信息安全架构师
Information Security Architect
职位描述
职位描述
网络安全部架构师将设计并构建我们环境所依赖的网络安全架构，从防火墙和网络分段设计到云网络架构，并在实施过程中与工程团队保持紧密合作，而不是交付设计后就不再跟进。
网络安全部架构师职位位于首席信息安全官办公室，向安全架构与工程（SA&E）总监汇报。
核心职责
· 从零开始设计网络安全架构：防火墙策略和配置、网络分段、零信任访问设计，以及在微软Azure中的云网络架构。
· 全程主导技术迁移：评估当前环境，设计目标状态，构建配置，并管理切换过程。
· 在每个他们设计的项目中，与工程团队直接合作，进行构建和实施阶段的工作，当工程团队遇到设计未考虑到的问题时，能够实时调整设计。这个角色应弥合架构与工程之间的差距，而不是只站在其中一方。
· 审查现有的网络安全架构，识别差距，并设计补救方案，包括解决遗留配置中的技术债务。
· 评估、规划并估算交付大型项目和计划的安全架构组件所需的工作量和工时。
· 作为工程、IT和业务合作伙伴在网络安全设计问题上的技术专家和可信赖顾问。
· 以概念性和物理形式记录和绘制架构，包括底层配置，而不仅仅是高层图示。
· 处理分配的请求安全架构（RSA）工单及相关工作流程。
· 跟踪新兴的网络安全技术和威胁，并根据需要将其纳入架构中。
其他职责
· 执行其他指派的任务。
技能与能力
· 展现出能够处理定义不明确的问题，独立完成调研工作，并产出可实施的设计，而不仅仅是概念性的建议。
· 对网络技术有深入的实践知识：协议、设计概念、分段和访问控制。
· 对安全技术有深入的实践知识：
查看英文原文
Job Seekers can review the Job Applicant Privacy Policy by clicking here.
Job Description:
Job Description
The Network Security Architect will design and build the network security architecture our environment runs on, from firewall and segmentation design through cloud network architecture, and will stay engaged through implementation alongside engineering, not hand off a design and move on.
The Network Security Architect role sits within the Chief Information Security Officer Office, reporting to the Director of Security Architecture and Engineering (SA&E).
Essential Functions
· Designs network security architecture from the ground up: firewall policy and configuration, network segmentation, Zero Trust access design, and cloud network architecture in Microsoft Azure.
· Leads technical migrations end to end: assesses the current environment, designs the target state, builds the configuration, and manages the cutover.
· Works directly alongside engineering through the build and implementation phase of every project they design, adjusting the design in real time when engineering encounters something the design did not account for. This role is expected to close the gap between architecture and engineering, not operate on one side of it.
· Reviews existing network security architecture, identifies gaps, and designs the remediation, including hands on work to resolve technical debt in legacy configurations.
· Assesses, scopes, and estimates the work and hours required to deliver security architecture components of larger projects and programs.
· Serves as the technical expert and trusted advisor to engineering, IT, and business partners on network security design questions.
· Documents and diagrams architecture in both conceptual and physical form, including the underlying configuration, not just high level diagrams.
· Works assigned Request Security Architecture (RSA) tickets and related efforts in ServiceNow.
· Stays current on emerging network security technologies and threats and incorporates them into architecture as needed.
Additional Responsibilities
· Performs other duties as assigned.
Skills and Abilities
· Demonstrated ability to take a loosely defined problem, perform the discovery work independently, and produce an implementable design, not just a conceptual recommendation.
· Advanced, hands on knowledge of network technologies: protocols, design concepts, segmentation, and access control.
· Advanced, hands on knowledge of security technologies: encryption, data protection, access privilege design.
· Direct configuration experience with firewall platforms, not solely policy or diagram level experience.
· Comfortable working side by side with engineers through build and cutover, including off hours implementation windows when required.
· Strong communication skills, able to explain technical design decisions clearly to both engineers and non technical stakeholders.
Qualifications
- Bachelor's degree required Computer Science, Information Security, or related field
- Seven (7) years or more Experience in an Information Security Architect role required
- Seven (7) years or more Experience with regulatory compliance and information security frameworks (NIST 800/CSF, ISO 27001, COBIT, etc.) required
- Network technologies including protocols, design concepts, and access control advanced required
- Security technologies including encryption, data protection, access privileges advanced required
- Knowledge of Microsoft Windows and Linux systems intermediate required
- Knowledge of both regular expressions (regex) and JSON intermediate required
- Other Information Security Certification (CISSP, GIAC, etc.)
- Experience using APIs
- Experience with CloudFormation, Terraform, Azure Resource Manager, or GCP Cloud Deployment Manager Templates
- In-depth experience in one or more of the following CSP - Microsoft Azure, AWS, and GCP installation configuration and administration of security features and services
- Expertise in architecting and working in a DevSecOps environment
- Security skills should include areas such as access control, runtime defense /anti-malware, and vulnerability management and etc.
- Experience working with internal business customers, architecting, deploying, configuring, and troubleshooting infrastructure security products
- One or more Palo Alto Network certifications required such as – PCNSA, PCNSE, PCCSE, PCSAE.
Travel
0-10%
DOT Regulated
None
Job Category
Information SecurityOur Culture & Commitment:
At Ryder, you’re trusted to make an impact—while enjoying room to grow and having a voice that’s heard. Our culture is built on respect, collaboration, and shared pride in doing great work rooted in innovation and safety.
Your Voice. Your Success. The Future We Build Together.
Compensation Information:
The compensation offered to a candidate may be influenced by a variety of factors, including the candidate’s relevant experience; education, including relevant degrees or certifications; work location; market data/ranges; internal equity; internal salary ranges; etc. The position may also be eligible to receive an annual bonus, commission, and/or long-term incentive plan based on the level and/or type. Compensation ranges for the position are below:
Pay Type:
SalariedMinimum Pay Range:
$140,000.00Maximum Pay Range:
$150,000.00Benefits Information:
For all Full-time positions only: Ryder offers comprehensive health and welfare benefits, to include medical, prescription, dental, vision, life insurance and disability insurance options, as well as paid time off for vacation, illness, bereavement, family and parental leave, and a tax-advantaged 401(k) retirement savings plan.
For more information about benefits, click here to download the comprehensive benefits summary.
Ryder is proud to be an Equal Opportunity Employer and Drug Free workplace.
All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, among other things, or status as a qualified individual with disability.
Important Note:
Some positions require additional screening that may include employment and education verification; motor vehicle records check and a road test; and/or badging or background requirements of the customer to which you are assigned.
Security Notice for Applicants:
Ryder will only communicate with an applicant directly from a [@ryder.com] email address and will never conduct an interview online through a chat type forum, messaging app (such as WhatsApp or Telegram), or via an online questionnaire. During an interview, Ryder will never ask for any form of payment or banking details and will never solicit personal information outside of the formal submitted application through .
Should you have any questions regarding the application process or to verify the legitimacy of an interview or Ryder representative, please contact Ryder at .
Current Employees:
If you are a current employee at Ryder, please click here to log in to Workday to apply using the internal application process.
Job Seekers can review the Job Applicant Privacy Policy by clicking here.
Originally posted on Himalayas