Cloud Security Architect

City / State : Yonkers, New York

Grant Funded : No

Department :

IT - Technology & Cloud Services

Work Shift : Day

Work Days : MON-FRI

Scheduled Hours : 9 AM-5 : 30 PM

Scheduled Daily Hours :

8.5 HOURS

Pay Range :

$156,000.00-$195,000.00

In office 4-6 times a year, or as needed.

Key Responsibilities :

• Design, develop, and implement secure, resilient cloud architecture, aligning with business objectives and regulatory standards.
• Lead the development of blueprints, design patterns, and reusable architecture frameworks for secure cloud deployments.
• Establish and enforce best practices for securing cloud environments, including network segmentation, data encryption, and identity access management, specifically tailored for cloud services.
• Develop governance policies and guardrails for cloud usage across business units, ensuring consistent application of security controls.
• Identify, assess, and prioritize cloud security risks, implementing appropriate mitigation strategies.
• Integrate security monitoring, logging, and alerting with existing SIEM to proactively manage threats.
• Design least-privilege IAM roles, fine-grained access policies, security groups, that integrate with existing privileged access management and multi-factor authentication mechanisms.
• Integrate identity federation and single sign-on (SSO) solutions with enterprise IAM solutions.
• Architect encryption strategies for data at rest, data in transit, and data in use that integrate with the enterprise HSM.
• Develop and enforce data protection policies, ensuring sensitive data is managed securely and complies with relevant data protection regulations.
• Develop security automation practices using Infrastructure as Code (IaC) tools.
• Design and oversee the implementation of comprehensive cloud native cybersecurity solutions that protect the organization's critical assets.
• Ensure that the company cloud architecture complies with relevant laws, regulations, and industry standards (e.g., HIPAA, HITECH, NYSDOH 405.46, HITRUST, etc.).
• Engage with external stakeholders, including vendors, partners, and regulators, to ensure the organization's cloud cybersecurity posture is robust and aligned with industry standards.
• Lead cross-functional teams in the design and implementation of cloud native security solutions, ensuring collaboration and alignment across the organization.
• Lead the continuous improvement of the organization's cloud cybersecurity architecture, ensuring it evolves to address new threats and challenges.
• Stay informed of the latest developments in cybersecurity, participating in professional networks and continuing education opportunities.

Required Skills and Knowledge :

This position requires advanced skills in Terraform, Python, AWS Security Services, SCP / IAM Policy - JSON, CNAPP Tooling, AWS Config / Conformance Packs.

Required Experience :

Education :

Certifications (Preferred but not required) :

Personal Attributes :

This position requires advanced skills in Terraform, Python, AWS Security Services, SCP / IAM Policy - JSON, CNAPP Tooling, AWS Config / Conformance Packs.

#SF-DICE

#SF-LI-SC

Montefiore Health System, Inc. is an equal employment opportunity employer. Montefiore Health System, Inc. will recruit, hire, train, transfer, promote, layoff and discharge associates in all job classifications without regard to their race, color, religion, creed, national origin, alienage or citizenship status, age, gender, actual or presumed disability, history of disability, sexual orientation, gender identity, gender expression, genetic predisposition or carrier status, pregnancy, military status, marital status, or partnership status, or any other characteristic protected by law.