Senior security architect at utility Entergy who oversees cloud security solutions across strategy, design, implementation, and operations, embedding security requirements into projects while ensuring compliance with regulations like NERC CIP and NIST. Hybrid role, filled in The Woodlands TX, New Orleans LA, Jackson MS, or Little Rock AR.
Compensation
Not disclosed
Location
Not listed
Work setup
Hybrid
Seniority
Senior
Employment
Full time
Experience
3+ years
Category
Security
Posted
Skills
accessibility
api
aws
azure
cism
cissp
cloud
cloud-native
cloud-security
cybersecurity
docker
gcp
hipaa
iam
ios
iso-27001
itil
kubernetes
network-security
networking
nist
owasp
penetration-testing
perl
powershell
python
secure-coding
siem
threat-modeling
togaf
vulnerability-management
Must have
5+ years (Sr) or 3+ years (Architect) of full-time experience leading Cloud Security roles delivering security on cloud native, distributed architectural solutions in complex environments
Familiarity with predominant public cloud providers (AWS, Azure, GCP)
Understanding of industry trends in cloud technologies for public, private and hybrid cloud deployments
One or more years in a complex and highly regulated industry (e.g., utilities, financial services, healthcare)
Experience working with outsourced teams
Organizational and time management skills
Experience working in partnership with colleagues throughout the enterprise
Familiarity with technologies commonly utilized within an enterprise IT and OT environment
Strong knowledge of multiple information security domains with emphasis in Cloud services (AWS, Azure, O365)
Knowledge of security ramifications of energy related regulations (SOX, HIPAA, NERC CIP, FERC, NRC Nuclear Cyber 10 CFR 73.54)
Knowledge of security, risk, and control frameworks such as ISO 27001/27002, SANS-CAG, NIST, FISMA, COBIT, COSO, ITIL
Familiarity with architecture frameworks such as TOGAF, OWASP, Open Security Architecture, NIST Cloud Computing Reference Architecture
Able to design and develop reference architectures
Able to design and develop an API based services layer for consistent integration with security systems
Strong writing and analytic ability
Strong ability to communicate across the enterprise concisely and effectively
Nice to have
Experience defining security standards and reference architectures for enterprise cloud systems
Master's degree
ISACA or ISC2 certification such as CISSP, CISM, CISA
OSCP certification
Relevant vendor credentials from AWS, Microsoft Azure, etc.
Full description
Job Title: Cybersecurity Solution Architect, Sr
PS Job Title: CS Architect, Sr
Work Place Flexibility: Hybrid
Legal Entity: Entergy Services, LLC
*THIS IS A HYBRID POSITION (Remote & Onsite)*
*This position will be filled as a Security Architect or Security Architect Sr depending on qualifications and experience of the candidate*
*This position may be filled in The Woodlands TX, New Orleans LA, Jackson MS, or Little Rock AR. Other locations within Entergy’s service territory may be considered*
Job Summary
The Sr. Security Architect utilizes their knowledge of IT and information security engineering to lead and/or participate in the development of assigned projects or solutions. The Sr. Security Architect focuses on implementing security requirements for assigned projects and solutions while maintaining compliance with internal and externals policies and regulations.
The Sr. Security Architect works closely with the Enterprise Security Architect to ensure projects and solutions are consistent with Entergy’s Information Security strategy and roadmap. The Sr. Security Architect provides clear and concise direction to project stakeholders and acts as the “face” of information security for those teams.
Key Responsibilities
Oversee cloud security solutions across lifecycle strategy, design, implementation, and operations
Participate, lead, and jointly deliver security evaluation reports on cloud providers (Azure, AWS, GCP), cloud native platforms (PCF, Docker, Kubernetes, etc.), and Software as a Service solutions
Establish security requirements for cloud-based solutions by evaluating business strategies and requirements, researching cloud infrastructure security standards such as NIST CSF and NERC CIP
Provide domain expertise in both public and private cloud and enterprise technology
Identify and deliver appropriate controls based on industry standards (e.g. CCM) to drive cloud security solutions framework based on business risk and cloud native threats
Continually evaluate new threats in the cloud, to identify the impact on IT and Business to develop and implement security controls
Provide recommendations for improvement and risk reduction by assessing clients’ cloud security posture; and act as a change agent with customer organizations to oversee the vulnerability improvements with our clients’ existing IT staff as well as 3rd party vendors support our clients (most often managed IT service providers)
Cybersecurity Solution Architect, Sr at Entergy — aijobsearch
Available to travel (up to 25%)
Bachelor's degree in computer science, cyber security, information systems, engineering or related discipline, or equivalent work experience
Utilize Information Security reference architectures to develop secure solutions and designs for projects
Provide input to policies, procedures, standards, processes, and templates that are consistent with the Information Security strategy and roadmap
Participate in security and non-security projects to ensure that security requirements are defined and implemented
Perform assessments and threat modeling of existing and emerging technologies to ensure they meet Entergy security and compliance requirements
Evangelize and advocate for information security with stakeholders
Monitor emerging trends in Information Security and technology and make or suggest changes to Entergy’s security posture as necessary
Experience needed
Security Architect Sr: 5+ years of full-time dedicated experience leading Cloud Security focused roles on delivering security on cloud native, distributed architectural solutions in complex environments
Security Architect: 3+ years of full-time dedicated experience leading Cloud Security focused roles on delivering security on cloud native, distributed architectural solutions in complex environments
Experience in defining security standards and reference architectures used to guide technical resources in secure system implementation and configuration for enterprise cloud systems and consumption of public cloud is a plus
Familiarity with predominant public cloud providers (AWS, Azure, GCP)
Understanding of Industry trends in cloud technologies for public, private and hybrid cloud deployments
One or more years in a complex and highly regulated industry (e.g., utilities, financial services, healthcare, etc.)
