Security Architect

Entergy Corporation; The Woodlands (TX); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Entergy is seeking a Security Architect to lead cloud security initiatives across hybrid environments in the Entergy service territory. This role collaborates with the Enterprise Security Architect to align projects with Entergy’s security strategy and roadmap.

The position requires cloud security expertise, experience with public cloud providers, and the ability to drive security controls across on-prem and cloud platforms. Travel up to 25% may be required.

Qualifications

• Bachelor’s degree in computer science, cyber security, information systems, engineering or a related discipline.
• ISACA or ISC2 certification (CISSP, CISM, CISA) is a plus.
• OSCP is a plus.
• Relevant vendor credentials offered by companies such as Amazon AWS, Microsoft Azure, etc. are a plus.
• Travel up to 25% across Entergy service territory.

Responsibilities

• Oversee cloud security solutions across lifecycle strategy, design, implementation, and operations.
• Lead and deliver security evaluation reports on cloud providers (Azure, AWS, GCP) and cloud native platforms (PCF, Docker, Kubernetes).
• Establish security requirements for cloud-based network solutions by evaluating business strategies and standards such as NIST CSF and NERC CIP.
• Provide domain expertise in both public and private cloud and enterprise technology.
• Identify and deliver appropriate controls based on industry standards to drive cloud security framework.
• Monitor emerging threats to identify impact and implement controls.
• Travel up to 25%.

Skills

Network security

APIs

Secure coding

Vulnerability Management

SIEM

Identity and Access Management

Penetration testing

Cloud security

Threat modeling

Security architecture

Education

Bachelor’s degree in computer science, cyber security, information systems, engineering, or related discipline

Master’s degree is a plus

Tools

AWS

Azure

GCP

PCF

Docker

Kubernetes

Job description

Select how often (in days) to receive an alert:

Location: The Woodlands, Texas, United States

Company: Entergy

Job Title: Security Architect

PS Job Title: Security Architect

Work Place Flexibility: Hybrid

Legal Entity: Entergy Services, LLC

***THIS IS A HYBRID POSITION (Remote & Onsite)***

***This position will be filled as a Security Architect depending on qualifications and experience of the candidate***

***This position may be filled in The Woodlands TX, New Orleans LA, Jackson MS, or Little Rock AR. Other locations within Entergy’s service territory may be considered***

Job Summary

The Network Security Architect utilizes their knowledge of IT and information security engineering to lead and/or participate in the development of assigned projects or solutions. The Network Security Architect focuses on implementing security requirements for assigned projects and solutions while maintaining compliance with internal and externals policies and regulations.

The Sr. Security Architect works closely with the Enterprise Security Architect to ensure projects and solutions are consistent with Entergy’s Information Security strategy and roadmap. The Sr. Security Architect provides clear and concise direction to project stakeholders and acts as the “face” of information security for those teams. As a network security architect for the Security Architecture team, you will be part of a team to manage and implement strategic and tactical initiatives to secure Entergy’s network, business, and customers.

Key Responsibilities

• Oversee cloud security solutions across lifecycle strategy, design, implementation, and operations. You will work in a cross-functional and cross-organizational environment to facilitate and define solutions for improving Entergy's network security posture
• Participate, lead, and jointly deliver security evaluation reports on cloud providers (Azure, AWS, GCP), cloud native platforms (PCF, Docker, Kubernetes, etc.), and Software as a Service solutions. You will ensure broad adoption and implementation of Network Security plans and services, and provide visibility of the security posture across Entergy’s networks
• Establish security requirements for cloud-based network solutions by evaluating business strategies and requirements, researching cloud infrastructure security standards such as NIST CSF and NERC CIP
• Provide domain expertise in both public and private cloud and enterprise technology. Facilitating communication and working in partnership with multiple teams
• Identify and deliver appropriate controls based on industry standards (e.g. CCM) to drive cloud security solutions framework based on business risk and cloud native threats. Retrofitting and uplifting current network security controls
• Continually evaluate new threats in the our network and DMZ, to identify the impact on IT and Business to develop and implement security controls
• Provide recommendations for improvement and risk reduction by assessing clients’ cloud security posture; and act as a change agent with customer organizations to oversee the vulnerability improvements with our clients’ existing IT staff as well as 3rd party vendors support our clients (most often managed IT service providers)
• Utilize Information Security reference architectures to develop secure solutions and designs for projects
• Provide input to policies, procedures, standards, processes, and templates that are consistent with the Information Security strategy and roadmap
• Participate in security and non-security projects to ensure that security requirements are defined and implemented
• Perform assessments and threat modeling of existing and emerging technologies to ensure they meet Entergy security and compliance requirements
• Evangelize and advocate for information security with stakeholders
• Monitor emerging trends in Information Security and technology and make or suggest changes to Entergy’s security posture as necessary

