Cloud Security Architect - Director

Sumitomo Mitsui Trust Bank Limited New York Branch

Jul 15, 2024

Applications are closed

Job
Full-time
Senior & Expert Level
Software Engineering
New York

Requirements

Role Objectives:
Implement the bank's cybersecurity strategy by architecting, engineering, deploying, and operating technical security controls as they related to virtual machines, storage, key vault, database services infrastructures in the Cloud.
Engineer and operate solutions that protect Cloud resources from malicious internal and external threats by providing additional preventative, detective, and hardening controls and by enabling Real Time endpoint detection and response capabilities.
You will automate security hardening tasks in Cloud to ensure gaps are identified and addressed quickly with our standards.
Performs as the Subject Matter expert focused on multiple technologies within the Security domains (Security Engineering, IAM, Cloud Security, Data Security, Network Security, Encryption, Privileged Access Management, Federation etc.).
Establishes a strategic security architecture vision, including standards and frameworks for medium to large enterprises.
Review and analysis of security logs from a wide variety of sources.
Coordinate and perform security audits and vulnerability assessments to assess internal security procedures and compliance requirements.
Work with relevant internal IT Application, Infrastructure, Network and Support teams to ensure that security controls are implemented at all significant layers, test those controls and perform gap analysis to find areas of improvement.
Perform testing to evaluate new products for network and system security controls.
Participate in the development of the security roadmap and communicate the Technology Security vision to senior management and technical departments.
Coordinates with project team the implementation, upgrade and maintenance of security solutions.
Qualifications and Skills:
Critical Job Knowledge and Core Competencies/Skills:
7+ Years of hands-on security architecture, implementation and design experience required, designing globally scalable Cloud security solutions.
Cloud Security and hands on knowledge with Azure and AWS is highly desired.
Experience delivering large and complex programs - where you own the business or technical vision, collaborate with large cross-functional teams, secure commitments on deliverables and unblock teams to land business impact
Strong knowledge of enterprise Information Security pillars (Perimeter security, Identity Management and Governance, Privileged Account Management, Compliance, Penetration testing, Encryption, Cloud Security, Incident Response, Vulnerability Management)
Excellent written and verbal communication skills; strong attention to detail.
Strong executive reporting and narrative based presentation skills.
Thirst for knowledge and constantly driven to stay current with evolving threat landscapes.
Hands-on experience with some of the following:
Docker and Kubernetes
Developing & securing Serverless applications
Security administration in AWS/GCP/Azure
CI/CD and DevOps Tooling (Git, Jenkins, DevOps)
Infrastructure as Code Tools (Terraform, CloudFormation)
Cloud native security related tools (Azure Sentinel, AWS Guard Duty, AWS WAF, GCP Security Center, WIZ.IO, CASB)
Cloud Network (VPC) engineering
The Nice to Haves:
Azure Certifications – Solutions Architect, AWS Security Specialty
GCP Certifications – Associate Cloud Engineer, Professional Security Engineer
Security Engineer Certifications – CISSP, CompTIA Security+
Certifications in related areas (e.g. SANS, OSCP, CEH) are a plus

Responsibilities

Role Description:
The Director of Cloud Security Architecture will ensure bank’s cloud infrastructures are securely architected, configured, deployed in accordance with the approved polices and standards by leveraging industry best practices and automation. You will be expected to broaden and sharpen our capability to manage the incoming security architecture needs while rapidly surfacing, driving down, and reporting on cloud security issues across our AWS, GCP, and Azure environments.
This role is responsible for identifying secure cloud architecture patterns, where appropriate automate deployments using IaC and manage security projects. This position requires participation in technical research and development to enable continuous innovation for Cyber Security and Information Risk department. Acts as a subject matter expert who utilizes his/her Cloud Security Engineering expertise to resolve complex problems in consideration of established policies, guidelines, or processes.
Role Objectives:
Implement the bank's cybersecurity strategy by architecting, engineering, deploying, and operating technical security controls as they related to virtual machines, storage, key vault, database services infrastructures in the Cloud.
Engineer and operate solutions that protect Cloud resources from malicious internal and external threats by providing additional preventative, detective, and hardening controls and by enabling Real Time endpoint detection and response capabilities.
You will automate security hardening tasks in Cloud to ensure gaps are identified and addressed quickly with our standards.
Performs as the Subject Matter expert focused on multiple technologies within the Security domains (Security Engineering, IAM, Cloud Security, Data Security, Network Security, Encryption, Privileged Access Management, Federation etc.).
Establishes a strategic security architecture vision, including standards and frameworks for medium to large enterprises.
Review and analysis of security logs from a wide variety of sources.
Coordinate and perform security audits and vulnerability assessments to assess internal security procedures and compliance requirements.
Work with relevant internal IT Application, Infrastructure, Network and Support teams to ensure that security controls are implemented at all significant layers, test those controls and perform gap analysis to find areas of improvement.
Perform testing to evaluate new products for network and system security controls.
Participate in the development of the security roadmap and communicate the Technology Security vision to senior management and technical departments.
Coordinates with project team the implementation, upgrade and maintenance of security solutions.

