Prin Cyber Security Architect

Constellation; Houston (TX); On-site; USD 171,000 - 190,000; Full time

Benefits offered by this job

Bonus program

401(k) with company match

Employee stock purchase program

Comprehensive medical, dental and view

Disability and life insurance

Paid time off

Job summary

Constellation, a leading energy company, seeks a Principal Cyber Security Architect to partner with IT and business teams, driving security reference architectures and technology standards across the enterprise. You will translate regulations into IT/OT requirements and design security across the development lifecycle.

The role emphasizes leadership, stakeholder communication, and ongoing evaluation of security trends to maintain robust defenses in a complex energy landscape.

Qualifications

• Bachelor's Degree in Computer Science, Information Technology, or related discipline and 8+ years in cyber security architecture/design.
• Expert knowledge of authentication, authorization and access control methods.
• Expert knowledge of encryption, cryptography, and key management concepts.
• Expert knowledge of database systems and embedded systems.
• Expert knowledge of security architecture and risk management.

Responsibilities

• Provide technical and security expertise to identify security solutions and develop reference architectures.
• Design enterprise-wide security architecture aligned with business goals and ensure secure development and production environments.
• Offer guidance in secure application development and security policies, standards and implementations.
• Advise IT leadership on strategic security technology plans and translate capabilities into technical requirements.
• Maintain relationships with business and IT partners and communicate status to stakeholders.
• Monitor trends in security and evaluate new technologies for potential business advantages.

Skills

Authentication

Encryption

Cryptography

Databases

Embedded systems

Cloud computing

Security architecture

TCP/IP & DNS

Change management

Leadership

Communication

Education

Bachelor's Degree in Computer Science or related field

Job description

WHO WE ARE

As the largest private-sector power producer in the world and the nation's largest producer of clean and reliable energy, Constellation is focused on our purpose: lighting the way to a brilliant tomorrow for all. We have been the leader in clean energy production for more than a decade, and we are cultivating a workplace where our employees can grow, thrive, and contribute. Now integrated with Calpine, our portfolio includes 55 gigawatts of capacity from nuclear, natural gas, geothermal, hydro, wind and solar facilities, with the generating capacity to power the equivalent of 27 million homes.

Our culture and employee experience make it clear: We are powered by passion and purpose. Together, we're creating healthier communities and a cleaner planet, and our people are the driving force behind our success. At Constellation, you can build a fulfilling career with opportunities to learn, grow and make an impact. By doing our best work and meeting new challenges, we can accomplish great things. Join us in meeting the country's energy needs today and tomorrow.

TOTAL REWARDS

Constellation offers an extensive selection of benefits and rewards to help our employees thrive professionally and personally. We provide competitive compensation and a wide-range of benefits that support both employees and their families, helping them prepare for the future. In addition to highly competitive salaries, eligible employees are offered a bonus program, 401(k) with company match, employee stock purchase program; comprehensive medical, dental and vision benefits, including robust wellbeing programs; disability and life insurance benefits; paid time off for vacation, holidays, and sick days; and much more.

Expected salary range of $171,000 to $190,000, varies based on experience, along with comprehensive benefits package that includes bonus and 401(k).

PRIMARY PURPOSE OF POSITION

The Principal Cyber Security Architect (PCSA) partners with IT and business teams to provide expert leadership to drive security technology and security reference architecture solutions by weighing the advantages of security technology standards, market availability of products, and risks and benefits of security technology introduction into Exelon's computing environments. The PCSA provides comprehensive consultation to business units and IT management and staff at the highest technical level for all aspects of the security architecture domain. The PCSA develops and maintains business, systems, and IT/OT processes to support enterprise mission needs and requirements; translates technology and environmental conditions (e.g., law and regulation) into IT/OT rules and requirements that describe baseline and target security architectures. The PCSA designs enterprise and systems security throughout the development lifecycle; translates technology and environmental conditions (e.g., law and regulation) into security designs and processes. The PCSA operates independently with little or no direct supervision.

PRIMARY DUTIES AND ACCOUNTABILITIES

• Provide technical and security expertise to IT and business teams to identify security technology solutions and develop security reference architectures and strategies to achieve business results. Ensure appropriate implementation of security technology and reference architectures within both the development and production environments. Analyze user needs and requirements to plan architecture.

