Information Security Architecture and Engineering Lead

$95,000 - $135,000/Yr

Gainwell Technologies - Houston, TX

Full-time - Senior

Remote - Houston, TX

Professional, Scientific, and Technical Services

About the position

As an Information Security Architecture and Engineering Lead at Gainwell, you will play a crucial role in providing technical leadership and ensuring security compliance for healthcare technology solutions. This position involves identifying security risks, developing and operating security platforms, and enforcing security policies to protect the organization's data and systems.

Responsibilities

• Identify security risks, threats, and vulnerabilities of networks, systems, databases, and applications.
• Develop, test, and operate security platforms including Endpoint Protection/XDR, Data Security, and Cloud Security solutions.
• Perform complex engineering analysis and initiate corrective actions regarding security violations.
• Define and enforce information security configurations and develop technical assessments.
• Implement and communicate security configuration changes to stakeholders.
• Conduct product evaluations and recommend new or replacement security technologies.
• Design and architect solutions that meet security requirements and business objectives.
• Oversee installation, modification, or replacement of hardware or software components affecting security.
• Provide technical oversight and enforcement of security directives for enterprise environments.
• Develop, maintain, and review operating procedures and reporting metrics.
• Contribute to security program development and roadmap planning.
• Provide leadership and guidance to engineering and supporting resources.

Requirements

• Nine or more years of experience in network, host, data, cloud, and/or application security across multiple operating systems.
• Experience with internet, web, application, and network security technologies.
• Experience with relevant operating system security (Windows, Solaris, Linux, etc.).
• Experience defining, assessing, and deploying Azure, AWS, Microsoft 365 security controls.
• Experience with desktop management and security controls using Microsoft Defender and Intune.
• Experience with Microsoft Purview and conditional access policies within Entra ID, Azure, and Microsoft 365.
• Experience with federal regulations related to information security (FISMA, HIPAA, etc.).
• Experience with NIST Special Publications and C & A process methodology.
• Possess relevant vendor and industry security certifications (CISSP, CCSP, etc.).
• Strong documentation, communication, and workflow design skills.

Benefits

• Flexible vacation policy
• 401(k) employer match
• Comprehensive health benefits
• Educational assistance
• Leadership and technical development academies