Information Security Architect

About the position:

The Architect’s role is a technical leadership position which will support the development of security strategies and architecture as it relates to Netskope’s security initiatives, specifically setting the direction for both technical (IT), business, and security projects. The Architect will work with other Architects, Service Owners, and Lead Engineers to provide consensus-based solutions that are enterprise focused, scalable, adaptable and synchronized with the ever-changing business needs.

Responsibilities:

• Subject-matter expertise across all security domains topics as it relates to both cloud and on-premises enterprise technology, and the relationship between the architectures.
• Drive the development and adoption of reference architectures for existing, new and emerging business and security technologies.
• Drive the adoption of creative solutions to address complex, global information and cyber security problems.
• Participate in Enterprise and other Architectural governance processes and drive the development of technical and procedural standards for adoption.
• Develop effective architecture solutions that not only satisfy immediate project requirements but also deliver a coherent, reusable, reliable and phased architecture to help the business grow and change while aligning to strategic vision.
• Create, maintain and align Netskope’s Information Security policies and standards with industry best practices and business needs in the adoption of cloud services and technologies.
• Participate in the review, refreshing and updating of the technology and procedural standards in alignment with regulatory requirements (FedRAMP), customer requirements, and organizational requirements.
• Participate in the development and engineering of solutions and champion the operational hand off from architecture, design, and engineering to Security Operations.
• Perform design reviews of proposed solutions identifying areas where security standards are not being met as well as identification of exposure areas
• Participate and support CSIRT/PSIRT and other security response teams on an as needed as a subject matter expert.
• Represent Information Security on organizational project teams and ensure adherence to existing security policies and standards.
• Participate and support guidance for security hardening of technologies being proposed by engineering, operations, business, and other functions.
• Review and management of security roadmaps related to information security functions, technologies, and capabilities.
• Deliver technical security configuration architecture expertise in implementing cross-organizational information sharing.
• Develop solutions and recommendations for issues caused by process challenges, emerging threats and technology changes.

Analytical/Decision Making Responsibilities:

The individual in this role must be able to understand and interpret identity and access management strategies and direction. Further, the person must be able to bring together key tenets of Information Security to the security cloud strategies and develop technical security solutions that properly align. The Architect will contribute to the overall effort of the security direction of Netskope.

Requirements:

• 15+ years of practical experience in the field of IT is required.
• 7+ years of direct Security Design and Engineering.
• Preferred: Hold architecture or design certification such as CISSP, CISM, CCIE Security, SANS or cloud architecture
• Knowledge of Cloud Security Alliance (CSA) best practices and guidelines
• Strong experience in Security Governance solutions architecture and integrations.
• Strong experience in Enterprise cryptography solutions such as PKI, Secrets Management, HSMs, and leading approaches in this space.
• Experience architecting solutions within Google GCP, Amazon Web Services (AWS) Microsoft Azure, and private cloud technologies that align with the providers above. Other cloud providers are a plus.
• Experience in using architecture methodologies such as SABSA, Zachman and/or TOGAF.
• Maintains Enterprise level Security EA Principles and Security Patterns.
• Experience working with cloud security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies.
• Strong experience on both server and client technologies security approaches.
• Strong experience in data governance and solutions in the data governance domain.
• Experience with Identity Governance and Access Management architectures and solutions.
• Strong experience in understanding the latest threats to organizations like Netskope and the leading countermeasures and capabilities to counter them.
• Excellent customer service and communication (oral / written) skills required.
• Strong critical thinking and analytical skills and ability to think “out of the box” required.
• Must be able to work independently or with a team, under minimum supervision.
• Consults to key customers and senior management on project design and development scope.
• Assists customer organizations with planning and implementing complex architecture solutions.
• Must have working knowledge and understanding of networking technologies such as LAN, WAN, TCP/IP, load balancers, firewalls and the trajectory of these technologies and the associated technologies.

Education:

• Bachelor’s degree/University degree or equivalent experience preferred

#LI-NS1