Senior Consultant( IT Cyber Security Architect)

Description du poste

Looking for an IT Security Architect to assist with the completion of security architecture activities related to the PayMod solution to ensure architecture is aligned with client's overall IT environments.

The key duties and responsibilities include, but are not limited to, the following:

1. Assess and understand  current security architecture and posture and provide recommendations for improvement and risk reduction;
2. Work closely with IT, Application, and data architects to develop an architectural framework and guiding principles that will define and maintain our future enterprise architecture;
3. Plan and design an enterprise security architecture and document how the implementation of a new technology impacts the security posture of the current environment;
4. Provide subject matter expertise to senior management and technical teams, and support the design, deployment, configuration, and monitoring/evaluation of a secure hybrid environment (on premises and cloud) in the areas of infrastructure (hardware, software, and networks), secure application development, and secure data management;
5. Define and communicate security requirements with business and technical teams for new corporate projects and business operations;
6. Perform security assessments, identify gaps, and provide recommendations to improve overall enterprise security and to ensure compliance with regulatory and security requirements;
7. Research and propose new solutions (including cost and effort estimates) for Cloud Security, Network Security, Perimeter Defense, Identity and Access Management, Vulnerability Management, Secure SDLC (Software Development Life Cycle), and other areas as required;
8. Perform planning, deployment, testing, and documentation of new security solutions or enhancements to existing security solutions in accordance with security best practices and  policies;
9. Participate in the design and execution of vulnerability assessments, penetration tests, security audits, and Threat Risk Assessments, providing recommendations on risk avoidance, mitigation, and issue resolution;
10. Implement recommendation actions and apply fixes to address gaps identified by assessments and compliance tools such as Azure/365 compliance centers, Microsoft Defender for Cloud and Qualys;
11. Identify and prioritize system functions required to promote continuous availability of critical business processes and assist in planning, developing, and testing enterprise Disaster Recovery and Business Continuity Plans;
12. Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures);
13. Provide input on security requirements to be included in requests for proposal (RFPs), statements of work (SOWs), and other procurement documents;
14. Whenever required, manage enterprise security systems including but not limited to firewalls, VPN (Virtual Private Networks), IPS/IDS (Intrusion Detection and Prevention Systems), Key Vaults, PKI (Public Key Infrastructure), EDR (Endpoint Detection and Response), Antimalware, Vulnerability Scanners, network Terminal Access Point (TAP), SIEM (Security Information Event Manager), and PIM (Privileged Identity Manager); and
15. Participate in investigations and troubleshooting of security-related issues, as required.