Short Description:
Security architect responsible for ensuring the District's Health Benefit Exchange security resources are delivered timely to the project team and aligned with MITA security.
Complete Description:
Security architect will be responsible for Service Oriented Architecture (SOA) security architecture for the District's Health Benefit Exchange to ensure secure integration with existing District Infrastructure; and will be responsible for the evaluation of security solutions with consideration for secure design, existing architecture integration and agency operational requirements.
The Security architect will have oversight responsibility for enterprise security governance and standards integration into the District's Health Benefit Exchange system and network as well as to ensure compliance with HIPAA, FISMA, MITA and financial regulations.
Behavior Characteristics:
Ability to think and work independently. Problem solving skills, strong conceptual and analytical skills. Demonstrated leadership and strong team member. Require excellent organizational, verbal and writing skills.
Skills:
Skill Required / Desired Amount of Experience Expertise Rating
Knowledge in Networking and Network Operations
Required 10 Years 3 - Expert
Knowledge in Information Security best practices
Required 10 Years 3 - Expert
Knowledge in OSI model and TCP/IP stack
Required 10 Years 3 - Expert
Network Routing, Switching, and Security Design
Required 10 Years 3 - Expert
Firewall technologies : Check Point, Cisco ASA, Juniper
Required 5 Years 3 - Expert
Troubleshooting & Analysis tools -Ethereal, LANguard, port & System Scanner
Highly desired 5 Years 2 - Proficient
Virtual Private Networking (VPNs) : Cisco, Juniper
Required 5 Years 3 - Expert
Tools & methods used by hacker community to compromise target system
Required 10 Years 3 - Expert
IT Security Specific Certifications: CISSP or CISM or 5 years of relevant experience
Required 5 Years 3 - Expert
ISA Enterprise Server
Required 5 Years 3 - Expert
User Authentication such as LDAP, Radius
Required 5 Years 3 - Expert
Knowledge of IDS/IPS and DLP
Required 10 Years 3 - Expert
Experience in setting IT security standards
Required 10 Years 3 - Expert
Exp. establishing IT security policies for health institutions
Highly desired 10 Years 3 - Expert
Exp. providing security policy guidance/publication in large enterprises
Required 10 Years 3 - Expert
Exp with security governance, policies, procedures & guidelines as referenced by HIPAA, NIST special Publications & IRS Pub. 1075
Required 7 Years 3 - Expert
Front-end Web applications and Oracle Security
Required 7 Years 3 - Expert
Bachelor's Degree
Required
A CISSP or CISM certification is required for this position. Which certification does your candidate have? If not, does your candidate have at least 5 years of relevant experience?