• Design and develop enterprise-wide security architecture and strategy for all aspects of the security domain in alignment with the business strategy and goals. Develop/integrate cybersecurity designs for systems and networks with multilevel security requirements or requirements. Provide input on security requirements to be included in statements of work and other appropriate procurement documents.

• Provide technical guidance and security expertise in the areas of secure application development, security architecture risk management and assessment, security policies and standards, security architectures and implementations.

• Provide technology and security expertise and advice to IT leadership in the development of strategic security technology and plans to support business strategies. Translate proposed capabilities into technical requirements.

• Establish, maintain, and enhance relationships with business and IT partners. Communicate status to key stakeholders on a regular basis.

• Maintain awareness of trends and issues in area of security expertise, evaluate new security technologies or technology opportunities, and provide analysis of their potential impact to advantage the business.

MINIMUM QUALIFICATIONS

• Bachelor's Degree in Computer Science, Information Technology (IT), or a related discipline, and typically 8 or more years of solid, diverse experience in cyber security architecture and design, or equivalent combination of education and work experience.

• Appropriate technical skills and in-depth knowledge of business unit functions and applications, including:

• Expert knowledge of authentication, authorization, and access control methods.

• Expert knowledge of computer algorithms

• Expert knowledge of encryption algorithms

• Expert knowledge of cryptography and cryptographic key management concepts

• Expert knowledge of database systems

• Expert knowledge of embedded systems

• Expert knowledge of system fault tolerance methodologies

• Expert knowledge of how system components are installed, integrated, and optimized

• Expert knowledge of human-computer interaction principle

• Expert knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)

• Ability to design architectures and frameworks

• Skill in applying cybersecurity methods, such as firewalls, demilitarized zones, and encryption

• Expert knowledge of network access, identity, and access

• Expert knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services

• Expert knowledge of network design processes, to include understanding of security objectives, operational objectives, and tradeoffs

• Expert knowledge of parallel and distributed computing concepts

• Expert knowledge of key concepts in security management (e.g., Release Management, Patch Management).

• Expert knowledge of configuration management techniques

• Expert knowledge of cloud computing

• Comprehensive understanding of change management techniques associated with new technology implementation.

• Demonstrated experience producing an economic business case.

• Demonstrated leadership ability.

• Proven analytical, problem solving, and consulting skills.

• Excellent communication skills and the proven ability to work effectively with all levels of IT and business management.

PREFERRED QUALIFICATIONS

• Graduate degree in cyber security or related area of expertise.

• Relevant security certifications (CISSP, CISM, SABSA, GIAC)

• Appropriate technical skills and in-depth knowledge of business unit functions and applications, including:

• Experience with Azure, Google Cloud Platform and AWS

• Building multi-cloud environments

• Demonstrated experience and subject matter knowledge in cyber and information security for applications, web architectures, operating systems, databases, and networks.

• Demonstrated experience and subject matter knowledge of SCADA, IC& S, Distribution Automation, Smart Grid, DMS, and ECS systems architecture.

• Experience and proven capabilities in application risk assessment, application security architecture development, web application security, and application security testing.

• Demonstrated experience in security architecture risk assessment, requirements development, secure design analysis, architecture assessment and development, and security testing of applications and systems.

• Extensive experience developing, evaluating, and implementing cyber and information security architectures, technologies, standards, and practices to secure applications and IT systems.

• Demonstrated knowledge and experience in the implementation of governance frameworks and security risk management processes, such as NIST, ISO, and COBIT guidelines and standards.

• Demonstrated experience in addressing regulatory compliance for the security requirements in applicable laws and regulations, such as NERC CIP, SOX, PCI DSS, and HIPAA.

• Solid understanding and experience with security development lifecycle (SDL) processes for internally developed applications, including the web-based and Internet facing components.

• Expert knowledge and experience in application security standards, methodologies, and technologies.

• Solid capability to assess application and web architectures and operating systems for vulnerabilities and develop appropriate security countermeasures.

• Solid knowledge and experience with IT security aspects of operating systems, Active Directory, database (SQL) access, LDAP, Microsoft SharePoint, and web server configurations.

• Experience in assessing, configuring, and testing security applications and systems, such as Cisco firewalls, security appliances, IDS/IPS, SSL or TLS, IPSec, and web services security.

• Ability to demonstrate analytical skills, technical knowledge, and practical application of cyber and information security principles to business leaders and technical staff.

Constellation is proud to be an equal opportunity employer and employees or applicants will receive consideration for employment without regard to: age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law.