Montefiore Medical Center
IT SECURITY SOLUTION ARCHITECT
Montefiore Medical Center, Yonkers, New York, United States,
The Cloud Cybersecurity Solutions Architect will serve as the technical expert and strategic planner for Montefiore's cloud security architecture. This individual will lead the design, implementation, and management of security solutions that protect our cloud infrastructure, support advanced workload scalability, and align with regulatory requirements. This role is highly technical and calls for a thought leader who can translate business requirements into secure, scalable, and resilient cloud solutions using a wide array of cross-platform cloud services and tools. The Cloud Cybersecurity Solutions Architect serves as a key advisor to executive leadership, providing expertise in risk management, security frameworks, and emerging technologies. The role requires a deep understanding of cybersecurity principles and extensive experience in solution design.
Key Responsibilities: Design, develop, and implement secure, resilient cloud architecture, aligning with business objectives and regulatory standards. Lead the development of blueprints, design patterns, and reusable architecture frameworks for secure cloud deployments. Establish and enforce best practices for securing cloud environments, including network segmentation, data encryption, and identity access management, specifically tailored for cloud services. Develop governance policies and guardrails for cloud usage across business units, ensuring consistent application of security controls. Identify, assess, and prioritize cloud security risks, implementing appropriate mitigation strategies. Integrate security monitoring, logging, and alerting with existing SIEM to proactively manage threats. Design least-privilege IAM roles, fine-grained access policies, security groups, that integrate with existing privileged access management and multi-factor authentication mechanisms. Integrate identity federation and single sign-on (SSO) solutions with enterprise IAM solutions. Architect encryption strategies for data at rest, data in transit, and data in use that integrate with the enterprise HSM. Develop and enforce data protection policies, ensuring sensitive data is managed securely and complies with relevant data protection regulations. Develop security automation practices using Infrastructure as Code (IaC) tools. Design and oversee the implementation of comprehensive cloud native cybersecurity solutions that protect the organization's critical assets. Ensure that the company cloud architecture complies with relevant laws, regulations, and industry standards (e.g., HIPAA, HITECH, NYSDOH 405.46, HITRUST, etc.). Engage with external stakeholders, including vendors, partners, and regulators, to ensure the organization's cloud cybersecurity posture is robust and aligned with industry standards. Lead cross-functional teams in the design and implementation of cloud native security solutions, ensuring collaboration and alignment across the organization. Lead the continuous improvement of the organization's cloud cybersecurity architecture, ensuring it evolves to address new threats and challenges. Stay informed of the latest developments in cybersecurity, participating in professional networks and continuing education opportunities.
Required Skills and Knowledge: Deep understanding of cloud-based cybersecurity principles, including encryption, authentication, access control, and network security. Extensive experience in designing and implementing cybersecurity architectures for complex, enterprise cloud environments. Familiarity with common enterprise architecture frameworks including SABSA, OESA, TOGAF and similar. Expertise in cloud security, identity and access management (IAM), and security information and event management (SIEM) systems. Ability to translate research findings into practical solutions that address real-world security challenges. Strong strategic thinking skills, with the ability to develop and execute long-term cybersecurity plans. Ability to lead large-scale cybersecurity initiatives and projects, ensuring alignment with organizational goals. Excellent communication skills, with the ability to present complex technical information to both technical and non-technical audiences. Strong interpersonal skills, with the ability to build relationships and influence stakeholders at all levels of the organization. Experience in collaborating with cross-functional teams, including IT, legal, compliance, and business units.
Required Experience: Experience: 10+ years of experience in cybersecurity, with a focus on solution design, architecture, and leadership. Experience in Leadership: Extensive experience leading cybersecurity teams and initiatives at a senior level. Experience in Solution Architecture: Hands-on experience designing and implementing cybersecurity solutions in large, complex organizations.
Education: Master's degree or equivalent experience in Cybersecurity, Computer Science, Information Security, or a related field.
Certifications (Preferred but not required): AWS Certified Solutions Architect (Professional) AWS Certified Security AWS Certified AI Practitioner Microsoft Certified Cybersecurity Architect Expert EC-Council's Certified Network Defense Architect (CNDA) GIAC Defensible Security Architecture (GDSA) ISC2's CISSP - ISSAP (Information Systems Security Architecture Professional)
Personal Attributes: Visionary Leadership: Ability to inspire and lead teams towards a shared vision of cybersecurity excellence. Curiosity and Innovation: A natural inclination to explore new technologies and push the boundaries of what is possible in cybersecurity. Integrity and Ethics: Commitment to ethical behavior and adherence to the highest standards of professional conduct. Resilience and Adaptability: Ability to navigate and lead in a fast-paced, ever-changing cybersecurity landscape. Strategic Thinking: Ability to see the big picture and develop long-term strategies that align with organizational goals.
Department:
Montefiore Information Technology Bargaining Unit:
Non Union Campus:
YONKERS Employment Status:
Regular Full-Time Address:
3 Odell Plaza, Yonkers Shift:
Day Scheduled Hours:
8:30 AM-5 PM Req ID:
222405 Salary Range/Pay Rate:
$150,000.00-$200,000.00
For positions that have only a rate listed, the displayed rate is the hiring rate but could be subject to change based on shift differential, experience, education or other relevant factors.
To learn more about the "Montefiore Difference" - who we are at Montefiore and all that we have to offer our associates, please click
here.
Diversity, equity and inclusion are core values of Montefiore. We are committed to recruiting and creating an environment in which associates feel empowered to thrive and be their authentic selves through our inclusive culture. We welcome your interest and invite you to join us.
