Senior IT Security Architecture Engineer at Constant Contact in Los Angeles, California

Job Description:

We have an opening for a Senior IT Security Architecture Engineer who will work across all Information Security Teams and with other business units to identify opportunities for improving security controls, recommend solutions, and lead the design/build-out of new controls.  


Reporting to the Director of IT Security Architecture, Design, and Testing, the Senior IT Security Architecture Engineer is a technical position with a minimum of 7 years of experience in a hands-on technical cyber security role. You'll be a member of the Cyber Security Architecture team responsible for the design and establishment of security controls, standards, and processes required to protect the company's computer environment and software products effectively, efficiently, and economically.  


*This is a hybrid role working with your team 1 or 2 days a week from our Waltham, MA office


What you'll do:

• Review technology and security projects, making recommendations with regard to product selection, configuration, and design


• Remain informed and intimate with current security technology solution trends and approaches


• Remain informed about the current threat landscape and integrate threat information and assess impacts our enterprise's current state


• Understand current enterprise technology architecture and business processes with the goal of addressing security issues and providing an informed opinion to leadership teams


• Provide security guidance and requirements to technology teams with the goal of defining standard processes, documentation, key controls to monitor and metrics to gauge effectiveness


• Prepare, evaluate, and present security solutions and recommendations to senior leaders


• Recommend, coordinate, and implement security technical controls to ensure policies and processes are performing as intended


• Oversee multiple projects to preserve the architectural vision and protect stakeholder interests as well as to meet operational and financial reporting requirements


• Possess the ability to think long-term, quickly develop strategic designs/solutions and think critically across the assigned application portfolio, current technology backdrop while remaining organizationally astute


• Develop security architecture and guiding principles at the macro & micro levels across all cloud initiatives


• Lead, coach, and mentor the Cloud Services team to incorporate security while developing highly scalable, distributed applications involving Cloud Ops, DevOps and Security teams


• Develop technical and security specifications for the targeted applications/workloads in the service catalog

• 7+ years of progressive and comprehensive information security experience


• Security Certifications such as CISSP, CISM, etc.


• Proven experience building security reference architecture for on-premise, cloud, and hybrid scenarios, as well as containers and Kubernetes


• Implementation experience with enterprise security solutions such as Endpoint Protection (EDR/HIPS), Firewall, WAF, IPS, Vuln Management, Anti-DDOS, and SIEM


• Strong knowledge of networking including large scale network segmentation, attack surface management, Zero Trust Network Access, and Software Defined Networking space


• Knowledge of Identity and Access Management, Privileged Access Management, Single-Sign-On, and PKI/Certificate Services a plus


• Demonstrated ability to think strategically about business, product, and technical challenges


• Experience researching and evaluating available technologies and standards to meet requirements


• Experience with working on global teams across time zones, cultures, and languages