Solution Architect-Security

Solution Architect-Security & Identity Access Management (IAM) (Hybrid)

What you'll do:

The Solution Architect Security & Identity and Access Management (IAM) is a technical leader who provides consultative leadership and assures that new technology, processes and ways of working align with IT strategy, improve the security posture and enable Bank business outcomes. Your primary responsibilities include developing security architecture, alignment of strategic technical decisions across security and broader enterprise tooling, process collaboration and alignment with peers and business partners. You will work with security teams such as engineering, threat and incident response and compliance as well as IAM. The ability to build collaborative stakeholder relationships is a must.

How you'll make an impact:

• Help to reduce cyber risk to the business by designing and leading control improvements
• Improving organizational efficiency through IAM process design improvements.

• Provides technical leadership on implementation of new systems and processes.
• Review and approve architectural decisions in the security and IAM domains.
• Serve as subject matter expert for security and tooling landscape; stay current on market trends.
• Design and implement architecture of security solutions in accordance with IT strategy and leading practices from industry including AWS Well-Architected Framework, National Institute of Standards and Technology (NIST) and the Center for Internet Security (CIS).
• Work directly with business and IT technology owners to understand security requirements, complexities, and implementation strategies
• Engage and consult with other FHLBC Security leadership including Information Security, Security Advisory & Analytics, and IT Risk & Compliance to define Security Standards and Procedures.
• Define, review, and implement Security Standards, Procedures, and Guidelines.
• Engage and consult with IT Centers of Excellence (CoEs) and IT Delivery Teams.
• Engage with IAM governance council to understand enterprise risk and efficiency needs.
• Consult on application development projects to assess security requirements and controls, and to ensure that security controls are implemented as planned.
• Evaluate the benefits and risks of a solution's security posture and identify implementation strategies to enhance security posture.
• Participate in evaluating security requirements of third-party tools or SaaS Solutions
• Consult on and evangelize the behavior change and mindset shifts required of people resources to implement new architecture and processes.
• Educate stakeholders from the business and IT how to best leverage security solutions and processes to enhance the FHLBC security posture.
• Lead and coordinate technical reviews (architectural, security, compliance, etc.)

• Bachelor's Degree or equivalent experience required. Computer Science, Computer Information Systems or related field preferred.
• 10+ years of technology experience with 5+ years in security domains.
• Security certifications such as CISSP, SANS or others is preferred.
• Audit, compliance, and governance experience preferred.
• Knowledge of and experience in developing and documenting security architecture and plans, including strategic, tactical and project plans.
• Knowledge of IAM concepts and practices such as Role Based Access (RBAC), Identity Governance Administration (IGA), least privilege, access automation methods, user access and cloud access concepts. Knowledge of Privileged Access Management (PAM) controls.
• Knowledge of common information security management frameworks, such as ITIL and COBIT.
• In-depth knowledge of risk assessment methods and technologies.
• In-depth knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls.
• Skilled in performing risk, business impact, control, and vulnerability assessments.
• Proven experience with AWS cloud security best practices (e.g., IAM, WAF, KMS)
• Proven experience with Microsoft Azure and Azure Active Directory cloud security best practices
• Subject matter expertise in security domains, with knowledge pertaining to the majority of these topics: AppSec (OWASP Top10, SANS Top 25), Defense-in-depth, Risk assessment and management, Network topology and security, Network Infrastructure - securing network devices, Network protocols, Virtualization, Intrusion Detection, Intrusion Prevention, Logging, SIEM, Social Engineering, Security policy related to business continuity planning and contingency planning, Incident handling process, Secure communications including encryption, cipher suites, Linux and Windows security.
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
• Experience collaborating across multiple functional/technical teams to deliver a project.
• Ability to communicate with customers on a business level and translate their needs into a technical solution.
• Ability to adapt to organizational change and advocate for the required culture change within the organization.
• Strong emotional intelligence to identify the behavioral and cultural indicators to team effectiveness.
• Consultative, collaborative approach to solving complex problems, with customer service skills.
• Passionate about developing the skills of team members through technical and professional mentoring.
• Capable of leading by role or influence, as well as working independently.
• Strong communications skills, both oral and written, appropriate for a broad range including business. stakeholders and end users, executive leadership, and third-party vendors.
• Demonstrated growth mindset, enthusiastic about learning new technologies quickly and applying the gained knowledge to address business problems.
• Self-starter; ability to proactively define work and deliver results.