Security Architect
Personal Capital
Security Architect
Job ID R.0050667 Date posted 02/03/2025 Worker type Regular Workplace flexibility Remote - NationwideOur vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own. We have a flexible work environment, and fluid career paths. We not only encourage but celebrate internal mobility. We also recognize the importance of purpose, well-being, and work-life balance. Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them.
Chart your own path and grow your career while helping more customers achieve financial freedom. Empower Yourself.
As a Security Architect, you will drive security innovation and play a key role in the definition, maintenance evolution and advocacy of the security posture. You'll work with a team of Architects to craft secure design patterns, perform security assessments, and review system designs using a risk-based, threat-modeling approach.
What you will do:
- Partner with business and technology teams to define security designs that meet security requirements and enable business objectives
- Create, maintain and document security architectures & design patterns to be used by technology teams
- Develop relationships, repeatable processes, and resources to usher security champions in the company
- Perform threat-modeling as required to substantiate the recommendations & designs
- Participate in the development and maintenance of security policy, standards & reference materials
- Review and contribute to infrastructure-as-code representations of architecture changes and designs
What you will bring:
- A minimum of 8-10 years of experience in information security and/or IT risk management
- Extensive experience designing & building secure cloud-native solutions, especially in Amazon Web Services (AWS)
- Strong foundation in cybersecurity landscape, especially in identity & access management, network access control and secure configuration management
- Knowledge of Infrastructure-as-Code (IaC) principles & experience reviewing infrastructure configurations/changes in this format (e.g., CloudFormation, Terraform, etc.)
- Strong technical foundations in modern application/microservice architectures & related technologies (e.g., Containers, Kubernetes, Service Mesh, RESTful/gRPC APIs, etc.)
- Bachelor’s degree in Information Technology, Computer Science, or related field or equivalent experience
- Professional certifications such as: AWS Certified Solutions Architect, AWS Cloud Practitioner, Certified Cloud Security Professional (CCSP), Certified Secure Software Engineer, SANS/GIAC Certificates, or Certified Information Systems Security Professional (CISSP)
What will set you apart:
- Ability to collaborate & communicate effectively with technical & non-technical teams
- Ability to partner with multiple stakeholders to derive accurate threat models for new/existing systems and reduce information security risk on systems
- Understanding of CI/CD & Secure Development processes & tools (e.g., Jenkins, Git, etc.)
- Familiarity with AWS Well-Architected Framework
- Familiarity with scrum project management tools (e.g., Jira)
- Experience working in Financial Services or FinTech space
***Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time, including CPT/OPT.***
What we offer you
We offer an array of diverse and inclusive benefits regardless of where you are in your career. We believe that providing our employees with the means to lead healthy balanced lives results in the best possible work performance.
- Medical, dental, vision and life insurance
- Retirement savings – 401(k) plan with generous company matching contributions (up to 6%), financial advisory services, potential company discretionary contribution, and a broad investment lineup
- Tuition reimbursement up to $5,250/year
- Business-casual environment that includes the option to wear jeans
- Generous paid time off upon hire – including a paid time off program plus ten paid company holidays and three floating holidays each calendar year
- Paid volunteer time — 16 hours per calendar year
- Leave of absence programs – including paid parental leave, paid short- and long-term disability, and Family and Medical Leave (FMLA)
- Business Resource Groups (BRGs) - internal networks that rally around common interest, experiences and identities such as race, ethnicity, gender, ability, military status and sexual orientation. BRGs play a vital role in educating and engaging our people and advancing our business priorities.
Base Salary Range
$123,000.00 - $178,350.00The salary range above shows the typical minimum to maximum base salary range for this position in the location listed. Non-sales positions have the opportunity to participate in a bonus program. Sales positions are eligible for sales incentives, and in some instances a bonus plan, whereby total compensation may far exceed base salary depending on individual performance. Actual compensation offered may vary from posted hiring range based upon geographic location, work experience, education, licensure requirements and/or skill level and will be finalized at the time of offer.
Equal opportunity employer • Drug-free workplace
We are an equal opportunity employer with a commitment to diversity. All individuals, regardless of personal characteristics, are encouraged to apply. All qualified applicants will receive consideration for employment without regard to age (40 and over), race, color, national origin, ancestry, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, religion, physical or mental disability, military or veteran status, genetic information, or any other status protected by applicable state or local law.
***For remote and hybrid positions you will be required to provide reliable high-speed internet with a wired connection as well as a place in your home to work with limited disruption. You must have reliable connectivity from an internet service provider that is fiber, cable or DSL internet. Other necessary computer equipment, will be provided. You may be required to work in the office if you do not have an adequate home work environment and the required internet connection.***
Job Posting End Date at 12:01 am on:
02-24-2025Want the latest money news and views shaping how we live, work and play? Sign up for Empower’s free newsletter and check out The Currency.