Information Security Architect

Kforce has a client in Scottsdale, AZ that is seeking an Information Security Architect. Duties:

• Serve as a subject matter expert on security technologies (as listed in the requirements), providing hand-on last-line support as needed, and oversight of configuration and functionality of those security tools
• Provide active participation in meetings and projects to ensure the Security Team and the company's security interests are represented as a stakeholder
• Develop and maintain a security architecture process that enables the enterprise to develop and implement security solutions and capabilities that are clearly aligned with business, technology, and threat drivers
• Develop security strategy plans and roadmaps based on sound enterprise architecture practices
• Develop and maintain security architecture artifacts (e.g., models, templates, standards, and procedures) that can be used to leverage security capabilities in projects and operations
• Determine baseline security configuration standards for operating systems (e.g., OS hardening), network segmentation and identity and access management (IAM)
• Develop standards and practices for data labeling and encryption in the organization, based on the organization's data classification criteria
• Draft security procedures and standards to be reviewed and approved by Information Security Program Manager; Provide training and guidance as needed
• Track developments and changes in the business and threat environments to ensure that they are adequately addressed in security strategy plans and architecture artifacts
• Validate IT infrastructure and other reference architectures for security best practices and recommend changes to enhance security and reduce risks, where applicable
• Validate security configurations and access to security infrastructure tools, including firewalls, IPSs, WAFs and anti-malware/endpoint protection systems
• 6+ years of networking and systems support experience
• 4+ years of Information Security experience
• Relevant experience with Zscaler (ZIA/ZPA), VMware (NSX), Microsoft 365, Microsoft Defender for Endpoint, Microsoft Intune, Windows, and MacOS solutions
• Strong understanding of network infrastructure, architecture, and protocols and experience supporting IT networks
• Strong ability to perform root cause analysis and accompanied with documentation
• Strong understanding of fundamental routed and routing protocols and SDWAN/WAN/LAN design
• A team player that can relate to people at all levels of the organization and possesses excellent written and verbal communication skills
• Flexibility to work outside of normal business hours as required (scheduled maintenance, outage response, last-minute urgent requests, etc.)
• Energetic, forward-thinking, and creative individual with high ethical standards and a positive professional presence
• Ability to be flexible and able to function comfortably in a manufacturing environment
• Ability to read, analyze and interpret technical periodicals, professional journals, technical procedures, or governmental regulations
• Ability to define problems, collect data, establish facts, and draw valid conclusions
• Vast knowledge of Information Security processes and procedures, as well as threat actors' behaviors, motives, and attack patterns, and the ability to share this knowledge with others
• Ability to be an effective speaker and have a comfortable level with in-person and virtual speaking engagements

• Bachelor's degree in computer science, Information Systems, Cybersecurity, or related field
• Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP)
• Zscaler certifications
• Project Management Professional (PMP)