Principal Information Security Architect

Company: First American Financial Corp.
Location: Santa Ana
Posted on: February 24, 2021

Job Description:

Principal Information Security Architect Job Family: Information Technology Requisition Number: R018922 Work Location: Santa Ana , CA
Secondary Location: Annapolis, MD, US; Employment Category: Full Time - Regular Join our team! As a global leader in providing title insurance, settlement services and risk solutions for real estate transactions, First American (NYSE: FAF) is an ideal place to build your career. We have been entrusted with helping our customers achieve and protect their dream of homeownership since 1889. We believe that our people are the key to the company's continued success, and we invest in diverse talents and backgrounds and empower our teams to achieve more than they could anywhere else. First American has created an award-winning culture and has been named to the Fortune 100 Best Companies to Work For-- list for the fifth consecutive year and to more than 50 regional Best Places to Work lists. For more information, please visit www.careers.firstam.com Job Summary Principal Security Architect Summary This Principal Architect leads the design and development of innovative security architectures for protecting data deployed into different types of cloud, on-premise and hybrid systems. This position will directly contribute to the overall global enterprise architecture and lead the security vision and strategy around securing enterprise applications, built across all types (including Infrastructure, Platform, and Software as a Service (IaaS/PaaS/SaaS). Job Description The Principal Architect will serve as the central point of contact for other technology teams within First American for all matters related to cloud security. The successful candidate will partner with leaders across the business to develop and deliver solutions that support business strategies and protect First American's intellectual property and customer data globally. Responsibilities Include but not limited to: Design and develop security architectures for cloud, on-premise and hybrid systems. Possess a firm understanding of the offerings within both Amazon Web Services (AWS) and the Microsoft Azure platforms Based on business requirements, design and implement cloud-native architecture based on cloud security framework, standards and best practices Represent the Corporate Information Security Office's policies and standards in development and implementation of the overall global enterprise architecture Act as the ambassador and senior technical representative for Information Security while engaging with other senior technical leaders throughout First American in design and implementation of cloud, on-premise and hybrid implementations and solutions Work with Engineering, Infrastructure Services, and Application Development organizations to choose appropriate technology solutions and facilitates complete integration into First American's environment; develop standards in partnership with Engineering, Infrastructure Services, and Application Development Lead training and technical forums, serve as both a formal and informal mentor, and execute other initiatives designed to share knowledge across Security and Technology groups Identify, recommend, coordinate, and/or conduct informal/formal training sessions to deliver timely knowledge to support teams regarding technologies, processes or tools Develop and execute strategies to increase Cloud Security knowledge throughout the enterprise, as well as developing and mentoring more-junior security analysts and engineers Required Qualifications

• College degree or High School diploma/equivalent and 8 years related work experience, required
• 8-10 years of experience with Security Architect and/or Engineering
• 3-5 years of experience with Cloud platforms like Microsoft Azure, Amazon Web Services
• Experience architecting solutions within Microsoft Azure, Amazon Web Services (AWS) and other cloud providers
• Experience in CloudDevSecOps, Container Security, IAM patterns, WAF/CDN/DDoS services, security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies
• Experience in security architecture methodologies like SABSA, OSA, O-ESA, security framework and standards like NST CSF, ISO, PIC, SOC2, and best practices like CIS benchmarks, defense in depth
• Solid understanding of 8 security domains as it applies to cloud security in Azure, AWS and Oracle cloud is a must
• Experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes (secure software development (Application Security), data protection, cryptography, key management, identity and access management (IAM), network security) within SaaS, IaaS, PaaS, and other cloud environments
• Experience with secure software development (Application Security) within SaaS, IaaS, PaaS, and other cloud environments
• Experience with deployment orchestration, automation, and security configuration management preferred
• Experience working with cloud security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies
• Experience with enterprise applications (architecture, development, support, and troubleshooting)
• Experience performing threat modeling and design reviews to assess security implications and requirements for introduction of new technologies
• Experience representing technical viewpoints to diverse audiences and in making timely and prudent technical risk decisions
• Experience with enterprise architecture and working as part of a cross-functional team to implement solutions
• Strong interpersonal and communication skills; ability to work in a team environment
• Ability to work independently with minimal direction; self-starter/self-motivated
• Technical writing experience Preferred Qualifications Master's degree in a Computer Science or Engineering + 7 or more years of experience, preferred Cyber Security certifications like CISSP, CompTIA Security+, CISA First American invests in its employees' development and well-being, empowers them to provide superior customer service and encourages them to serve the communities where they live and work. First American is committed to diversity and inclusion. We are an equal opportunity employer. Returning users, access your profile or edit/update your resume. Careers // Principal Information Security Architect - R018922 First American Title Insurance Company makes no express or implied warranty respecting the information presented and assumes no responsibility for errors or omissions. First American, the eagle logo, firstam.com, and First American Title are registered trademarks or trademarks of First American Financial Corporation and/or its affiliates.

Keywords: First American Financial Corp., Santa Ana , Principal Information Security Architect, Education / Teaching , Santa Ana, California