Job Details
Information Security Architect (Remote/Work from Home) at Highmark Health in Boise, Idaho, United States Job Description Company : enGen Job Description : JOB SUMMARY Execute a process to develop a security architecture that processes information of various levels of sensitivity. This role will involve heavy emphasis on Identity & Access Management (IAM) technologies and process for both data center and cloud environments. Identity & Access Management represents the perimeter defense of the Highmark cyberspace and is critically important. This security architect will work to maintain parity with technological innovation, emerging threats, and contribute toward the optimized security technology portfolio. Work efforts will include alignment & optimization of provisioning processes between on-prem and cloud deployments, with attention to non-person accounts such as application IDs and Service Accounts; alignment & optimization of Secrets Management technologies and processes across multiple Privilege Access Management (PAM) tools and cloud deployments; reusable architectural patterns for RBAC and ABAC implementations; strategy and guidance on automating manual processes, ensuring they fit into a cohesive architecture; and strategy and guidance on modernizing/migration SSO and Web Access Management technologies and processes. ESSENTIAL RESPONSIBILITIES + Enhance security team accomplishments and competence by planning delivery of solutions; answering technical and procedural questions for less experienced team members; teaching improved processes; mentoring team members. + Determine security requirements by evaluating business strategies and requirements; conducting system security and vulnerability analyses and risk assessments; identifying integration issues; preparing cost estimates. + Plan security systems by evaluating network and security technologies. + Implement security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures. + Enhance department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments. + May begin to provide leadership and mentoring in the areas of expertise and architecture to peers, developers, management and business users including technical expertise, coaching, and ad-hoc training. + Support assurance compliance to required standards, procedures, guidelines and processes. + Other duties as assigned or requested. QUALIFICATIONS Minimum + Bachelor's degree in Information Systems, Computer Science, Information Security, or Engineering, or relevant experience and/or education as determined by the company in lieu of bachelor's degree + 5 - 7 years' experience architecting solutions + 5 - 7 years' experience in Information Security + Experience communicating with business partners Preferred: + Experience in Sailpoint, Cyberark, and/or Azure AD ideal + OAM, MFA, SSO, SAML and OAuth knowledge is desirable KEY SKILLS + Business communication skills, both written and verbal and able to solve unconventional problems + Understanding of the TCP/IP protocol stack, application protocols such as SMTP, DNS, SSL VPNs, SSL/TLS protocol knowledge + Detailed knowledge of web, mobile, and client application security vulnerabilities, attack methods, and countermeasures + Experience with common information security management frameworks, such as HITRUST, ISO 27001, CobiT, ITIL, FedRAMP + Knowledge of ubiquitous encryption technologies (PGP, SSH, SSL, etc.) and common protocols (RADIUS, LDAP, KERBEROS, SAML, etc.) + Participate in evaluations and recommend solutions to support enterprises security controls including: networking, firewalls, IDS/IPS, data loss prevention, application security, infrastructure security, and data security PREFERRED LICENSURE Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Security Auditor (CISA), etc. TRAVEL REQUIREMENT: 0%- 25% Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job. Compliance Requirement: This position adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy. Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements. Pay Range Minimum: $78,900.00 Pay Range Maximum: $146,000.00 Base pay is determined by a variety of factors including a candidate's qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets. Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, age, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take affirmative action to employ and advance in employment individuals without regard to race, color, age, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability. EEO is The Law Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity ( ) We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact number below. For accommodation requests, please contact HR Services Online at California Consumer Privacy Act Employees, Contractors, and Applicants Notice Req ID: J232549 To view full details and how to apply, please login or create a Job Seeker account