Job Description

Introduction
At IBM, work is more than a job - it's a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you\'ve never thought possible. Are you ready to lead in this new era of technology and solve some of the world's most challenging problems? If so, lets talk.Your Role and Responsibilities
Security architects work to understand strategic priorities, business requirements, technical requirements, issues identification, issue remediation and are called on to develop and articulate robust and innovative security solutions to address these all. Our Security Architects provide subject matter expertise in creating, implementing, and maintaining enterprise security programs.A Security Architect is a subject matter expert in DevSecOps and/or system administration. The architect fills a critical role in the overall success of a project and are the primary source of security solution design and development. The Security Architect will work in conjunction with larger teams to deliver amazing technology solutions that delivers a secure experience and helps to build the Hybrid Cloud functionality.The Security Architect is also a subject matter expert in regulatory bodies cloud requirements, reviewing newly introduced regulations that impact Cloud environments worldwide. The architect must also be able to advise and, in some cases, prototype how to become compliant with these emerging security standards from differing industry regulatory bodies and national regulatory works. Experience with FedRAMP programs and certification a plus.The Security Architect reviews the Security of Cloud services keeping in mind Data Security, Network Security, Infrastructure Security and Access Control.The Security Architect Incorporates Security and Privacy by Design in a bottom up fashion in the Cloud Services.The Security architect, depending on the area of work, perform evaluation and selection of the components, design of hardware, software, process and service components of the solution, assurance of deployment architectures, and guide secure engineering practices in development.

• Drive and maintain security throughout the entire Software Development Life Cycle of Services.
• Oversee Application Security Testing including Static and Dynamic Code scans (SAST/DAST), Vulnerability Assessment and Penetration Testing (VAPT) for completeness.
• Conduct Security assessments and threat modelling of Services

• 5+ years of experiences in building, deploying and managing large scale services / platforms for Cloud Platforms like AWS, Azure, IBM Cloud or Google Cloud.
• Delivering micro services at scale; designing micro services solutions
• Good understanding of real time streaming analytics and batch data processing architectures.
• Familiarity with distributed architecture, event-driven architecture.
• Python, Go Lang experience (Can also have Java, Scala, Rust)
• Container orchestration, performance and security (Kubernetes / Docker)
• DevSecOps practices
• Experience with one or more of the following: NoSQL Databases (eg: Cassandra, Mongo), Columnar Databases (eg RedShift, Snowflake), Search Engines (eg Elastic Search), Spark, Hadoop.
• Sound understanding of data science concepts, model development & performance tuning processes as well as coding, version control and CI/CD best practices
• 2+ years UI Development experience using React (Can also have angular)
• Scripting languages like Python, JavaScript, shell
• Release Engineering (Git Branching, versioning, tagging) and experience with Agile software development
• CI/CD tooling (Preferred ArgoCD, Tekton)
• 1+ years experience with one or more of these Monitoring tools: Sysdig, Zabbix, Grafana, Prometheus, ELK, etc..
• Experience with one or more automation and configuration management tools/solutions: Ansible, Terraform, Salt, Chef, python, bash, puppet, Rundeck, etc.
• Working knowledge of Compute, Network, Storage and Virtualization technologies
• Excellent verbal and written communication skills
• Highly responsible, motivated, follow / establish development practices and able to work with little direction

• CORE: Linux system administration experience 6+ years.
• CORE: Linux container experience, Kubernetes, Docker, any LXC based technologies 4+ years
• CORE: 3+ years with any Regulatory bodies or regulatory frameworks ISO27001, FinRA/FFIEC, HiTrust, HIPAA, NIST 800-53, GDPR, FedRAMP, PCI-DSS, and EBA
• CORE: Applied experience with application security modeling to include threat modeling and identification of attack vectors - 3+ years
• CORE: Red Team (White hat) pen tester team experience - 4+ years

• CORE: Applied experience with application security & threat modeling to include threat modeling and identification of attack vectors - 2+ years
• CORE: Red Team (White hat) pen tester team experience - 2+ years
• CORE: Web application development experience with Javascript, Java (J2EE), Golang - 2+ years (combined across these languages)
• CORE: Web API experience, writing and interacting with REST or SOAP API interfaces - 3+ years
• CORE: Security Architecture, Design and Review of Architecture, threat modelling 6+Years

• OPTIONAL: Patching and benchmarking (CIS L1 for example) automation via in-house scripting or enterprise tooling
• OPTIONAL: Secure Image (CIS images for example) use and automation, for example secure boot, network boot from images, image deployment and refresh, etc.
• OPTIONAL: years of Software defined Networking experience, Openflow, ONUS, or any of the vendor implementations (Calico, Beacon, OpenDaylight, Open vSwitch, etc)
• OPTIONAL: Experience as an admin or superuser on Security Tools such as: SIEMs, SOAR platforms, vulnerability scanning, DAST, SAST, Privileged ID mgmt., AuthZ solutions, enterprise logging analysis, EDR, any zero trust tools (otherwise known as trusted execution or application whitelisting),
• OPTIONAL: experience with provisioning & provision automation in AWS, Azure, IBM Cloud, Oracle, or Google Cloud (experience can be with compute nodes, storage, database, any of the as a Service offerings, integration with on-prem systems for Hybrid cloud, or bare metal systems)
• OPTIONAL: Experience with secure coding practices and testing to prevent and avoid attacks, such as, http state handling, XSS, OWASP Top 10, ZAP, etc.
• OPTIONAL: Attack vector/pen testing tools experience (Kali, Cobalt Strike, Nmap, BurpSuite, etc.)
• OPTIONAL: Strong experience with scripting languages such as Python, Ruby, Bash, Typescript, etc.
• OPTIONAL: Web developer front end experience REACT, Angular, bootstrap, or similar
• OPTIONAL: Regulatory bodies or regulatory frameworks ISO27001, FinRA/FFIEC, HiTrust, HIPAA, NIST 800-53, GDPR, FedRAMP, PCI-DSS, and EBA

IBM