Principal Cloud Security Architect

Lets do this. Lets change the world. In this vital role you will develop and implement the organizations information security strategy to protect data, systems, and networks from potential threats and designing and implementing the organizations security architecture, ensuring that all systems, applications, and networks are protected against threats. This role involves working closely with IT and development teams to integrate security into every aspect of the technology stack. This role involves coordinating architectural support for the Cloud Security domain, supporting the Functional and Enterprise Architectural Review process, handling risk, and ensuring compliance with relevant regulations and standards. The ideal candidate has strong leadership skills, deep knowledge of cybersecurity practices, and experience in handling large-scale security programs.

• Design and implement a comprehensive information security strategy aligned with the organizations business goals
• Develop and maintain the organizations security architecture, ensuring that it meets current and future security requirements
• Assess and select security technologies and tools that align with the organizations security strategy
• Own the information security team, providing guidance, support, and mentoring to ensure the efficiency of security operations
• Perform threat modeling and risk assessments to identify and mitigate potential security risks
• Review and approve configurations for systems, networks, and applications to ensure that they meet security standards
• Directly responsible for crafting, implementing and maintaining reusable architectural security design patterns that protect Amgen business systems
• Accountable as the Cloud Security Domain architect to establish domain reference architecture mapping security capabilities, process and technology
• Continuously assesses cloud security risk and threat landscape, identifies security control gaps and develops business technology strategies that materially addresses risk and reinforce departmental investments
• Handles and maintains current architectural plans, engineering blueprints and CDT reference architecture in system of record
• Accountable for leading, supporting, crafting, developing, testing, integrating and deploying security technologies and or capabilities including but not limited to Cloud Security Posture Management, Cloud Workload Protection, Web Application Security, Container scanning, Data Security Posture Management, Cloud Security standard methodologies
• Collaborates multi-functionally across infrastructure teams, end user support teams, security operations, vulnerability management, network security, data security, digital forensics, endpoint security, cloud security and application security throughout the SDLC to deliver secure and compliant systems
• Provides proactive recall and timely response support for cyber events and investigations
• Participates as domain authority in support of corporate cyber and InfoSec audit activities
• Responsible for leading the development and publication of Security Configuration Baseline (SCB) standards related to cloud operations
• Define, provide, and improve measurement and analysis on the assigned services including the use of appropriate applications and tools for reporting
• Develop or participate in the development of cases and presentations on information security technologies of interest to Amgen
• Advise project teams, application owners, and other Information Security teams on information security controls, policies and standards
• Serves as a functional collaborator with the Enterprise Architecture team to assess system designs and functionality against existing reusable patterns under the provisions of Amgen City Plan program
• Establish and maintain approved security patterns, methods and reusable elements to expedite solutions attestation and approval throughout SDLC
• Perform security design consulting in support of projects including participation in security architecture reviews as necessary
• Collaborate multi-functionally with analysts, engineers, data scientists to achieve continuous improvement in cloud security, compliance and resilience.
• Domestic and International travel up to 10%.What we expect of you

We are all different, yet we all use our unique contributions to serve patients.

Basic Qualifications:

Masters degree and 8 to 10 years of Information Systems and/or Computer Science experience OR

Bachelors degree and 10 to 14 Information Systems and/or Computer Science experience OR

Diploma and 14 to 18 years of Information Systems and/or Computer Science experience

Preferred Qualifications:

• Deep knowledge and understanding of Service Management strategy and operations, cybersecurity frameworks; cloud security processes, technologies, and standard methodologies
• Experience in risk management, incident response, and security governance
• Strong knowledge of security architecture frameworks and principles
• Solid understanding of common software and web application security vulnerabilities

• Experience with network security, endpoint protection, and incident response
• Proficiency in scripting and automation (e.g., Python, Bash) is a plus

Professional Certifications (please mention if the certification is preferred or mandatory for the role):

• CompTIA Security+ (Mandatory)
• CompTIA Network+(Mandatory)
• AWS Certified Security-0Specialty (Mandatory)
• CISSP (preferred)
• TOGAF (preferred)
• AWS Certified Solutions Developer (Preferred)
• Microsoft Certified: Azure Security Engineer (Preferred)
• Microsoft Certified: Cybersecurity Architect Expert (Preferred)
• Google Cloud Security Engineer (Preferred)
• Google Cloud Architect (Preferred)