized by importance, the jobs found for you will receive a much higher Relevance Score.
