Information Security Architect II (2026-0465)

Valley Medical Center; Renton (WA); On-site; USD 90,000 - 120,000; Full time

Job summary

Valley Medical Center in Renton, WA is seeking an experienced Information Security Architect II responsible for the confidentiality and integrity of computer systems. You will monitor security solutions, respond to threats, and ensure compliance with industry standards such as HIPAA.

The position requires advanced security certifications and strong expertise in cloud security, risk assessments, and security tools. Excellent communication skills and experience in managing highly confidential information are essential.

Qualifications

• Intermediate-level information security certification required.
• Industry experience preferred as Cybersecurity Practitioner or SOC Analyst.
• Working knowledge of scripting, cloud, and OS security.

Responsibilities

• Monitor security solutions and respond to identified threats.
• Provide first-tier support and assist staff with access issues.
• Conduct internal risk assessments and recommend security enhancements.

Skills

Information security certifications (e.g., (ISC)2, OffSec, CompTIA)

Scripting languages (Python, PowerShell)

Cloud computing security (Azure, AWS)

Operating system security (Windows, Mac, Linux)

Networking and wireless security

Vulnerability management

Risk assessment skills

PKI and certificate authority management

Multi-factor authentication implementation

Education

Master’s degree in computer science or related field plus 2 years industry experience

Bachelor’s degree plus 3 years

Associate’s degree plus 4 years or 5 years industry experience

Tools

Security tools (firewalls, AV, and SIEM)

Certificate management systems

SOC management tools

Job description

Job Title

Information Security Architect II

Location

VMC Main Campus, Renton, WA

Job Overview

Responsible for ensuring the confidentiality, integrity, and availability (CIA) of VMC computer systems and information to safeguard personnel and patient safety, while also maintaining compliance with HIPAA, PCI‑DSS, cybersecurity industry best practices, frameworks, and standards.

Key Responsibilities

• Monitor all security solutions, investigate alerts, and respond to identified threats, incidents, and compromises.
• Monitor the ticket queue, provide first‑tier support, and escalated as needed.
• Provide excellent customer service and assist staff with access related issues.
• Offer certificate assistance to other teams.
• Document procedures and resources (notes, training, templates, knowledge bases, SOPs).
• Perform performance maintenance and patch management on security tools and databases.
• Provide IT policy guidance to help staff with security compliance.
• Configure, manage, and operate security tools including firewalls, AV, SIEMs, SEG, PKI, etc.
• Conduct internal risk assessments and recommend changes to procedures, systems, or infrastructure to enhance security.
• Research and recommend patching for known threats and zero‑day vulnerabilities.
• Research new technology requests and recommend appropriate security guidance.
• Provide security training and implement awareness campaigns.
• Assist and guide lower‑level analysts; receive instruction from higher‑level analysts and supervisor.

Qualifications

• Education: Master’s degree in computer science or related field plus 2 years industry experience; Bachelor’s degree plus 3 years; Associate’s degree plus 4 years; or 5 years industry experience.
• Current intermediate‑level information security certification (e.g., (ISC)2, OffSec, EC‑Council, GIAC, CompTIA) required; additional certifications approved.
• Industry experience preferred as Cybersecurity Practitioner, SOC Analyst, Risk Assessment Auditor, Penetration Tester, Incident Response Handler, or Computer Forensics Investigator.
• Experience as Systems Administrator or Network Engineer (up to 3 years) considered.
• Working knowledge of scripting languages and automation (Python, PowerShell, etc.).
• Working knowledge of securing cloud computing and cloud services (Azure, AWS).
• Working knowledge of securing operating system environments (Windows, Mac, Linux).
• Working knowledge of securing networking, wireless, and virtual environments.
• Working knowledge of subnetting, segmentation, and zero‑trust zones.
• Professional experience with PKI/certificate authority and OpenSSL.
• Professional experience with SEG, NGFW, AV, and EDR.
• Professional experience with various SIEMs and SOC management.
• Professional experience with multi‑factor authentication implementation.
• Familiarity with security compliance standards (HIPAA, PCI‑DSS, GDPR, etc.).
• Familiarity with security frameworks (HITRUST, NIST, OWASP, ISO 27000, SANS CIS 20, STIGs, ITIL, etc.).
• Familiarity with the OSI model and TCP/IP protocol suite.
• Familiarity with vulnerability management and patch cycles.
• Familiarity with risk assessments, pen‑tests, tabletop exercises, BCDR, and change management.
• Familiarity with writing and implementing IT policy, CSIRT plans, and training & awareness programs.

Physical / Working Conditions

• Ability to move items and equipment weighing up to 70 lbs.
• Ability to manage highly confidential information and remain autonomous or collaborative as needed.
• Strong focus, time‑management, and problem‑solving skills.
• Excellent communication with all organizational levels, including C‑level executives, auditors, and end users.
• Ability to stay current on cybersecurity events and zero‑day exploitations.