Principal Information Security Architect
Sunnyvale, CA, United States
Job Title: Principal Information Security Architect
Contract Duration: Contract to Permanent
Location: Sunnyvale, CA
Role and Responsibilities:
• Responsible for implementing best security practices for our client
• Work with Engineering and other teams to ensure that critical data is protected and security is integrated into the products, software, applications and at customer install sites
• Responsible for implementing and maintaining best security standards and policies to protect Information systems architecture that includes Data Center, Network, Servers, Storage, Databases Applications and related access control
• Conduct various vulnerability tests to identify the gaps; recommend solutions and implement them in a timely manner
• Interface to customers IT security teams and provide responses to their questionnaire
• Act as a consultant to all teams on information security best practices
• Participate in project meetings and perform security design reviews
• Research latest security best practices, staying abreast of new threats and vulnerabilities and help to disseminate this information within the groups
• Implement relevant tools to monitor security threats, analyze relevant logs and take appropriate actions
• Develop security reports and publish periodically
• Maintain documentation on security best practices, process, policies and standards
• Mentor and provide relevant training to global team members
• Work with partners and vendors to make sure proper secured remote access is in place
• Lead customer security audits and other corporate compliance requirements
• Develop, maintain and deploy security policies
• Develop security training program for users
Skills and Experience:
• Minimum 10+ years of experience working as information security administrator or architect
• 5+ years working experience in architecting, designing, configuring and installing routers, switches, firewall, load balancers, and wireless devices for medium to large corporate companies
• Experience in working and securely deploying Telco circuits, WAN, LAN and, MPLS technologies
• Knowledge about Avaya Telecom and IP Telephony
• Strong communication skills (written, verbal, and listening)
• Network Intrusion Detection System architecture planning, implementation and support
• Implementing network security solution for AD, LDAP, Firewall, Anti-virus, IPS, Vulnerability Assessment Tool etc
• Experience in deploying Mobile Device Management in a corporate environment
• Knowledge about dynamic routing protocols (OSPF, EIGRP, BGP)
• Knowledge about various data encryption methodologies
• Experience in leading SOX, PCI, HIPAA, ISO audit and compliance requirements
Educational Requirements:
• BS or MS from an accredited college or university with major course work in Computer Science
• 10+ years of information security experience working in a globally distributed network infrastructure
• Professional security management certification such as CISSP, CISA, CIPP, and CISM preferred