• Cybersecurity Architect

    Location US-IL-Chicago
    Job ID
    61242
    Function
    IT
  • Overview

    This Cybersecurity Architect position is an exciting opportunity for the right candidate to contribute to Zebra’s evolving software solutions and data services.  You will work directly with our engineers, architects, agile product teams and collectively ensure Zebra’s solutions stay as secure as possible.  You will conduct compliance audits, work directly with our partners and customer support teams, CISOs and others as needed.  You will align and architect security and data protection into our solutions in the cloud and on-premise.  Our solutions collect, land, aggregate data for mission critical IoT based solutions.  Solid experience in securing data lakes & services (APIs), architecting for data security, privacy and global protection is required.

     

    Frequently you will be exposed to evolving technology and solutions in multiple clouds.  Experience with Google (GCP), AWS, Azure and the associated security services and best practices is preferred.  Ability to work in evolving environments, POCs and evolving technology is required.  You will need to research, identify risks, recommend and deploy new technology and procedures as required to lower our security risks.

    Responsibilities

    • Facilitate and lead business discussions with cross functional teams at multiple levels to understand the solutions operating environment and quickly assess security and compliance needs.
    • Facilitate and lead Enterprise Software’s security efforts by participating in daily agile stand-ups and drive security best practices across the business unit.
    • Lead Enterprise Software’s application security efforts, such as ACL’s, policies, container firewall rules, IAST, SAST, DAST, security testing (e.g. fuzzing), application threat modelling, RASP, secure pipeline, container registry, etc.
    • Understand current and anticipated future regulatory environments and related implications to Enterprise Software’s architecture e.g. PCI, GDPR, HIPAA, Privacy, Sarbanes Oxley, etc.
    • Provide strategic consultation to assigned line-of-business (LOB) customers in defining or designing security into business processes, capabilities, and functions, as well as in researching, identifying and internally marketing & enabling security technologies to support customer requirements.
    • Seek ways to apply new security technology to, and reuse existing security technology in support of Enterprise Software’s business strategy; research and provide information on security trends and practices relevant to assigned LOB customers.
    • Using structured methodology, assess near-term to long-term security needs to establish Enterprise Software’s security priorities; consult with technical subject matter experts and develop alternative technical solutions; Identify options, risks, costs vs. benefits, and impact analysis in support of those solutions.
    • Work closely with Zebra’s corporate technology architects in designing & configuring security controls, monitoring tools and tracking mechanisms. Architect data security procedures and controls to be applied to our big data platforms, integration pipelines, customer facing applications and API services.
    • Complete quantitative and qualitative analysis of secure options, scenarios, and approaches created in support of Enterprise Software’s strategies, considering variables such as risk, time, cost, impact, and benefits resulting in documented strategies, standards, and designs for components and architectures.
    • Work with corporate teams, 3rd party teams and contractors to ensure security requirements are enforced and delivered within compliance.
    • Establish Enterprise Software procedures and controls needed to enforce Zebra’s corporate security policies and compliance.
    • Conduct customer security reviews with sales executives, legal teams and other technical and business leads.

    Qualifications

    Education: Bachelor's Degree required. Advanced Degree preferred.
    Work Experience: 12+ years of experience

     

    • Experience in at least two disciplines in a global distributed, service oriented architecture or multitier environment, including technical architecture, data security, network architecture, application developments, CI/CD and SRE operations.
    • Experience in Google Cloud (GCP) components & associated security services, architecture a plus.
    • Demonstrated and in-depth experience within multiple technical domains including, but not limited to, networking, systems engineering, storage systems, cloud data platforms, end user portals, API management (APIgee), DevSecOps & operations management.
    • Demonstrated understanding of defense in depth concepts and supporting security technologies, including but not limited to, identity management, federated identity services, access control, endpoint protection, firewalls, IDS/IPS, SIEM, application security controls, and public key infrastructure
    • Exposure to multiple, diverse technologies and processing environments, including but not limited to Big Query/PaaS data solutions, big data environments, cloud infrastructure and multitenant cloud-based systems.
    • Excellent team player with a demonstrated ability to collaborate across enterprise Engineering and Product teams
    • Strong competency in use of information security frameworks such as CIS, ISO, NIST and other global standards
    • Architect data security solutions in compliance with PII, PHI, GDPR and other sensitive and protected data requirements.
    • Demonstrated ability to establish and maintain a high level of customer trust and confidence.
    • Comprehensive knowledge of the security industry and information technologies at a high and detailed level

     

    Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
    Share with your network

    Need help finding the right job?

    We can recommend jobs specifically for you! Click here to Connect with us!