Sr Information Security Architect
On-siteSan Francisco, California, United States
Job Summary
Provide leadership, secure design, and implementation for collaboration solutions while influencing system-level architecture and innovating to meet business needs. Lead architecture meetings, mentor team members, and coach business owners to strengthen organizational capabilities. Engage with Incident Response and Risk Management teams during incidents and to ensure accurate risk documentation. Advise and implement DevOps/CI/CD pipelines, enforce secure coding practices, and apply threat modeling using industry standards. Bachelor's degree in IT with 10+ years experience; strong background in NIST publications, IAM, and Microsoft security products. Ability to work on complex projects, travel up to 10%, and manage competing priorities under pressure. Stefanini Group seeks a candidate with a passion for innovation and excellence in this role.
Required Qualifications
- Bachelor's degree in an IT-related field and at least 10 years of work experience; or an equivalent combination of education and work experience
- Ability to work on highly complex projects that require in-depth knowledge within multiple domains
- Strong risk management background including expert understanding and experience with the NIST family of Information Security-related publications including 800-37, 800-30, and 800-53
- Strong IAM background (Okta, Cognito, KeyCloak, AD, SAML, JWT, JWS, etc.)
- Strong experience with modern collaboration and team enablement solutions (Persistent Chat, Project Management, Video/Audio, CRM, Document Management, etc.)
- Strong experience with Microsoft Endpoint and Cloud solutions (Windows 10, AD, Office 365, Azure, Intune, etc.)
- Strong experience with Microsoft Security Products (Azure Advanced Threat Detection, Sentinel, Threat Protection, Secure Score, etc.)
- Some experience using cloud and on prem Data Prevention Tools
- Some experience with alternative endpoints (macOS, iOS, Android)
- Experience with security considerations of cloud computing: They include data breaches, broken authentication, hacking, account hijacking, malicious insiders, third parties, APTs, data loss and DoS attacks
- Ability to travel up to 10%
Desired Qualifications
- Ability to Threat Model using industry standard techniques
- Lead Architecture Meetings
- Mentor and coach less experienced members of the team
- Lead the way with secure coding practices
- Advise and implement DevOps / CICD pipelines
- Engage with the Incident Response team during incidents
- Engage with the Risk Management team to ensure that risk is accurately documented
- Provide mentorship and development to business owners to strengthen the organization's collaboration capabilities
- Apply strong organizational skills, perform under pressure, and handle competing priorities
- Excellent interpersonal, negotiation, and influencing skills; ability to facilitate discussions around complex issues and bring them to resolution
- Real passion for innovation and a drive for learning and excellence
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.