DLP Architect

JOB DESCRIPTION:

- Interacts with company management to affect solutions for enterprise business requirements
- Guide Architectural focus group as prime subject-matter expert in area of expertise.
- Mentors team members on new technologies in area of expertise.
- Prepares and maintains documents that include architecture diagrams, data models, and navigation maps in area of expertise.
- Analyze and prepare recommendations to address existing and potential trouble areas in systems and procedures across the organization as well as design and recommendation on new solutions both in relation to hardware and software design.

ESSENTIAL FUNCTIONS

- Lead developers and support engineers with deployment of a newly design DLP supporting architecture and upgrade to DLP 12.5.x. DLP can stand for Data Loss Prevention, Data Leak Protection, Data Leak Prevention, or Data Loss Protection.
- Develop and maintain architecture and ongoing operations for Symantec DLP Tool Set
- Responds to requests for information on IT company policies, practices, guidelines and standards.
- Conceptualizes and documents complex business and technical requirements into comprehensible models and templates.
- Coaching/mentoring junior staff
- Designs DLP Policies by evaluating network and security technologies; developing requirements for local area networks (LANs), wide area networks (WANs), cloud infrastructure, virtual private networks (VPNs), Routers, Firewalls, and related security and network devices as well as hardware and software; adhering to industry standards.
- Ability to design, plan, organize, prioritize, and delegate tasks to completion and within the time frame established
- Experience with enterprise information security data tools such as Splunk or ArcSight
- Maintain visibility inside and outside of Corporate Information Security team in partnering with EIT and Engineering on resolving and collaborating on complex issues and requirements.
- Interfacing with groups with regards to security tools and initiatives in support of information security standards and controls as they relate to various regulatory control programs that would include Sarbanes Oxley (SOX), Payment Card Industry (PCI), and Customer Privacy Network Information (CPNI).
- Will initially need to be 100% onsite, but they are open to the person working from home a couple days a week once they have established a trusting relationship.
- Would need to work with Symantec (the vendor) to validate that the new architecture is appropriate for what they are trying to do.
- Would be performing a knowledge transfer to two onsite employees upon completion of the project.
- The hardware is already purchased and the team is in place, so this person wouldn't be concerned with that.

SKILLS:

MINIMUM REQUIRED SKILLS/COMPETENCIES:

- Knowledgeable about Wireless business processes, strategic technologies and industry best practices.
- Strong analytic skills.
- 5-10 years of DLP experience required - needs to understand DLP tools and how to architect them. The DLP tool they are using is a Symantec product.
- Scripting experience highly preferred, especially with Perl, Ruby, or Python.
- Familiar with software development methodologies.
- Competent in one or more of the following technical disciplines
- Expert Knowledge of Presentation tier technologies: .NET required, portal desired.
- Expert Knowledge of systems Security technology.
- Expert Knowledge of Business Process Management technologies; major BPM vendor experience desired. 10+ years in business environment
- 10+ as software architect, software engineer, programmer, systems engineer
- Develop roadmaps and operational models to align security technologies with departmental an/or business objectives
- In-depth knowledge of security best practices in large-scale environments
- In-depth knowledge of the security technologies such as but not limited to: Checkpoint Firewall technologies, McAfee Web Proxy Gateways appliance platform, McAfee Intrusion Detection and Prevention systems and Security Incident Event Correlation (SIEM) systems
- VPN technologies Content caching technologies URL filtering systems Encryption protocols
- In-depth knowledge of the networking technologies
- High-level network troubleshooting ability
- Experience in network security, design, implementation, and support within enterprise level customer facing environments
- Detailed understanding of Data Loss Prevention systems, Firewalls, Load Balancers, Routing, Switching, Virtual Private Networks (VPN), Intrusion Detection Systems (IDS), Intrusion Protection Systems (IPS), Web Proxy Gateways, Encryption and Security Monitoring.
- Experience in Windows and Linux/Unix server configuration and management, Information Security and Operational Controls, Methodological approach to problem solving.
- This role requires strong technical capabilities in security requirements analysis, security architecture, security operations and maintenance of Symantec DLP application across a large enterprise.
- The position also provides direct support for proposal development including technical design and working with application and infrastructure teams on key initiatives.
- Even though the position is for a DLP Architect (Data Loss Prevention), Security Operations, there will be opportunities and challenges outside the strict definition of the role, as needed.