Cloud Cybersecurity Solution Principal Architect

Cloud Cyber Solution Architect

The Cyber Security Solution Architecture team is seeking an enthusiastic Cloud Cyber Solution Architect that has a passion for their internal clients and helping them win by building best in breed digital and cloud solutions for the Bank. This role will have both an internal and external focus. Meaning this individual will partner closely with the teams responsible for developing next generation digital banking solutions, with particular focus on secure enablement of external client access and experience. The individual who occupies this role must have deep expertise, and real world experiences in designing and implementing external client facing digital application security solutions for IaaS, PaaS, and SaaS Cloud environments across Application Security, Cryptography, and Identity and Access Management, Logging and Monitoring, and Governance domains of cyber security.

This includes identity, access, authentication, authorization, business to business (b2b), business to consumer (b2e) and business to employee (b2e) concepts and constructs. Successful Architects in this role must be prepared to embrace change and relentlessly pursue an intentional high bar for excellence in security practices and principles. They must support our internal clients' needs to converge the heritage ecosystems and design new solutions where a previous capability does not exist. They must also iteratively improve upon the cyber solutions to meet the evolving threat landscape. This is a strategic target and solutions cloud architecture role that will derive security specifications from business requirements, and design security solutions that support core organizational functions, and assure their confidentiality, integrity and high availability.

The Cloud Cybersecurity Solution Principal Architect works to gain organizational commitment for cloud security, which includes, but not limit to infrastructure, digital application integration, migration and software plans, as well as assist to evaluate and select cloud security technologies required to complete those plans. You will provide integrated cloud security related technical expertise across the organization, from conceptualization and project planning to the post-implementation support level. Principally works, under limited supervision, with Corporate Information Security (CIS) personnel, Line of Business (LOB) personnel, external vendors, and internal IT Services personnel including Enterprise Architects, Application & Data Services personnel and other IT Operations Services teams. You will develop security specifications, requirements and architecture artifacts in compliance with corporate standards, laws and regulations for architecture adherence and performance guidelines.

Specific solution expertise is desired in the following areas :

• Digital Commerce, Digital Banking and Financial Systems application architecture
• Large data management architecture and integrations
• Attack protection and mitigation technologies DDoS, WAF, Bot, etc.
• AWS Cloud - application migration, fit for purpose, etc.
• Multifactor authentication, Risk Based Authentication
• oAuth flows and implementations, JWE token specifications
• Application authentication, authorization and entitlement models and implementations
• Application Security OWASP control and evaluation criteria
• Detailed understanding of industry standards such as PCI, FFICE, CSA, etc.
• Intelligent Robotic Process Automation
• Cryptographic technology Transit encryption, storage encryption, Hash, KMS, Digital Signature, etc.
• Federated Identity Management / Identity Providers / Single Sign On (SSO)
• Client authentication approaches for "anti-bot" technologies, signaling, and fraud prevention.

Ideal candidate will also have experience in the following areas :

Duties include :

Required Qualifications :

Preferred Qualifications :

Other Job Requirements / Working Conditions :

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation :

All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-