Research Computing Security Architect

University of Utah; Salt Lake City (UT); Sur place; USD 58 000 - 150 000; Plein temps

Résumé du poste

The University of Utah’s CHPC is seeking a Research Computing Security Architect to lead the security architecture for HPC environments. You will shape the technical strategy, align with federal standards, and collaborate across CHPC teams and governance functions.

Reporting to Security and Compliance, you will drive threat modeling, tool selection, and secure design patterns across Linux-based HPC clusters, containers, and data transfer services, ensuring compliance and secure operations

Qualifications

• Translate federal cybersecurity standards (NIST SP 800-171 Rev. 3, CMMC) into architectural blueprints.
• Design security patterns for Linux-based HPC clusters, virtualization, and cloud resources.
• Lead threat modeling and ensure security is embedded by design before deployment.
• Coordinate with GRC and compliance teams to map requirements to architecture.

Responsabilités

• Develop and own security architecture and technical roadmap for HPC systems.
• Define reusable security patterns for HPC environments and associated services.
• Collaborate with monitoring, infra teams for logging, telemetry, detection, and incident response.
• Lead architectural threat modeling and evaluate security tools to modernize posture.
• Communicate architectural risks and tradeoffs to technical and nontechnical audiences.
• Partner with GRC to align designs with regulatory requirements and validation criteria.

Connaissances

Security architecture

Threat modeling

IaC automation

Linux systems

HPC security

Communication to stakeholders

Formation

Bachelor's degree or equivalent

Master's degree

Outils

Kubernetes

Docker

SIEM

Description du poste

Research Computing Security Architect

Job Summary

The University of Utah's Center for High Performance Computing(CHPC) is seeking a highly skilled Research Computing SecurityArchitect to lead the technical vision, strategic design, andoverarching security architecture for its high-performancecomputing (HPC) environments. This role is critical to enablingresearch by designing resilient, scalable systems that align withNIST SP 800-171 Revision 3 and other federal cybersecuritystandards. Reporting to the head of the Security and Compliance(S&C) team, the Architect will serve as CHPC's securityarchitecture lead, working closely with other S&C team members,other CHPC teams who are responsible for systems implementation andoperations, and with other institutional security and complianceteams to bridge the gap between technical reality and institutionalgovernance.

The department may choose to hire at any of the below joblevels and associated pay rates based on their business need andbudget.

Responsibilities

Architecture & Technical Strategy

• Develop and own the comprehensive security architecture andtechnical roadmap for HPC systems supporting regulatedresearch.
• Define reusable security patterns for Linux-based HPC clusters,workload schedulers, containers, shared storage, high-speednetworks, data-transfer services, virtualization, cloud resources,and interactive research-access services to satisfy NIST SP 800-171Rev. 3, CMMC, and other federal cybersecurity standards.
• Collaborate with CHPC monitoring specialists and infrastructureteams to define logging, telemetry, detection, logging, detection,and incident response capabilities, including required datasources, integrations, retention, alerting, and validationcriteria.
• Lead architectural threat modeling exercises, evaluatingcomplex system designs against potential attack vectors to ensuresecurity is embedded by design prior to deployment.

Cross-Team Leadership & Communication

• Ability to lead technical design reviews and influencecross-functional teams without direct supervisory authority.
• Serve as a liaison by communicating complex architecturalrisks, tradeoffs, dependencies, and recommendations to technicaland nontechnical audiences.
• Evaluate and select emerging security tools, platforms, andsecure data transfer protocols to continuously modernize the HPCsecurity posture.

Security Architecture Assurance & Compliance Partnership

• Partner with the internal Governance, Risk, and Compliance(GRC) team and compliance analysts to map regulatory andcontractual requirements to technical architecture, implementationrequirements, and validation criteria.
• Develop and maintain architecture diagrams, technicalspecifications, trust-boundary documentation, data-flow models, andsecurity design records that support institutional complianceefforts.
• Validate that deployed environments align with approvedsecurity designs and document material deviations, compensatingcontrols, and residual risks.
• Serve as the technical Subject Matter Expert (SME) duringassessments while compliance personnel retain responsibility forSSP management, evidence coordination, audit administration, andPOA&M tracking.
• Lead architectural threat modeling exercises, evaluatingcomplex system designs against potential attack vectors to ensuresecurity is embedded by design prior to deployment.

Cross-Team Leadership & Communication

• Ability to lead technical design reviews and influencecross-functional teams without direct supervisory authority.
• Serve as a liaison by communicating complex architecturalrisks, tradeoffs, dependencies, and recommendations to technicaland nontechnical audiences.
• Evaluate and select emerging security tools, platforms, andsecure data transfer protocols to continuously modernize the HPCsecurity posture.

Security Architecture Assurance & Compliance Partnership

• Partner with the internal Governance, Risk, and Compliance(GRC) team and compliance analysts to map regulatory andcontractual requirements to technical architecture, implementationrequirements, and validation criteria.
• Develop and maintain architecture diagrams, technicalspecifications, trust-boundary documentation, data-flow models, andsecurity design records that support institutional complianceefforts.
• Validate that deployed environments align with approvedsecurity designs and document material deviations, compensatingcontrols, and residual risks.
• Serve as the technical Subject Matter Expert (SME) duringassessments while compliance personnel retain responsibility forSSP management, evidence coordination, audit administration, andPOA&M tracking.

Minimum Qualifications

EQUIVALENCY STATEMENT: 1 year of higher educationcan be substituted for 1 year of directly related work experience(Example: bachelor's degree = 4 years of directly related workexperience).

Department may hire employee at one of the following joblevels:

Information Security Architect, III: Requires abachelor's (or equivalency) + 6 years or a master's (orequivalency) + 4 years of directly related work experience.

Information Security Architect, IV: Requires abachelor's (or equivalency) + 8 years or a master's (orequivalency) + 6 years of directly related work experience.

Information Security Architect, V: Requires abachelor's (or equivalency) + 10 years or a master's (orequivalency) + 8 years of directly related work experience.

• Proven ability to translate federal cybersecurity standards(such as NIST SP 800-171 Rev. 3 and CMMC) into architecturalblueprints and control patterns.
• Deep understanding of Linux-based operating systems,distributed computing, virtualization platforms, and HPC-orientedsecure container orchestration (e.g., Kubernetes, Docker).
• Demonstrated experience evaluating, selecting, and designinglarge-scale security capabilities, including centralized loggingand SIEM, vulnerability and configuration management, networksecurity, and host-based monitoring or EDR where technicallyappropriate.
• Strong understanding of infrastructure-as-code (IaC) andautomation frameworks to guide engineering deployment.

Preferences

• Master's degree in Computer Science, Information Security,Cybersecurity, Computer Engineering, or a related technicalfield.
• Active professional architecture certifications (e.g.,CISSP-ISSAP, GDSA, CompTIA SecurityX, or vendor-specific enterprisearchitecture credentials).
• Prior experience designing security architectures forhigh-performance computing (HPC) environments or high-throughputresearch networks.
• Concrete experience operating within higher education,government, or defense research environments requiring strict dataclassification, identity, segmentation, least privilege, device orworkload trust, and continuous validation.

Requisition Number: PRN46654B

Full Time or Part Time? Full Time

Work Schedule Summary: Monday – Friday 8am-5pm

Department: 00640 - CHPC Ctr for High PerformComputing

Location: Campus

Pay Rate Range: $58,292 - $150,375

Close Date: 01/29/2027

je-e28f93596d234d7e83cc0535634302cb