110 applicants

Company

United Airlines · 5 hours ago

Principal Architect - Infrastructure Cybersecurity (Remote)

Chicago, IL

Full-time

Remote

Senior Level, Lead/Staff

$137K/yr - $187K/yr

7+ years exp

Maximize your interview chances

HospitalityIn-Flight Entertainment

No H1B

Insider Connection @United Airlines

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Conduct threat modeling, end-to-end security evaluation, design and development of infrastructure and cloud security policies, standards, and procedures

Demonstrate expert technology competence in two or more domains such as security, resiliency, infrastructure, platform, product, endpoint, application, identity management, and data security, and zero trust

Actively partner with team members to understand business requirements and develop supporting security and resiliency principles to ensure adoption of industry and enterprise standard processes

Develop and promote security and resiliency architecture strategies, frameworks and patterns while partnering closely with other cybersecurity teams and collaborating with partner organizations

Identify cybersecurity issues, strengths and weaknesses across various cyber domains and partner organizations that introduce risk and provide solutions

Assists in defining and implementing Security Standards/frameworks

Train and coach development and engineering teams to integrate cybersecurity networking best practices into infrastructure and foundational services.

Participate in and drive security advisory boards and committees, providing security architecture review and process ownership for new and existing solutions

Serve as a champion for secure infrastructure-as-code for end-to-end configuration and overall success of the IaaS, PaaS, and SaaS environments

Plan, design, build, and test approaches and solutions that are tied to business outcomes and our cybersecurity strategy and vision

Ensures program(s) is meeting intended purpose and metrics

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Network security principlesInfrastructure security architectureCybersecurity standards developmentAccess managementEndpoint security technologiesCloud interconnectivity methodsSecure connectivity methodsZero trust network architecturesSecurity policy developmentCompliance frameworksCCIECCNPCISSPAWS Solution Architect AssociateTCP/IPLinuxWindowsDockerKubernetesVMwareIncident responseVulnerability managementData Loss Prevention

Required

Bachelor's degree required

7+ years of technical experience, with recent emphasis on security and architecture

Expert level knowledge of network security principles and technologies including network architecture, segmentation and access control strategies

Expert level knowledge of network infrastructure components and technologies like routers, switches, firewalls, proxy servers, reverse proxies, load balancers, IDS/IPS, VPN, SDWAN, network taps, application centric networking, overlay networking concepts

Expertise in developing and maintaining cybersecurity standards, mapping and tailoring controls, and overseeing security metrics to ensure alignment with network security objectives, broader infrastructure security objectives, and compliance requirements

Proficient knowledge of secure connectivity methods via private or encrypted means

Proficient knowledge of cloud interconnectivity methods

Ability to work independently and self-motivate

Excellent problem solving, critical thinking, interpersonal, collaboration, written and verbal communication skills

Must be legally authorized to work in the United States for any employer without sponsorship

Successful completion of interview required to meet job qualification

Reliable, punctual attendance is an essential function of the position

Preferred

Master's degree

CCIE highly preferred

CCNP, CCDP, AWS Solution Architect Associate, Networking, and Security Specializations, CISSP, ISSAP, ISSEP, ISSMP, CISM, CRISC, CEH, GIAC Family

8+ years of technical experience, 5 years directly related to security and architecture

Understanding of core identity concepts, including SAML, SCIM, IDP, OIDC, and related integrations with security policy decision and enforcement points.

Experience and expertise in securing wireless and cellular networks, campus networking infrastructures, and satellite communication technologies.

Understanding of identity and access management (IAM) principles and protocols, and experience integrating IAM solutions into enterprise security architectures.

Expert knowledge of information security techniques and tools like content filtering, application firewalls, vulnerability scanners, EDR, forensics software, incident response, SIEM, SOAR, NAC, etc

Expert knowledge in secure configuration practices for operating systems and infrastructure components

Expert knowledge of OS or compute infrastructure components and technologies like Unix/Linux, Windows, Docker, Kubernetes, VMWare, EC2, ECS, EKS, Lambda

Expert knowledge of endpoint security technologies such as endpoint detection and response and mobile device management

Expert knowledge of Data Loss Prevention (DLP) concepts and services

Expert knowledge of identity and access management services, techniques concepts

Expert knowledge of secure wireless protocols, techniques, and products

Expert knowledge of network protocols like TCP/IP, UDP, IPSEC, SSL/TLS, HTTP, etc

Expert knowledge of common enterprise services like DNS, DHCP, LDAP, SMB, CIFS, NTP, etc

Expert knowledge of security focused processes like architecture reviews, access reviews, vulnerability management, and audit

Proficient knowledge of cloud infrastructure services, concepts, and standard methodologies

Proficient knowledge of zero trust network architectures and principles

Proficiency with security assessments and remediation guidance

Proficient knowledge of compliance frameworks and processes like NIST Cybersecurity Framework (CSF), PCI DSS, COBIT, MITRE ATT&CK, STRIDE, NIST SP 800-53, CIS Benchmarks, etc

Proficient knowledge of security policy and standards development

Ability to manage business and external partners