IS Principal Security Architect

Emploi pas sur LinkedIn

🕒 il y a 1 mois

⚓ Rhode Island – Distant

⚓ Rhode Island – Remote

💵 $127 691 - $210 724 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

👻 Score fantôme 0%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Brown Medicine

Site WebLinkedInTous les Emplois

201 - 500 employés

Fondée en 1995

🏥 Santé

📚 Éducation

🔬 Science

Healthcare • Education • Science

Brown Medicine est un groupe de pratique médicale qui a rejoint le Brown Health Medical Group, fournissant des soins ambulatoires intégrés et spécialisés à travers un réseau de prestataires sous un dossier de santé électronique unique. Il propose des services destinés aux patients tels que des soins primaires et spécialisés, des téléconsultations et des portails en ligne pour les patients (transition vers MyChart), ainsi qu'un soutien administratif et de facturation. Il est affilié à Brown University Health et à la Warren Alpert Medical School.

Description

• Establish and govern secure technology architecture across hybrid on-premises and multi-cloud environments • Partner with infrastructure, application, data, and cloud platform teams to translate security strategy, regulatory expectations, and industry best practices into reference architectures, security standards, and design requirements • Own enterprise security reference architectures, design standards, and security patterns • Approve, require modification of, or reject proposed designs that do not meet security requirements; govern deviations through exception management • Define security requirements during project intake and early design phases • Lead security architecture reviews and assurance activities against standards, reference architectures, threat models, and control requirements • Drive remediation of security and control gaps across identity, network segmentation, data protection, monitoring, CI/CD, and third-party integrations • Design security architecture for Microsoft Fabric and lakehouse patterns, secure data ingestion pipelines, Microsoft Purview governance, encryption, and customer-managed keys • Define secure ingestion and connectivity patterns for on-premises systems and third-party platforms • Define and enforce security architecture for AI platforms and agent-based solutions • Assess acquired entities and define transition architectures aligned to enterprise standards • Define and maintain Microsoft Entra ID security architecture standards • Define secure network architecture patterns across on-premises and cloud environments • Define enterprise logging, telemetry, monitoring, SIEM integration, retention, and visibility requirements • Own and maintain enterprise security configuration standards and baselines across endpoints, infrastructure, cloud platforms, identity services, and AI/agent platforms • Ensure alignment with CIS Benchmarks and internal policy requirements and validate adoption • Perform detailed security risk assessments and translate findings into risk narratives, compensating controls, and prioritized roadmaps • Evaluate new technologies and platforms for architectural fit, integration requirements, and risk implications • Provide architectural guidance during major incidents and support post-incident reviews • Attend team, project, project management, problem management, cloud migration, and major incident conference calls as required • Participate in compliance and audit activities • Maintain work effort status within SLAs on Brown University Health’s Service Desk and Task Management Platforms • Perform other duties as assigned

🎯 Exigences

• Minimum 10 years of IS/IT experience, including 5+ years in information security architecture, engineering, or related senior technical security roles • Bachelor’s degree in information systems or equivalent experience; MBA or MS in Information Security preferred • Minimum of 3 active security certifications required at hire or within 6 months, such as CISSP, CCSP, GIAC, ISSAP, CKS, CCAK, OSCP/OSCE, or equivalent • Senior technical leadership across enterprise architecture, cloud security, identity security, AI governance, and data protection • Experience designing and governing security architecture for hybrid and multi-cloud environments • Experience with segmentation, secure connectivity, VPN, ExpressRoute, Direct Connect equivalents, DNS/routing, egress controls, and cloud governance models • Experience securing Azure and AWS environments across multiple subscriptions/accounts • Strong technical knowledge of security methodologies, platform hardening, and enterprise security controls across Windows/Linux systems, endpoints, cloud platforms, and enterprise infrastructure • Knowledge of IAM, federation, SAML, OAuth2, OpenID Connect, Conditional Access, RBAC, privileged access management, and application identity governance • Experience implementing phishing-resistant MFA, including FIDO2/WebAuthn, smart cards, or certificate-based authentication • Knowledge of encryption, PKI, secrets management, and KMS/Key Vault • Experience with Python, PowerShell, Bash, cloud CLIs/SDKs, and API/webhook integrations • Experience integrating security controls into Terraform, Ansible, and CI/CD workflows • Experience with SIEM and monitoring platforms; SOAR and automated response familiarity preferred • Knowledge of vulnerability management tools such as Qualys, Nessus, and Rapid7 • Experience with CSPM/CWPP solutions across multi-cloud environments • Strong understanding of network security architecture, firewalls, routing, switching, DNS, private networking, and packet analysis • Strong understanding of HIPAA/HITECH, NIST, ISO 27001, security frameworks, regulatory requirements, and risk methodologies • Ability to perform risk, control, vulnerability, and business impact assessments and create remediation plans • Excellent verbal and written communication skills, technical documentation, architectural diagrams, and executive-level reporting • Motivated self-starter with a record of owning security challenges through resolution • Ability to work Monday–Friday, 8:30am–5:00pm Eastern Time • No driving required • No supervisory responsibilities

🏖️ Avantages

• Equal employment opportunity and a work environment free from unlawful discrimination and harassment • Respectful, inclusive, and equitable environment • Holistic well-being support for employees and their families