Experience working with outsourced teams
Organizational and time management skills
Experience in working in partnership with colleagues throughout the enterprise
Minimum Knowledge, Skills, and Abilities needed
Familiarity with technologies commonly utilized within an enterprise IT and OT environment
Strong knowledge of multiple information security domains with an emphasis in Cloud services (AWS, Azure, O365, etc.)
Operating systems (*nix, Windows, IOS, etc.)
Networking and network security
APIs
Secure coding/application security
Vulnerability Management
SIEM
Identity and Access Management
Penetration testing
Scripting (Python, PowerShell, Perl, etc.)
Security process and control development
Endpoint protection technology
OT systems and protocols
Smart Grid technology
Some knowledge of IT Security regulations and guidance such as NIST, FISMA & ISO27001
Familiarity with The Open Group Architecture Framework (TOGAF), Open Web Application Security Project (OWASP), Open Security Architecture, National Institute of Standards and Technology (NIST) Cloud Computing Reference Architecture, or other architecture frameworks
Able to be hands-on with technical engineering and process management skills and the ability to advocate positive transformation within the broader information technology organization
Able to design & develop reference architectures
Able to design and develop an API based services layer for consistent integration with the security systems
Knowledge of security ramifications of energy related regulations (SOX, HIPAA, NERC CIP, FERC, and NRC Nuclear Cyber (10 CFR 73.54)
Knowledge of security, risk, and control frameworks and standards such as ISO 27001 and 27002, SANS-CAG, NIST, FISMA, COBIT, COSO and ITIL
Strong writing and analytic ability
Strong ability to communicate across the enterprise concisely and effectively
Available to travel
Self-motivated, with the ability to manage and follow up on multiple tasks simultaneously
Capable of meeting deadlines
Education needed
Bachelor’s degree in computer science, cyber security, information systems, engineering or a related discipline or equivalent work experience. Master’s degree is a plus.
Certifications
ISACA or ISC2 certification, such as CISSP, CISM, CISA is a plus
OSCP is a plus
Relevant vendor credentials offered by companies such as Amazon AWS, Microsoft Azure, etc. are a plus
#LI-DG1 #LI-HYBRIDPrimary Location: Texas-The Woodlands Texas : Woodlands || Arkansas : Little Rock || Louisiana : New Orleans || Mississippi : Jackson Job Function: Corporate FLSA Status: Professional Relocation Option:Union description/code: NON BARGAINING UNIT Number of Openings: 1 Req ID: 124691 PS Job Title: CS Architect, Sr Travel Percentage:Up to 25%
An Equal Opportunity Employer, Minority/Female/Disability/Vets. Please click here to view the EEO page, or see statements below.
EEO Statement: The Entergy System of Companies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws. The Entergy System of Companies complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment including, but not limited to, recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.
The Entergy System of Companies expressly prohibits any form of unlawful employee harassment based on race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of the Entergy System of Company employees to perform their expected job duties is absolutely not tolerated.
Accessibility: Entergy provides reasonable accommodations for online applicants. Requests for a reasonable accommodation may be made orally or in writing by an applicant, employee, or third party on his or her behalf. If you are an individual with a disability and you are in need of an accommodation for the recruiting process please click here and provide your name, contact number, the accommodation requested and the requisition number that you are requesting the accommodation for. Employee Services will contact you regarding your request.
Additional Responsibilities: As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.
Know Your Rights: Workplace Discrimination is Illegal
The non-confidential portions of the affirmative action program for individuals with disabilities and protected veterans shall be available for inspection upon request by any employee or applicant for employment. Please contact HRCompliance@entergy.com to schedule a time to review the affirmative action plan during regular office hours.
WORKING CONDITIONS:
As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.
Please note: Authorization to work in the United States is a precondition to employment in this position. Entergy will not sponsor candidates for work visas for this position.