53 jobs found

At Credit Acceptance, we are building on the foundation of a successful business while investing in the future through technology, data, AI, and continuous improvement. As we continue to evolve, our Team Members play an active role in improving experiences, driving meaningful change, and shaping the future of our business. We foster an environment where people are empowered to contribute ideas, develop their careers, make an impact, and help lead our continued transformation. Our Engineering teams are helping shape the future of Credit Acceptance through innovation. Team Members collaborate across the organization to solve complex challenges, build impactful solutions, challenge the status quo, and support informed business decisions. We value curiosity, continuous learning, and new ideas from people who are passionate about driving modernization and meaningful business impact. Dealers and customers trust Credit Acceptance with their financial data. Regulators expect us to prove that trust is earned. As the Vice President, Engineering - Security, Compliance and Trust (CISO), you will own how Credit Acceptance stays secure and compliant as we move to the cloud and put AI agents to work across the business. You will set the security strategy, lead the team that delivers it, and report on it to executive leadership and the Board. You are the company's designated CISO for regulatory purposes. You report to the CTO and have direct access to the Audit Committee, including a private session at least once a year. You will lead a team across security operations, security engineering (application, cloud, identity and AI security) and governance, risk and compliance. You will work closely with Engineering, Legal, Risk and Fraud so the secure path is also the fast path. Agents are a new kind of actor in our environment. They have their own identities and make their own decisions. You will own the controls and evidence that let us adopt them quickly and keep the trust of our customers and regulators. Hybrid from Southfield, MI; Bellevue, WA; or the San Francisco Bay Area. Outcomes and Activities Own the enterprise information security strategy, tied to business goals, regulatory requirements and Engineering's AI and modernization plans. Own security for the move from on-premises data centers to AWS. Every workload lands in a secure, standard landing zone, and we modernize or retire legacy technology. Lead vulnerability and exposure operations. Critical findings are fixed in hours, with AI-assisted prioritization and a person accountable for every decision. Own identity and privileged access for people, services and agents. Own data protection and privacy: classification, handling standards and controls on where sensitive data can go. Review privacy engineering with product and engineering teams so privacy-by-design holds across the product lifecycle, including how AI systems use and keep data. Manage third-party and vendor cyber risk, from due diligence through ongoing monitoring, including security service providers, auditors and penetration testers. Any partner that builds or runs AI for us meets the same controls as our own teams. Lead threat detection and incident response, including playbooks for compromised or misbehaving agents and executive tabletop exercises. Defend against AI-enabled attacks such as deepfake impersonation and synthetic identity fraud, with our fraud and operations teams. Define how AI agents are secured, with Engineering's architecture and platform leaders. Each agent is a first-class identity with least-privilege access. Govern how agents call tools and data, including Model Context Protocol servers, and set policy for what an agent may decide and what stays with a person. Test AI systems and agents before release and continuously in production for prompt injection, tool misuse and data exfiltration. Every agent has an audit trail and can be suspended. Keep a living inventory of AI systems, agents and the AI features inside the tools we buy, including unsanctioned use. Set acceptable-use, data-handling and third-party AI standards aligned to NIST AI RMF and ISO/IEC 42001. Build security into how software is specified, generated, tested and deployed, including AI-assisted development. Automated gates replace manual reviews. Lead compliance with the obligations of a public consumer lender: GLBA, NYDFS Part 500, SOX IT general controls, PCI DSS, state privacy laws and SEC cybersecurity disclosure. That includes audit and examiner response, and systems that produce evidence automatically, down to a record an examiner can follow of what an agent saw and what it changed. Report to the Board: regular updates, the annual NYDFS Part 500 CISO report to the Board and the annual NYDFS certification, using a small set of metrics that drive decisions. Lead the Company's Information Security Compliance Committee, which meets at least quarterly with the Company's Executive Leadership Team. Build and develop the security team: hiring, developing people, building the skills to secure and use AI, and a security-aware culture across Engineering and the business. Competencies Customer Empathy: Customer Empathy is the ability to understand the perspectives, pain points, and experiences of customers. It involves actively putting oneself in the customer's shoes, comprehending their needs and challenges, and using that understanding to provide a better, more