Experience needed

Security Architect Sr: 5+ years of full-time dedicated experience leading Cloud Security focused roles on delivering security on cloud native, distributed architectural solutions in complex environments
Security Architect: 3+ years of full-time dedicated experience leading Network Security focused roles on delivering security on cloud native and on-prem platforms, distributed architectural solutions in complex environments

• Experience in defining security standards and reference architectures used to guide technical resources in secure system implementation and configuration for enterprise cloud systems and consumption of public cloud is a plus
• Familiarity with predominant public cloud providers (AWS, Azure, GCP) is a plus.
• Understanding of Industry trends in network security cloud technologies for public, private and hybrid cloud deployments
• One or more years in a complex and highly regulated industry (e.g., utilities, financial services, healthcare, etc.)
• Experience working with outsourced teams
• Organizational and time management skills
• Experience in working in partnership with colleagues throughout the enterprise

Minimum Knowledge, Skills, and Abilities needed

• Familiarity with technologies commonly utilized within an enterprise IT and OT environment
• Strong knowledge of multiple information security domains with an emphasis in network security
• Networking and network security
• APIs
• Secure coding/application security
• Vulnerability Management
• SIEM
• Identity and Access Management
• Penetration testing
• Security process and control development
• Endpoint protection technology
• OT systems and protocols
• Smart Grid technology
• Some knowledge of IT Security regulations and guidance such as NIST, FISMA & ISO27001
• Familiarity with The Open Group Architecture Framework (TOGAF), Open Web Application Security Project (OWASP), Open Security Architecture, National Institute of Standards and Technology (NIST) Cloud Computing Reference Architecture, or other architecture frameworks
• Able to be hands‑on with technical engineering and process management skills and the ability to advocate positive transformation within the broader information technology organization
• Knowledge of network threats such as DDoS (Distributed Denial of Service)
• Able to design and develop an API based services layer for consistent integration with the security systems
• Knowledge of security ramifications of energy related regulations (SOX, HIPAA, NERC CIP, FERC, and NRC Nuclear Cyber (10 CFR 73.54)
• Knowledge of security, risk, and control frameworks and standards such as ISO 27001 and 27002, SANS-CAG, NIST, FISMA, COBIT, COSO and ITIL
• Strong writing and analytic ability
• Strong ability to communicate across the enterprise concisely and effectively
• Available to travel
• Self‑motivated, with the ability to manage and follow up on multiple tasks simultaneously
• Capable of meeting deadlines

Education needed

Bachelor’s degree in computer science, cyber security, information systems, engineering or a related discipline or equivalent work experience. Master’s degree is a plus.

Certifications

• ISACA or ISC2 certification, such as CISSP, CISM, CISA is a plus
• OSCP is a plus
• Relevant vendor credentials offered by companies such as Amazon AWS, Microsoft Azure, etc. are a plus

#LI-DG1 #LI-HYBRID

Primary Location: Texas-The WoodlandsTexas : The Woodlands || Arkansas : Little Rock || Louisiana : New Orleans || Mississippi : Jackson
Job Function: Corporate
FLSA Status: Professional
Relocation Option:
Union description/code: NON BARGAINING UNIT
Number of Openings: 1
Req ID: 125326
PS Job Title: Security Architect
Travel Percentage:Up to 25%

EEO Statement

The Entergy System of Companies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws. The Entergy System of Companies complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment including, but not limited to, recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. The Entergy System of Companies expressly prohibits any form of unlawful employee harassment based on race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of the Entergy System of Company employees to perform their expected job duties is absolutely not tolerated.

Accessibility

Entergy provides reasonable accommodations for online applicants. Requests for a reasonable accommodation may be made orally or in writing by an applicant, employee, or third party on his or her behalf. If you are an individual with a disability and you are in need of an accommodation for the recruiting process you may provide your name, contact number, the accommodation requested and the requisition number that you are requesting the accommodation for. Employee Services will contact you regarding your request.

Additional Responsibilities

As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.

WORKING CONDITIONS

As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.

Please note

Authorization to work in the United States is a precondition to employment in this position. Entergy will not sponsor candidates for work visas for this position.