IS Principal Security Architect

Stelle nicht auf LinkedIn

🕒 vor 2 Monaten

⚓ Rhode Island – Remote

⚓ Rhode Island – Remote

💵 $127.691 - $210.724 / Jahr

⏰ Vollzeit

🔴 Experte

👮‍♂️ IT-Sicherheitsingenieur

🦅 H1B-Visum-Sponsor

Dieses Unternehmen hat in der Vergangenheit H1B-Visa gesponsert.

👻 Geisterscore 8%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Brown Medicine

WebsiteLinkedInAlle Stellen

201 - 500 Mitarbeiter

Gegründet 1995

🏥 Gesundheitswesen

📚 Bildung

🔬 Wissenschaft

Healthcare • Education • Science

Brown Medicine ist eine medizinische Praxisgruppe, die der Brown Health Medical Group beigetreten ist und integrierte ambulante und spezialisierte Versorgung über ein Netzwerk von Anbietern unter einem einzigen elektronischen Gesundheitsdatensatz bereitstellt. Sie bietet patientenorientierte Dienstleistungen wie Allgemeinmedizin und Spezialversorgung, Video-Sprechstunden und Online-Patientenportale (Übergang zu MyChart) sowie Verwaltungs- und Abrechnungsunterstützung und ist mit dem Gesundheitswesen der Brown University und der Warren Alpert Medical School verbunden.

Beschreibung

• Establish and govern secure technology architecture across hybrid on-premises and multi-cloud environments • Partner with infrastructure, application, data, and cloud platform teams to translate security strategy, regulatory expectations, and industry best practices into reference architectures, security standards, and design requirements • Own enterprise security reference architectures, design standards, and security patterns • Approve, require modification of, or reject proposed designs that do not meet security requirements; govern deviations through exception management • Define security requirements during project intake and early design phases • Lead security architecture reviews and assurance activities against standards, reference architectures, threat models, and control requirements • Drive remediation of security and control gaps across identity, network segmentation, data protection, monitoring, CI/CD, and third-party integrations • Design security architecture for Microsoft Fabric and lakehouse patterns, secure data ingestion pipelines, Microsoft Purview governance, encryption, and customer-managed keys • Define secure ingestion and connectivity patterns for on-premises systems and third-party platforms • Define and enforce security architecture for AI platforms and agent-based solutions • Assess acquired entities and define transition architectures aligned to enterprise standards • Define and maintain Microsoft Entra ID security architecture standards • Define secure network architecture patterns across on-premises and cloud environments • Define enterprise logging, telemetry, monitoring, SIEM integration, retention, and visibility requirements • Own and maintain enterprise security configuration standards and baselines across endpoints, infrastructure, cloud platforms, identity services, and AI/agent platforms • Ensure alignment with CIS Benchmarks and internal policy requirements and validate adoption • Perform detailed security risk assessments and translate findings into risk narratives, compensating controls, and prioritized roadmaps • Evaluate new technologies and platforms for architectural fit, integration requirements, and risk implications • Provide architectural guidance during major incidents and support post-incident reviews • Attend team, project, project management, problem management, cloud migration, and major incident conference calls as required • Participate in compliance and audit activities • Maintain work effort status within SLAs on Brown University Health’s Service Desk and Task Management Platforms • Perform other duties as assigned

🎯 Anforderungen

• Minimum 10 years of IS/IT experience, including 5+ years in information security architecture, engineering, or related senior technical security roles • Bachelor’s degree in information systems or equivalent experience; MBA or MS in Information Security preferred • Minimum of 3 active security certifications required at hire or within 6 months, such as CISSP, CCSP, GIAC, ISSAP, CKS, CCAK, OSCP/OSCE, or equivalent • Senior technical leadership across enterprise architecture, cloud security, identity security, AI governance, and data protection • Experience designing and governing security architecture for hybrid and multi-cloud environments • Experience with segmentation, secure connectivity, VPN, ExpressRoute, Direct Connect equivalents, DNS/routing, egress controls, and cloud governance models • Experience securing Azure and AWS environments across multiple subscriptions/accounts • Strong technical knowledge of security methodologies, platform hardening, and enterprise security controls across Windows/Linux systems, endpoints, cloud platforms, and enterprise infrastructure • Knowledge of IAM, federation, SAML, OAuth2, OpenID Connect, Conditional Access, RBAC, privileged access management, and application identity governance • Experience implementing phishing-resistant MFA, including FIDO2/WebAuthn, smart cards, or certificate-based authentication • Knowledge of encryption, PKI, secrets management, and KMS/Key Vault • Experience with Python, PowerShell, Bash, cloud CLIs/SDKs, and API/webhook integrations • Experience integrating security controls into Terraform, Ansible, and CI/CD workflows • Experience with SIEM and monitoring platforms; SOAR and automated response familiarity preferred • Knowledge of vulnerability management tools such as Qualys, Nessus, and Rapid7 • Experience with CSPM/CWPP solutions across multi-cloud environments • Strong understanding of network security architecture, firewalls, routing, switching, DNS, private networking, and packet analysis • Strong understanding of HIPAA/HITECH, NIST, ISO 27001, security frameworks, regulatory requirements, and risk methodologies • Ability to perform risk, control, vulnerability, and business impact assessments and create remediation plans • Excellent verbal and written communication skills, technical documentation, architectural diagrams, and executive-level reporting • Motivated self-starter with a record of owning security challenges through resolution • Ability to work Monday–Friday, 8:30am–5:00pm Eastern Time • No driving required • No supervisory responsibilities

🏖️ Vorteile

• Equal employment opportunity and a work environment free from unlawful discrimination and harassment • Respectful, inclusive, and equitable environment • Holistic well-being support for employees and their families