Information Security Architect

CAS uses intuitive technology, unparalleled scientific content and unmatched human expertise to help companies create groundbreaking innovations that benefit the world. As the scientific information solutions division of the American Chemical Society, CAS manages the largest curated reservoir of scientific knowledge, and for 111 years, has helped innovators mine, assess and apply that information to keep businesses thriving. The CAS team is global, diverse, endlessly curious and strives to make scientific insights accessible to innovators worldwide.

CAS is currently seeking an Infrastructure Security Architect.  This position will be located in our headquarters in Columbus, Ohio.

Qualifications:

Bachelor’s degree or equivalent required.

Bachelor’s Degree required and Master’s/Advanced Degree desirable in computer science or a related field

Strong leadership, communication and project management skills.

Understanding of network concepts and experience implementing Cisco Firewalls and Cisco Switches

Experience implementing security focused solutions at all layers of the technology stack

Hands-on experience or strong working knowledge of managing security infrastructure — e.g., firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM and log management technology

Experience reviewing application code for security vulnerabilities

Direct, hands-on experience or a strong working knowledge of vulnerability management tools

Full-stack knowledge of IT infrastructure: Applications, Databases, Operating systems — Windows, Unix and Linux, Hypervisors,IP networks — WAN and LAN, Storage networks — Fibre Channel, iSCSI and NAS, Backup networks and media

Experience designing or managing Identity and Access Management technologies such as: Active Directory, Lightweight Directory Access Protocol (LDAP), Strong working knowledge of IT service management (e.g., ITIL-related disciplines as well as Agile development methodology, Experience designing the deployment of applications and infrastructure into public cloud services.

Possess critical thinking, analytical and problem solving skills

Excellent verbal, written, and interpersonal communication skills

-Develop and maintain an infrastructure and security architecture and roadmap that enables the enterprise to develop and implement secure solutions that are aligned with business, technology and threat drivers

-Provides technology governance by reviewing technology selections to ensure alignment with technology governance principles including scalability, sustainability, extensibility, integration with other technologies, recoverability, and security

-Develop a data protection standard and architecture that protects data from confidentiality or privacy violations and assesses risk on an ongoing basis.

-Develop and maintain security architecture documentation (e.g., models, templates, standards and procedures) that may be leveraged by projects and operations to build security in from the beginning

-Serve as the Infrastructure/Data Center subject matter expert, analyzing and researching problems complex in nature; making sound judgment decisions

-Participate in data, application and infrastructure projects to provide security-planning advice

-Coordinate 3rd party penetration tests for new services or applications

-Advocate with DevOps teams to establish secure coding practices

-Validate existing data solutions and IT infrastructure and other architectures for security best practices - recommend changes as needed to enhance security and reduce risks

-Review network segmentation to ensure least privilege for network access

-Review security technologies, tools and services, and make recommendations addressing security, financial and operational concerns

CAS offers a competitive salary and comprehensive benefits package, including a generous vacation plan, medical, dental, vision insurance plans, and employee savings and retirement plans.  Candidates for this position must be authorized to work in the United States and not require work authorization sponsorship by our company for this position now or in the future.  EEO/Minority/Female/Disabled/Veteran