Cloud Security Architect at American Express (Phoenix, AZ)

American Express is embarking on an exciting Cloud and Mobile transformation driven by an energetic team of high performers. This group is nimble and creative with the power to shape our technology and product roadmap. You will lead Cloud Security Architecture working with cross-functional and cross-enterprise teams that define requirements (business and technical), develop architecture specifications, assess and select vendors/products, pilot new technology elements and process, develop enterprise-scale deployment plans and lead initial implementations. The role will work closely with other Information Security departments, architecture and development teams, and external cloud providers on requirements, design, integration and delivery of these solutions.

Responsibilities Include

• Provide senior security architectural leadership to all phases of the Cloud Program, including the Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Cloud Application Architecture subprograms.

• Work closely with subject matter experts to develop and deliver a complete security architecture solution

• Lead technical analysis and recommendations (e.g. evaluate and select vendor security products based on functional, security and operational requirements; review and comment on security architecture)

• Lead technical design and first instance deployment of global projects including security solutions for internal and external IaaS and PaaS clouds (e.g. collaborate with risk analysts, project managers and technical subject matter experts to design, plan and implement enterprise security solutions spanning the endpoint, network and application space)

• Produce (contribute to and oversee others) high quality documentation (e.g. Architecture Specifications, System Requirements, Roadmaps, White Papers) to accurately capture and communicate business drivers, technical requirements, system design, and future plans and provide thought leadership at the enterprise level).

• Present cloud security architectural design concepts and solutions to all levels in the organization

• Build cloud optimized architecture patterns and contribute to Enterprise Architecture governance.

• Compare and evaluate various private, public cloud technologies and tools from technical, functional and financial feasibility.

• Drive proof of concepts that assess the feasibility of solutions and demonstrate to our product partners how technology can be leveraged.

• Gather requirements; build functional specifications, timelines, adoption plans and other artifacts to support security implementation.

• Work with stakeholders within and across Business Unit teams to collaborate, enable, and drive decision making.

• Work with various businesses to evaluate various technologies including setting up POC, evaluation criteria, managing professional services resources for design, architecture and implementation.

• Partner with and support the Engineering team to drive and execute results in a timely manner

Must possess deep industry solution expertise and drive high priority customer initiatives. This is a solution and technical role that is accountable for the end-to-end cloud deployment experience. This Senior Security Architecture role will own Security engagement including: business architecture, solution architecture, facilitate architectural design sessions, manage specific implementation programs with corresponding Proofs of Concept plans.

• Demonstrated experience in Agile environments, application design, software development, and testing

• Expertise in cloud architecture and security fundamentals including containers, software-defined networks, high availability design, multicloud, and serverless compute

• Application experience migrating to or building natively in a cloud environment including monolithic applications, microservices, and functions as a service

• Experience with Windows and Linux operating systems

• Experience with network architecture, network security, and TCP/IP

• Experience with secure Java application design and development using J2EE, Spring, and SQL

• Experience with secure JavaScript and Single Page App design and development using node.js, React, and NoSQL

• Hands on with Docker and Kubernetes preferred

• Experience with a broad range of application architectures, languages, and payments technologies a plus

• 3+ years of experience in cloud security environment

• Bachelors Degree in computer science, computer engineering, or related field; advanced degree preferred

• Information Security Certification preferred, CISSP or similar

  
by via developer jobs - Stack Overflow