Enterprise Security Principal Architect

Job Summary

Navy Federal Credit Union is seeking a highly skilled Enterprise Security Principal Architect to join our team. As a key member of our security team, you will be responsible for providing comprehensive architectural leadership in translating Navy Federal strategies into effective IT and business capabilities.

Key Responsibilities

• Develop and maintain a comprehensive security architecture framework that aligns with NFCU's strategic objectives and regulatory requirements.
• Develop architectural documentation and/or artifacts for use in business and technology projects, knowledge transfer, decision support, and product evaluation.
• Develop target architectures ensuring the integration points of end-user technology services and other related services are consistent, scalable, and flexible.
• Develop and apply architectural reference patterns that guide the selection, development, implementation and use of IT within the enterprise.
• Develop, review and enforce enterprise architecture standards.
• Formulate and implement security strategies and standards to safeguard NFCU's information technology assets.
• Plan and develop robust and secure technical solutions that align with Navy Federal strategies.
• Assist in facilitating architectural governance based on business and IT strategies.
• Partner with IT teams, business units, and stakeholders to ensure security considerations are incorporated into project planning and execution.
• Collaborate on architecture reviews to assess the integrity and quality of proposed technical solutions.
• Understand the intersection and alignment of technology solutions to planned projects and initiatives to maximize the value to the enterprise.
• Provide forward-thinking technical expertise and thought leadership in current and emerging technologies, development practices, market trends and best practices.
• Build and maintain relationships with team members, management, key stakeholders and/or external contacts.
• Participate in risk assessments and security assessments with cross-functional teams to identify vulnerabilities and recommend remediation strategies.
• Assist in the Identification and provide recommendations for the acceptance or mitigation of any issues and risks associated with requirements, proposed solutions, architectural designs, implementation plans and timelines.
• Ensure compliance with industry regulations, such as PCI-DSS, HIPAA, and FFIEC, by implementing appropriate security controls and practices.
• Anticipate and plan for internal and/or external business challenges, with the ability to recommend process, product or service enhancements.
• Stay informed on the latest security trends, threats, and technology advancements to continuously enhance NFCU's security posture.
• Provide guidance and mentorship to junior security staff and promote security awareness throughout the organization.

Requirements

• Proven Experience in Security Architecture (5+ year's experience as a Security architect).
• Experience in Zero Trust Architectures.
• Implementation of zero trust principles in cloud environments.
• Extensive Experience in Cloud Security.
• Deep understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Ability to design and implement secure cloud-based solutions.
• Significant experience with The Open Group Architecture Framework (TOGAF) v.9 or higher, or relevant architecture framework.
• Significant experience with Service Oriented Architectures.
• Significant experience in utilizing various development and operations framework methodologies including Systems Development Life Cycle (SDLC) and/or Information Technology Infrastructure Library (ITIL).
• Significant experience in communicating technical concepts and practices effectively at all levels, including non-technical audiences, adjusting as needed to a target audience.
• Significant experience in translating business needs and requirements into comprehensive, useful, and clear architecture designs (e.g., logical architecture, system interaction, etc.) and artifacts.
• Significant experience in developing business and/or technical architecture diagrams.
• Significant experience in facilitating review and validation of architecture designs by technical and non-technical audiences.
• Significant experience in interpreting and translating architecture designs into IT solutions to achieve specific business outcomes.
• Significant experience in performing various forms of analysis including systems analysis, business process analysis and/or Architecture Fit/Gap analysis.
• Significant experience in leading, guiding and mentoring professional staff.
• Experience in managing multiple priorities independently and/or in a team environment to achieve goals.
• Ability to work both independently and as part of a team within a matrixed environment.
• Advanced skill using analytical and problem solving skills to troubleshoot and resolve technical challenges and identify patterns of software quality and reusability.
• Advanced skill using creative and innovative thinking to create original concepts and approaches for various projects and stakeholders.
• Advanced skill to translate technical concepts into non-technical terms.
• Advanced skill building effective relationships through rapport, trust, diplomacy and tact.
• Advanced organizational, planning and time management skills.
• Advanced skill communicating with all levels within an organization.
• Advanced verbal, interpersonal and written communication skills.
• Advanced word processing, spreadsheet, diagramming, and presentation software skills.
• Advanced skill to deliver presentations to virtual and in-person teams.

Preferred Qualifications

• Master's Degree in Information Technology, Computer Science, Cybersecurity, or related field, or the equivalent combination of education, training, and experience.
• Advanced knowledge of banking and financial industry standards and practices.
• Advanced knowledge of regulatory and compliance-related mandates such as CCPA and GDPR.
• Advanced knowledge of Navy Federal functions, philosophy, operations and organizational objectives.
• Certification in TOGAF, COBIT, Microsoft AZURE Solution Architect, or Scaled Agile.
• Certified Information Systems Auditor (CISA).
• Certified Cloud Security Professional (CCSP).
• Offensive Security Certified Professional (OSCP).
• Ability to manage large-scale security projects from conception to implementation.
• Proficient in network security, encryption, identity management, and access control.
• Knowledge of securing AI and machine learning models in the cloud.
• Experience in diverse industries to bring varied insights into security practices.
• Ability to anticipate and mitigate potential security threats.
• Understanding of securing containerized environments using Kubernetes or Docker.
• Experience with tools like Terraform or Ansible for cloud infrastructure automation.
• Integration of security practices into the DevOps process.

Work Environment

Navy Federal Credit Union is a hybrid workplace, and details will be discussed during your interview process.

Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team's discretion based on qualified applicant volume.

Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position.

Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.

Navy Federal values, celebrates, and enacts diversity in the workplace. Navy Federal takes affirmative action to employ and advance in employment qualified individuals with disabilities, disabled veterans, Armed Forces service medal veterans, recently separated veterans, and other protected veterans.