Cybersecurity Solution Architect, Sr

Entergy; New Orleans (LA); On-site; USD 140,000 - 190,000; Full time

Job summary

Entergy is seeking a Sr. Security Architect to lead the design and deployment of secure cloud solutions in a complex enterprise environment. You will drive security requirements across projects, collaborate with enterprise security, and serve as the face of information security for teams.

You will evaluate cloud providers (Azure, AWS, GCP), cloud-native platforms, and compliance standards, and you will mentor staff while advancing Entergy's security roadmap.

Qualifications

• Experience designing secure cloud architectures across multiple providers.
• Knowledge of cloud security frameworks and standards required.
• Ability to perform threat modeling and risk assessments.

Responsibilities

• Lead or participate in development of secure cloud projects and solutions.
• Define and implement security requirements across lifecycle (design, build, operate).
• Evaluate cloud security controls, conduct evaluations for Azure/AWS/GCP.
• Advise stakeholders and ensure alignment with Entergy's security strategy.
• Oversee vulnerability remediation with internal and client teams.

Skills

Cloud security

Threat modeling

NIST CSF

CCM

Security architecture

Vulnerability management

Kubernetes

Docker

Cloud providers

Tools

Azure

AWS

GCP

PCF

Docker

Kubernetes

Job description

Job Summary

The Sr. Security Architect utilizes their knowledge of IT and information security engineering to lead and/or participate in the development of assigned projects or solutions. The Sr. Security Architect focuses on implementing security requirements for assigned projects and solutions while maintaining compliance with internal and externals policies and regulations. The Sr. Security Architect works closely with the Enterprise Security Architect to ensure projects and solutions are consistent with Entergy's Information Security strategy and roadmap. The Sr. Security Architect provides clear and concise direction to project stakeholders and acts as the \"face\" of information security for those teams.

Key Responsibilities

Oversee cloud security solutions across lifecycle strategy, design, implementation, and operations Participate, lead, and jointly deliver security evaluation reports on cloud providers (Azure, AWS, GCP), cloud native platforms (PCF, Docker, Kubernetes, etc.), and Software as a Service solutions Establish security requirements for cloud-based solutions by evaluating business strategies and requirements, researching cloud infrastructure security standards such as NIST CSF and NERC CIP Provide domain expertise in both public and private cloud and enterprise technology Identify and deliver appropriate controls based on industry standards (e.g. CCM) to drive cloud security solutions framework based on business risk and cloud native threats Continually evaluate new threats in the cloud, to identify the impact on IT and Business to develop and implement security controls Provide recommendations for improvement and risk reduction by assessing clients' cloud security posture; and act as a change agent with customer organizations to oversee the vulnerability improvements with our clients' existing IT staff as well as 3rd party vendors support our clients (most often managed IT service providers) Utilize Information Security reference architectures to develop secure solutions and designs for projects Provide input to policies, procedures, standards, processes, and templates that are consistent with the Information Security strategy and roadmap Participate in security and non-security projects to ensure that security requirements are defined and implemented Perform assessments and threat modeling of existing and emerging technologies to ensure they meet Entergy security and compliance requirements Evangelize and advocate for information security with stakeholders Monitor emerging trends in Information Security and technology and make or suggest changes to Entergy's security posture as necessary