Hybrid Senior IT Security Architect

at AIG

• Job title: Senior IT Security Architect
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Azure, Chef, Cloud, Cyber Security, Google Cloud Platform, Puppet, Terraform
• Location requirements: Hybrid, Reston, United States

About the role

• Senior IT Security Architect focusing on cloud application security at AIG, collaborating with global teams and driving security architecture.

Responsibilities

• Play a part in reimagining how customers manage risk.
• Work with cross-functional AIG global information security teams.
• Act as a design authority on cloud application security.
• Ensure all security standards are followed, and any violations are remediated.
• Provide support and guidance in designing complex business and operations security solutions.
• Use cloud Service APIs and SaaS solutions to detect security blueprint violations.
• Work closely with global cloud team and Business CIO team to remediate security violations.
• Develop security requirements for business use-cases meeting AIG's global security standards.
• Build, configure, test and implement secured solutions that are aligned with IT security strategies.
• Establish reference cybersecurity architectures for scale and decentralized deployments.
• Provide architecture guidance across cybersecurity functional areas like Network, Endpoints, Data Protection, Cloud, etc.

Requirements

• 8+ years of IT Security Architecture related work experience, preferably at a large, global organization.
• 3+ years of engineering and hands-on design and architecture of effective security controls and measurement in network and applications domains for large financial enterprise.
• Hands-on with development of applications security architecture for migration of IT workload to Cloud services.
• Expert knowledge and implementation experience of cloud security domains of IAM, SaaS, IaaS, PaaS, Applications and Data Security.
• Strong knowledge of DevSecOps, security policies and incident response.
• Proven expertise in building a defense in depth infrastructure security architecture that includes security controls across multiple technology stacks.
• Strong understanding of how cloud data breach can occur.
• Understand how adversary might compromise various cloud services and how to prevent, detect and respond.
• Cloud Services (AWS/Azure/GCP) experience in migration of applications to the cloud, automation through various tools both AWS native and third-party.
• Implement Configuration Management and Infrastructure as Code (e.g. Chef, CloudFormation, Terraform, Puppet).
• Experience in DevOps environments and automating security controls into the CI/CD process.
• Ability to work across all layers of an application and technology infrastructures.
• Ability to work with development teams to deliver high-quality security architectures.
• Bachelor’s degree in information technology, computer science or equivalent work experience.
• Master's degree preferred.
• Excellent verbal and written communication skills.
• Must be a strong team player.

Benefits

• Competitive benefits package
• Bonus eligibility in accordance with the applicable incentive plan