Information Security Architect - Secrets Management (Remote)

BioSpace; San Francisco (CA); Remote; USD 120,000 - 180,000; Full time

Job summary

An innovative company is seeking an Information Security Architect specializing in secrets management to shape security strategies and practices. This role is pivotal in assessing and protecting sensitive information across the organization. The ideal candidate will have extensive experience in cloud computing and secrets management tools, alongside a strong understanding of risk management and security principles. Join a forward-thinking team that values collaboration and creativity in tackling security challenges. If you're ready to make a significant impact in securing information assets, this opportunity is for you.

Qualifications

• 8+ years of experience in application development with a focus on secrets management.
• Proven experience in systems development lifecycle and related functions.

Responsibilities

• Shape and implement security strategy around secrets management.
• Drive innovation and evolve architecture for product offerings.

Skills

Cloud Computing Principles

Secrets Management

Risk Management

Container Security

Kubernetes Security

IAM Security

Network Security

Data Protection

Creative Problem Solving

Education

Bachelor's Degree

Master's Degree

PhD

Tools

HashiCorp Vault

CyberArk

Job description

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas: immunology, oncology, neuroscience, and eye care, as well as products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on Twitter, Facebook, Instagram, YouTube, and LinkedIn.

Job Description

As a key member of the Information Security Risk Management Architecture team, the Information Security Architect - Secrets Management, is responsible for shaping and implementing the organization's security strategy, architecture, and practices around secrets management. This role is crucial in assessing how secrets are utilized across the enterprise and developing strategies to detect, manage, and protect them using best practices, advanced technologies, and specialized services.

The Information Security Architect will collaborate with senior leaders across the organization, acting as a trusted advisor to ensure the security of AbbVie's information assets. This position requires a deep understanding of secrets management and the ability to influence and guide the organization towards robust security practices.

This position can be virtually anywhere in the U.S.

Responsibilities

1. Deep understanding of cloud computing principles, including virtualization, containerization, microservices, and serverless computing; risk management, container security, Kubernetes security, IAM security, network security, auditing, encryption, secrets management, data protection, and securing CI/CD.
2. Advance knowledge of Identity Security concepts, least privilege, separation of duties, and Zero Trust design principles.
3. Understanding of federation technologies (WS-Fed, OAuth, OpenID Connect, SAML) and encryption technologies (types, protocols, standards).
4. Build the foundational aspects of an enterprise-grade offering for secrets management.
5. Drive innovation and evolve the architecture of widely adopted product offerings.
6. Experience deploying and managing enterprise-level secrets management solutions, such as HashiCorp Vault, CyberArk, or similar technologies.
7. Function as a subject matter expert in secrets management within a large enterprise, developing proposals and implementing strategies.
8. Anticipate and evaluate technological advances or threats and respond with appropriate strategies.
9. Demonstrate creative thinking to solve challenges and champion new technologies.
10. Manage multiple projects within secrets management, demonstrating mastery across data and software applications.
11. Develop relationships with affiliates, vendors, and industry peers, aligning with AbbVie's values.
12. Mentor or supervise a team, guiding performance and accountability.
13. Adhere to corporate standards, policies, and compliance requirements related to security and data management.

Qualifications

1. Bachelor's Degree with 8 years of experience, or Master's Degree with 7 years, or PhD with 3 years in application development.
2. Experience in systems development lifecycle and related functions.
3. Experience with secrets management in a corporate environment, with familiarity in tools like HashiCorp Vault, CyberArk.
4. Proven experience developing processes for secrets management.

Additional Information

Details regarding compensation, benefits, and legal disclosures are included, emphasizing the company's commitment to equal opportunity and compliance with applicable laws.