Lead Security Architect

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: Lead Security Architect

Location(s): Bloomfield, NJ

(Remote)

Job Description:

• Required - In depth knowledge of application, network, and platform security vulnerabilities. Ability to explain these vulnerabilities to developers.
• Required - Experience in conducting Information Security, IT Security, Audit assessments. Presenting the outcomes of the assessment and obtaining buy in.
• Required - Strong focus on reviewing technical designs and functional requirements to identify areas of Security weakness.
• Required - Knowledge of Cloud Service Providers (AWS/Google/Azure) cloud, DevOps and CI/CD.
• Required - The candidate must have working experience in at least three of the following application/network security domains:
  
  
  
  • Authentication: SAML, SiteMinder, Kerberos, OpenId.
  • Entitlements and identity management.
  • Data protection, data leakage prevention and secure data transfer and storage.
  • App Security - validation checking, software attack methodologies.
  • Cryptography - encryption and hashing.
  
  
  
  
• Desired - Prior experience administering systems for version control (Bitbucket, Github), issue tracking (Jira), continuous integration (Jenkins, Github Actions), or release management.
• Required - Knowledge of standard network model and the risks that present at each layer, the functions of network equipment such as switches, routers, firewalls, proxies, VPNs, and load-balancers, and understanding of common network architectures.
• Required - The candidate must have working knowledge of the primary operating systems (Unix, Windows, z/OS, Mac OS), the configuration and management of that platform at an enterprise scale, the security risks to that platform, and how to mitigate those risks.
• Desired - experience in testing tools, at least one of Veracode, Fortify, OunceLabs, AppScan, WebInspect, Burp.

• Required - Even though the SecDesign Integrator role is not a development role, the candidate must have previous background in programming, design, and application architecture.
• Required - In order to be a practical SecDesign Integrator the candidate must have experience implementing complex applications in an enterprise environment.
• Required - working knowledge of programming and scripting languages: Java, JavaScript, C#, C/C++, Perl, Python, Ruby.
• Required - In-depth knowledge of web technologies such as Web Browsers, Web Servers, Web Services.