Enterprise Security Architect

Enterprise Security Architect

We continuously invest in our team members and our infrastructure so we can safeguard our employees, customers and company. We are seeking an Enterprise Security Architect to join our team in Denver, CO. If you like managing projects, owning budgets and being responsible for the security architecture then this may be the right move for you. The Enterprise Security Architect will lead security engineering and mentor team members. This will include planning (review technical solutions for adherence to best practices and best fit), building (act as a project leader to design and configure elements of large security projects) and run activities (responds to escalated tickets or problem reports). In the event that there is a security incident, the security architect may perform a post-event analysis to determine root cause and lead discussions to make sure the necessary changes are put in place to avoid this issue in the future.

Responsibilities:

• Security Technology Strategy and Architecture: Design and implement enterprise security solutions that protect the company's market share, revenue and brand. Solutions should follow industry standard best practices, regulatory guidelines, and corporate policies.
• Security Project Management: Leads large highly complex global security projects often delegating work to other team members. Understands both business and technology objectives when deploying projects. Requires ability to configure and test solutions.
• Operational Security Management: Support of operational Security Management including; Firewall management Content filtering management Client and security agent management Vulnerability scanning remediation
• Technical Mentoring: Trains and mentors security engineering personnel on security architecture, new technology, and incident troubleshooting.
• Incident Handling and forensic analysis: Escalation point for incidents. Provides technical leadership for complex security incidents. Prepares final remediation plans for complex issues requiring senior executive engagement.

Work environment is generally typical of an office setting, however, must be able to travel to manufacturing facilities globally for projects. Relocation assistance is available for those who qualify under our relocation policy.

Requirements:

• Bachelor's degree.
• 8 years of advanced security experience or 8 years of Network and Security experience with 5 years of strong security focused experience.
• At least one certification such as CISSP, ENCE, SANS GIAC, Cisco CCSP, or CISM.
• Experience with enterprise security architecture, design and implementation of complex WAN, LAN, and enterprise security environments.
• Project management skills managing complex network and security technologies.
• Experience with Windows server and desktop operating systems.
• Experience in managing web content filtering and web proxy products.
• Experience with network troubleshooting tools such as Splunk and Wireshark.
• Experience supporting complex data network environments.
• Strong understanding of SSL certificates and Public Key Infrastructure.
• Expert working knowledge of network security and layered defense strategies (such as router access lists and route maps, Cisco ASA Firewalls, Cisco IDS Sensors, NAT, VPN, IPSEC, 3DES, SSL, 802.1x, WPA, TKIP, PEAP, Cisco ACS, TACACS and Radius).
• Experience with web application design, function and secure software development lifecycles.
• Proficient in Microsoft Word, Excel, Outlook.
• Ability to travel up to 20%.

Preferred Qualifications:

• Experience managing security for Manufacturing systems, SCADA, and Process control Networks preferred.
• Knowledge of computer security incident response and computer forensics

Skills and Certifications:

• CISSP
• CISCO WAN/LAN
• Splunk
• Wireshark
• Firewalls
• SCADA

All your information will be kept confidential according to EEO guidelines.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply