Enterprise Security Principal Architect

Navy Federal Credit Union is seeking a highly skilled Enterprise Security Principal Architect to join our team. As a key member of our security team, you will be responsible for providing comprehensive architectural leadership in translating Navy Federal strategies into effective IT and business capabilities.

You will design, implement, and integrate IT systems and services, minimizing architectural and operational risk, and providing proven technical solutions to business challenges. Your work will be performed under limited supervision.

Key Responsibilities:

• Develop and maintain a comprehensive security architecture framework that aligns with NFCU's strategic objectives and regulatory requirements.
• Develop architectural documentation and/or artifacts for use in business and technology projects, knowledge transfer, decision support, and product evaluation.
• Develop target architectures ensuring the integration points of end-user technology services and other related services are consistent, scalable, and flexible.
• Develop and apply architectural reference patterns that guide the selection, development, implementation, and use of IT within the enterprise.
• Develop, review, and enforce enterprise architecture standards.
• Formulate and implement security strategies and standards to safeguard NFCU's information technology assets.
• Plan and develop robust and secure technical solutions that align with Navy Federal strategies.
• Assist in facilitating architectural governance based on business and IT strategies.
• Collaborate on architecture reviews to assess the integrity and quality of proposed technical solutions.
• Understand the intersection and alignment of technology solutions to planned projects and initiatives to maximize the value to the enterprise.
• Provide forward-thinking technical expertise and thought leadership in current and emerging technologies, development practices, market trends, and best practices.
• Build and maintain relationships with team members, management, key stakeholders, and/or external contacts (e.g., vendors, etc.).
• Participate in risk assessments and security assessments with cross-functional teams to identify vulnerabilities and recommend remediation strategies.
• Assist in the identification and provide recommendations for the acceptance or mitigation of any issues and risks associated with requirements, proposed solutions, architectural designs, implementation plans, and timelines.
• Ensure compliance with industry regulations, such as PCI-DSS, HIPAA, and FFIEC, by implementing appropriate security controls and practices.
• Anticipate and plan for internal and/or external business challenges (e.g., Regulatory, Compliance, etc.), with the ability to recommend process, product, or service enhancements.
• Stay informed on the latest security trends, threats, and technology advancements to continuously enhance NFCU's security posture.
• Mentorship:
  • Provide guidance and mentorship to junior security staff and promote security awareness throughout the organization.

Qualifications:

• Proven experience in security architecture (5 years of experience as a security architect).
• Experience in zero-trust architectures.
• Implementation of zero-trust principles in cloud environments.
• Extensive experience in cloud security.
• Deep understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Ability to design and implement secure cloud-based solutions.
• Significant experience with The Open Group Architecture Framework (TOGAF) v.9 or higher, or relevant architecture framework.
• Significant experience with Service-Oriented Architectures.
• Significant experience in utilizing various development and operations framework methodologies, including Systems Development Life Cycle (SDLC) and/or Information Technology Infrastructure Library (ITIL).
• Significant experience in communicating technical concepts and practices effectively at all levels, including non-technical audiences, adjusting as needed to a target audience.
• Significant experience in translating business needs and requirements into comprehensive, useful, and clear architecture designs (e.g., logical architecture, system interaction, etc.) and artifacts.
• Significant experience in developing business and/or technical architecture diagrams.
• Significant experience in facilitating review and validation of architecture designs by technical and non-technical audiences.
• Significant experience in interpreting and translating architecture designs into IT solutions to achieve specific business outcomes.
• Significant experience in performing various forms of analysis, including systems analysis, business process analysis, and/or Architecture Fit/Gap analysis.
• Significant experience in leading, guiding, and mentoring professional staff.
• Experience in managing multiple priorities independently and/or in a team environment to achieve goals.
• Ability to work both independently and as part of a team within a matrixed environment.
• Advanced skill using analytical and problem-solving skills to troubleshoot and resolve technical challenges and identify patterns of software quality and reusability.
• Advanced skill using creative and innovative thinking to create original concepts and approaches for various projects and stakeholders.
• Advanced skill to translate technical concepts into non-technical terms.
• Advanced skill building effective relationships through rapport, trust, diplomacy, and tact.
• Advanced organizational, planning, and time management skills.
• Advanced skill communicating with all levels within an organization.
• Advanced verbal, interpersonal, and written communication skills.
• Advanced word processing, spreadsheet, diagramming, and presentation software skills.
• Advanced skill to deliver presentations to virtual and in-person teams.
• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field, or the equivalent combination of education, training, and experience.
• Certified Information Systems Security Professional (CISSP).
• Preferred - Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM).

Desired Qualifications:

• Master's degree in Information Technology, Computer Science, Cybersecurity, or related field, or the equivalent combination of education, training, and experience.
• Advanced knowledge of banking and financial industry standards and practices.
• Advanced knowledge of regulatory and compliance-related mandates such as CCPA and GDPR.
• Advanced knowledge of Navy Federal functions, philosophy, operations, and organizational objectives.
• Certification in TOGAF, COBIT, Microsoft AZURE Solution Architect, or Scaled Agile.
• Certified Information Systems Auditor (CISA).
• Certified Cloud Security Professional (CCSP).
• Offensive Security Certified Professional (OSCP).
• Ability to manage large-scale security projects from conception to implementation.
• Proficient in network security, encryption, identity management, and access control.
• Knowledge of securing AI and machine learning models in the cloud.
• Experience in diverse industries to bring varied insights into security practices.
• Ability to anticipate and mitigate potential security threats.
• Understanding of securing containerized environments using Kubernetes or Docker.
• Experience with tools like Terraform or Ansible for cloud infrastructure automation.
• Integration of security practices into the DevOps process.

Hours:

Monday - Friday, 8:00AM - 4:30PM

Location:

820 Follin Lane, Vienna, VA 22180 | 5510 Heritage Oaks Drive Pensacola, FL 32526 | 141 Security Drive Winchester, VA 22602

About Us:

Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged, and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.

Equal Employment Opportunity:

Navy Federal values, celebrates, and enacts diversity in the workplace. Navy Federal takes affirmative action to employ and advance in employment qualified individuals with disabilities, disabled veterans, Armed Forces service medal veterans, recently separated veterans, and other protected veterans.

Hybrid Workplace:

Navy Federal Credit Union is a hybrid workplace, and details will be discussed during your interview process.

Disclaimers:

Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team's discretion based on qualified applicant volume.

Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location, and market position.

Bank Secrecy Act:

Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.

REQNUMBER:

21441-OTHLOC