FAQs

What is the job title and main responsibility of this position?

The job title is Cloud Security Architect - Director. The main responsibility is to ensure the bank's cloud infrastructures are securely architected, configured, and deployed in accordance with approved policies and standards while leveraging industry best practices and automation.

What is the expected salary range for this role?

The anticipated salary range for this role is between $203,000.00 and $230,000.00, based on individual qualifications, experience, and market analysis at the time of hire.

What are the key objectives of the Cloud Security Architect - Director role?

Key objectives include implementing the bank's cybersecurity strategy, engineering and operating solutions to protect cloud resources, automating security hardening tasks, establishing a strategic security architecture vision, performing security audits and vulnerability assessments, and coordinating with project teams for the implementation and maintenance of security solutions.

What qualifications are required for this position?

Candidates should have 7+ years of hands-on security architecture experience, particularly in designing globally scalable cloud security solutions. Additionally, familiarity with Azure and AWS, strong knowledge of enterprise Information Security pillars, and excellent communication skills are essential.

What hands-on experience is preferred for applicants?

Preferred hands-on experience includes Docker and Kubernetes, developing and securing serverless applications, security administration in AWS/GCP/Azure, CI/CD and DevOps tooling (e.g., Git, Jenkins), Infrastructure as Code tools (e.g., Terraform, CloudFormation), and cloud-native security tools (e.g., Azure Sentinel, AWS Guard Duty).

Are there any certifications that would be advantageous for candidates?

Yes, advantageous certifications include Azure Solutions Architect, AWS Security Specialty, GCP Associate Cloud Engineer, Professional Security Engineer, CISSP, CompTIA Security+, and other related certifications like SANS, OSCP, or CEH.

What is the work model at SMBC for this position?

SMBC operates under a hybrid workforce model, allowing employees to work from home as well as from SMBC offices. Employees are required to live within a reasonable commuting distance of their office location.

How does SMBC demonstrate its commitment to diversity and inclusion?

SMBC fosters a culture of diversity and inclusion by holding leaders accountable for creating an inclusive environment, practicing equity in recruiting, developing, and promoting diverse talent across the organization.

What type of background checks or assessments can candidates expect?

While the job description does not explicitly mention background checks or assessments, candidates should be prepared for relevant security audits and compliance assessments given the nature of the role.

How can candidates request reasonable accommodations during the application process?

Candidates in need of reasonable accommodations during the application process can contact SMBC at accommodations@smbcgroup.com for support.

Sumitomo Mitsui Trust Bank Limited New York Branch

Finance

Industry

201-500

Employees

1925

Founded Year

Mission & Purpose

Sumitomo Mitsui Trust Bank, Limited (SuMi TRUST) was established through the merger of The Sumitomo Trust and Banking Co., Ltd. with Chuo Mitsui Trust and Banking, Ltd. and Chuo Mitsui Asset Trust and Banking Company, Ltd. on April 1, 2012. SuMi TRUST is Japan’s largest trust bank, with AUM of more than $800 Billion USD. SuMi TRUST provides an assortment of financial solutions and manages a broad spectrum of financial products across its global branches. The SuMi TRUST NY Branch manages a $35 Billion USD portfolio of corporate debt investments in the United States, with an emphasis on stable income generation, with decades of proven business success. Our areas of expertise include leveraged loans, CLOs, middle-markets, corporate bonds and project financing. SuMi TRUST continues to strive towards excellence and future growth with dedication to our employees and customers.