Technology Architect, Cybersecurity

This position may be located at First Interstate Bank's offices in Billings, Colorado, Idaho, Iowa, Missouri, Montana, Nebraska, Oregon, South Dakota, Washington and Wyoming.

Generous Paid Time Off (PTO) in addition to paid federal holidays.

• Student debt employer repayment program.
• 401(k) retirement plan with a 6% match.
• Learn a little more about what we do for the communities we serve and why we want YOU to be a part of it.

The Cybersecurity Architect leads and supports the Chief Information Security Officer in maintaining visibility and providing oversight and guidance of technical cybersecurity aspects of projects, products, systems, applications, and services. This position collaborates with the Enterprise Architecture team to understand business goals and objectives and provide leadership to guide technology towards secure configuration and management. Also, this position creates deliverables for managing the security architecture of systems and technology throughout the organization.
Leads the development of roadmaps for strategic planning and long-term goals, ensuring technology is designed and implemented according to cybersecurity best practices and sound enterprise architecture principles for all environments, including cloud and on-premises infrastructure.
Creates governing cybersecurity architecture standards, including practices for data encryption and tokenization based on the organization's data classification criteria.
Collaborates with the management team to develop or recommend updates to cybersecurity standards to be reviewed and approved by executive management and/or formal authorization by the Chief Information Security Officer (CISO).
Leads the creation, development, and maintenance of security architecture artifacts (e.g., models, templates, standards, and procedures), leveraging the Enterprise Architecture tool to integrate security capabilities in projects and operations.
Identifies needs and leads performance of appropriate security reviews, identifying gaps in security architecture, and developing a security risk management plan for addressing these gaps.
Validates IT infrastructure and other reference architectures for security best practices and recommends changes to enhance security and reduce risks.
Establishes and builds relationships with the Enterprise Architecture team to develop and maintain a security architecture process that enables the enterprise to develop and implement security solutions and capabilities aligned with business, technology, and threat drivers.
Establishes and builds relationships with the IT management and teams to foster a collaborative environment for defining and ensuring systems are built to baseline security configuration standards for operating systems (e.g., OS hardening), network segmentation, identity, and access management (IAM), and cloud deployments.
Guides the collaboration and coordination with the data, security, and architecture teams to document data flows of sensitive information (e.g., Leads the research and coordination with the vendor management (VM) teams' security assessments of new, prospective, or emerging technologies, especially those with which the organization shares intellectual property (IP) and regulated or protected data. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Knowledge and experience with financial regulations such as Payment Card Industry Data Security Standard (PCI-DSS), Sarbanes-Oxley (SOX), Privacy Practices, Gramm-Leach-Bliley Act (GLBA), NIST Cybersecurity Framework (CSF), Center for Internet Security (CIS) Critical Security Control, and other cybersecurity frameworks, architecture, and technology.
Experience in using architecture frameworks such as The Open Group's TOGAF.
Direct, hands-on experience or strong working knowledge of managing security infrastructure such as firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM and log management technology, and vulnerability management tools.
Knowledge on defense in depth and zero-trust network architecture (ZTNA).
Full-stack knowledge of IT infrastructure: Applications, Databases, Operating Systems (Windows, Unix, and Linux), Hypervisors, IP Networks (WAN and LAN), Storage Networks (Fibre Channel, iSCSI, and NAS), Backup Networks and Media, Containers/Kubemetes, Public Cloud Services, and Securing Public Cloud Services.
Knowledge of various aspects of an enterprise technology architecture like business, information, data, network, and security.
Understanding and knowledge of system development life cycle methodologies (such as waterfall, spiral, agile software development, rapid prototyping, incremental, synchronize and stabilize, and DevOps).
Excellent understanding of application development methodologies and infrastructure and network architecture.
Excellent analytical, planning, organizational, and technical skills.
Ability to understand the long-term ("big picture") and short-term perspectives of situations.
Ability to translate future-state business capabilities and requirements into solution architecture requirements.
Ability to propose and estimate the financial impact of solution architecture alternatives.
Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, or a related field required and

• Master's Degree in Computer Science, Information Systems, Cybersecurity, or a related field preferred
• 4-6 years experience as a Cybersecurity Architect or Engineer, with demonstrated experience designing or building multiple components of IT and/or cybersecurity infrastructure required

CISSP Certified Information Systems Security Professional preferred
Certified Information Systems Auditor (CISA) preferred
In compliance with the Americans with Disabilities Act, the company provides reasonable accommodation to qualified individuals with disabilities and encourages both prospective and current employees to discuss potential accommodations with the employer.

Dexterity of hands/fingers to operate computer keyboard and mouse - Frequently
Additionally, this role is eligible to receive annual discretionary cash and stock bonuses. Benefits available for this position include, but are not limited to, medical, dental, vision, short-term and long-term disability benefits and life insurance, flexible spending accounts, health savings account, employee assistance program, 401(k), Paid Time Off (new hires accrue at .069 per hours worked which equates to approximately 18 days per year inclusive of paid sick time) and up to 11 paid Federal holidays.