Security Architect CyberArk Secrets Management

Key skills:

• Security architecture
• CyberArk preferred, Hashicorp Vault will be considered
• Secrets Management
• AWS
• PKI Architecture

No Certifications are required.  Broad knowledge of secrets management solutions, such as Hashicorp Vault, Azure Key Vault, Bravura, AWS KMS, etc

We are seeking a highly experienced Security Architect for a Contract to Hire role, with a focus on PKI architecture and secrets management. The ideal candidate will have at least 7 years of experience in security architecture, with a strong background in infrastructure and application development architecture.

Key Responsibilities:

Design and implement PKI architecture, including certificate authority (CA) infrastructure, certificate lifecycle management, and cryptographic key management.

Develop and maintain secrets management solutions, with a focus on CyberArk and AWS Key Management Service (KMS).

Collaborate closely with infrastructure teams, application development teams, and business stakeholders to ensure security requirements are integrated throughout the development lifecycle.

Provide guidance and expertise on security best practices, standards, and frameworks, such as NIST, ISO, and CIS.

Conduct security assessments and audits, identifying vulnerabilities and recommending remediation strategies.

Implement and maintain data services architecture, ensuring data confidentiality, integrity, and availability across the organization.

Communicate effectively with business stakeholders, translating technical concepts into business-friendly language and facilitating discussions on security risks and requirements.

Stay abreast of emerging security threats and technologies, evaluating their potential impact on the organization and recommending appropriate mitigation strategies.

Qualifications:

Bachelor's degree in Computer Science, Information Security, or related field.

Minimum of 7 years of experience in security architecture, with a focus on PKI and secrets management.

Strong understanding of infrastructure and application development architecture principles.

Excellent communication skills, with the ability to interact effectively with technical and non-technical stakeholders.

Security certifications such as CISSP, CISM, or CISA are a plus.

Experience with CyberArk required and AWS services.

Knowledge of data services architecture, including database encryption, data masking, and data loss prevention (DLP) solutions.

Familiarity with security compliance requirements and frameworks, such as GDPR, HIPAA, and PCI DSS.