Architect Security

Our vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own. We have a flexible work environment, and fluid career paths. We not only encourage but celebrate internal mobility. We also recognize the importance of purpose, well-being, and work-life balance. Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them.

Chart your own path and grow your career while helping more customers achieve financial freedom. Empower Yourself.

Job Title: Architect Security

Opportunity

Welcome to our blue team! As a Security Architect within our Security Architecture Team, you will help shape security innovation and play a key role in the evolution of our security posture.

The Work

You will work with the team to help develop and templatize our security architecture, perform security assessments, and review system designs using a risk-based, threat-modeling approach. Security Architects have the following core responsibilities:

• Conduct security reviews on infrastructure changes and project implementation plans
• Perform threat-modeling as required to substantiate the recommendations designs
• Collaborate with business technology stakeholders to design implement secure design patterns
• Create, maintain and document security architectures patterns to be used by technology teams
• Participate in the development maintenance of Security Standards Processes

Candidate

You are passionate, curious, and self-driven. You enjoy understanding and solving complex problems with incomplete information. You may not know everything, but you have a solid foundation and can untangle, self-learn, and identify creative ways to solve problems. Likewise, you should be extremely comfortable architecting secure cloud-based systems, and you should be able to convey security threats architectural requirements to both technical non-technical audiences.

Skills and Experience Baseline

• Experience designing building secure cloud-native solutions, especially in Amazon Web Services (AWS)
• Ability to balance risk mitigations business objectives
• Knowledge of Infrastructure-as-Code (IaC) principles experience reviewing infrastructure configurations/changes in this format (e.g., CloudFormation, Terraform, etc.)
• Ability to collaborate on reviews of technology designs changes
• Partner with technology architecture teams on threat modeling of key systems
• Strong technical foundations in modern application architectures related technologies (e.g., Containers, Kubernetes, RESTful/gRPC APIs)
• Understanding of CI/CD Secure Development processes tools (e.g., Jenkins, Git, etc.)
• Strong foundation in cybersecurity landscape, especially in identity access management, network access control and secure configuration management

Education

• Bachelor s degree in information technology, Computer Science, or related field.

Additional Skills Qualifications You May Have

• 5 + years of hands-on experience as a security practitioner, implementing a variety of solutions across multiple disciplines
• 2+ years of experience architecting solutions with a concentrated focus on security, simplicity scalability
• Strong AWS knowledge, bonus points for the AWS Solutions Architect Certification
• Experience with commercial and open-source security applications and technologies (e.g., malware prevention, SIEM, WAF, CASB)
• Scripting or automation experience using languages such as: Python, PowerShell, Ansible, Bash
• CISSP, GIAC and/or other related certification(s)

We are an equal opportunity employer with a commitment to diversity. All individuals, regardless of personal characteristics, are encouraged to apply. All qualified applicants will receive consideration for employment without regard to age, race, color, national origin, ancestry, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, religion, physical or mental disability, military or veteran status, genetic information, or any other status protected by applicable state or local law.