Montefiore is an equal employment opportunity employer. Montefiore will recruit, hire, train, transfer, promote, layoff and discharge associates in all job classifications without regard to their race, color, religion, creed, national origin, alienage or citizenship status, age, gender, actual or presumed disability, history of disability, sexual orientation, gender identity, gender expression, genetic predisposition or carrier status, pregnancy, military status, marital status, or partnership status, or any other characteristic protected by law.
#J-18808-Ljbffr
Key Responsibilities: Design, develop, and implement secure, resilient cloud architecture, aligning with business objectives and regulatory standards. Lead the development of blueprints, design patterns, and reusable architecture frameworks for secure cloud deployments. Establish and enforce best practices for securing cloud environments, including network segmentation, data encryption, and identity access management, specifically tailored for cloud services. Develop governance policies and guardrails for cloud usage across business units, ensuring consistent application of security controls. Identify, assess, and prioritize cloud security risks, implementing appropriate mitigation strategies. Integrate security monitoring, logging, and alerting with existing SIEM to proactively manage threats. Design least-privilege IAM roles, fine-grained access policies, security groups, that integrate with existing privileged access management and multi-factor authentication mechanisms. Integrate identity federation and single sign-on (SSO) solutions with enterprise IAM solutions. Architect encryption strategies for data at rest, data in transit, and data in use that integrate with the enterprise HSM. Develop and enforce data protection policies, ensuring sensitive data is managed securely and complies with relevant data protection regulations. Develop security automation practices using Infrastructure as Code (IaC) tools. Design and oversee the implementation of comprehensive cloud native cybersecurity solutions that protect the organization's critical assets. Ensure that the company cloud architecture complies with relevant laws, regulations, and industry standards (e.g., HIPAA, HITECH, NYSDOH 405.46, HITRUST, etc.). Engage with external stakeholders, including vendors, partners, and regulators, to ensure the organization's cloud cybersecurity posture is robust and aligned with industry standards. Lead cross-functional teams in the design and implementation of cloud native security solutions, ensuring collaboration and alignment across the organization. Lead the continuous improvement of the organization's cloud cybersecurity architecture, ensuring it evolves to address new threats and challenges. Stay informed of the latest developments in cybersecurity, participating in professional networks and continuing education opportunities.
Required Skills and Knowledge: Deep understanding of cloud-based cybersecurity principles, including encryption, authentication, access control, and network security. Extensive experience in designing and implementing cybersecurity architectures for complex, enterprise cloud environments. Familiarity with common enterprise architecture frameworks including SABSA, OESA, TOGAF and similar. Expertise in cloud security, identity and access management (IAM), and security information and event management (SIEM) systems. Ability to translate research findings into practical solutions that address real-world security challenges. Strong strategic thinking skills, with the ability to develop and execute long-term cybersecurity plans. Ability to lead large-scale cybersecurity initiatives and projects, ensuring alignment with organizational goals. Excellent communication skills, with the ability to present complex technical information to both technical and non-technical audiences. Strong interpersonal skills, with the ability to build relationships and influence stakeholders at all levels of the organization. Experience in collaborating with cross-functional teams, including IT, legal, compliance, and business units.
Required Experience: Experience: 10+ years of experience in cybersecurity, with a focus on solution design, architecture, and leadership. Experience in Leadership: Extensive experience leading cybersecurity teams and initiatives at a senior level. Experience in Solution Architecture: Hands-on experience designing and implementing cybersecurity solutions in large, complex organizations.
Education: Master's degree or equivalent experience in Cybersecurity, Computer Science, Information Security, or a related field.
Certifications (Preferred but not required): AWS Certified Solutions Architect (Professional) AWS Certified Security AWS Certified AI Practitioner Microsoft Certified Cybersecurity Architect Expert EC-Council's Certified Network Defense Architect (CNDA) GIAC Defensible Security Architecture (GDSA) ISC2's CISSP - ISSAP (Information Systems Security Architecture Professional)
Personal Attributes: Visionary Leadership: Ability to inspire and lead teams towards a shared vision of cybersecurity excellence. Curiosity and Innovation: A natural inclination to explore new technologies and push the boundaries of what is possible in cybersecurity. Integrity and Ethics: Commitment to ethical behavior and adherence to the highest standards of professional conduct. Resilience and Adaptability: Ability to navigate and lead in a fast-paced, ever-changing cybersecurity landscape. Strategic Thinking: Ability to see the big picture and develop long-term strategies that align with organizational goals.
Department:
Montefiore Information Technology Bargaining Unit:
Non Union Campus:
YONKERS Employment Status:
Regular Full-Time Address:
3 Odell Plaza, Yonkers Shift:
Day Scheduled Hours:
8:30 AM-5 PM Req ID:
222405 Salary Range/Pay Rate:
$150,000.00-$200,000.00
For positions that have only a rate listed, the displayed rate is the hiring rate but could be subject to change based on shift differential, experience, education or other relevant factors.
To learn more about the "Montefiore Difference" - who we are at Montefiore and all that we have to offer our associates, please click
here.
Diversity, equity and inclusion are core values of Montefiore. We are committed to recruiting and creating an environment in which associates feel empowered to thrive and be their authentic selves through our inclusive culture. We welcome your interest and invite you to join us.
Montefiore is an equal employment opportunity employer. Montefiore will recruit, hire, train, transfer, promote, layoff and discharge associates in all job classifications without regard to their race, color, religion, creed, national origin, alienage or citizenship status, age, gender, actual or presumed disability, history of disability, sexual orientation, gender identity, gender expression, genetic predisposition or carrier status, pregnancy, military status, marital status, or partnership status, or any other characteristic protected by law.
#J-18808-Ljbffr