customer-centric experience. Engineering Excellence: Engineering Excellence is about bringing great craftsmanship and thought leadership to deliver an outstanding product that delights customers and solves for the business. This involves the pursuit and achievement of high standards, best practices, innovation, and superior solutions. One Team: A One Team mindset refers to a collaborative approach across the organization, where individuals work together seamlessly, without boundaries, as a single, cohesive team. Shared goals, open communication and mutual support create a sense of collective purpose. This enables teams to navigate challenges and pursue shared objectives more effectively. Owner's Mindset: Owner's Mindset involves adopting a set of behaviors that reflect a sense of responsibility, accountability, strategic thinking, and a proactive approach to managing your domain. As an owner, you understand the business and your domain(s) deeply and solve for the right outcome for the domain(s) and the business. Requirements Bachelor's degree (computer science or a related field preferred). 10+ years in information security, compliance or a related field. 10+ years leading an information security, compliance or risk team. Regulatory compliance experience in financial services, such as GLBA, NYDFS Part 500, SOX and PCI DSS. Experience leading business continuity and cyber incident response, including executive tabletop exercises and response to a significant incident. Strong familiarity with NIST CSF, ISO 27001/27002 and SOC 2. Strong knowledge of security architecture for cloud-native environments: identity and access management, encryption, network and endpoint controls and vulnerability management. Experience building security into CI/CD and software delivery. Practical experience securing AI-enabled systems or AI-assisted development in production, including identity and access, data protection and testing. Experience reporting security and risk to executive leadership and a Board. Preferred Master's degree. Financial services, fintech or consumer lending experience. AWS and Databricks security at production scale, including securing a migration from on-premises infrastructure. Agentic AI in production: agent identity, governed tool access such as Model Context Protocol, runtime controls and agent-specific incident response. AI-assisted detection, triage and response in a security operations center, with human oversight. SEC cybersecurity disclosure experience as the security leader of a public company. Risk assessment for AI systems and third-party AI vendors. CISSP, CISM or an equivalent security certification. Knowledge and Skills Architecture: Ability to design security architecture that is built in by default and enforced through automation, not manual review. AI and Agent Security: Working knowledge of how agents are attacked and how they fail (prompt injection, tool misuse, identity and privilege abuse, memory poisoning) and the controls that contain them, drawing on the OWASP Top 10 for Agentic Applications, NIST AI RMF and ISO/IEC 42001. Risk Judgment: Ability to weigh security risk against business value, decide what an agent or a team may do on its own, and explain the tradeoff and the evidence plainly. Holds the higher bar and says so. Executive Communication: Ability to turn technical and AI risk into clear decisions for executives and the Board. Leadership and Influence: Ability to build a strong team, challenge the status quo, and earn trust across Engineering, Legal, Compliance, Risk and the business without relying on authority. Target Compensation: This position offers a competitive base salary, with a range of $300,000 - $400,000. This position is eligible for equity and annual cash bonuses. Final compensation within the range is influenced by many factors including assigned hub location, role-specific skills, depth and experience level, industry background, relevant education and certifications. This position follows a hybrid work model, offering two work-from-home days and three standard in-office days each week with the team and key stakeholders at a local office. INDENGLP Benefits Excellent benefits package that includes 401(K) match, adoption assistance, parental leave, tuition reimbursement, comprehensive medical/ dental/vision and many nonstandard benefits that make us a Great Place to Work Our Company Values: To be successful in this role . click apply for full job details

We are seeking a highly motivated and experienced AI Consultant with a proven background in AI adoption to join our AI Center of Excellence (AI COE). This position is ideal for a senior, hands-on candidate who advises customers on how to apply AI to their business, turns that advice into working results, and reports to the AI COE Lead. The role supports Client business domains, primarily in an advisory capacity, across Security (enterprise security and cybersecurity), Manufacturing, Infrastructure (build and operations), and Connected Services, with Security having the highest demand for support, followed by Manufacturing. The successful candidate will use a strong technical background to run proofs of concept (POCs) and product evaluations hands-on, and translate the results into clear recommendations, while project delivery remains owned by the Delivery Teams. Essential Functions: Description / Essential Functions: AI Advisory Advise customers and domain teams on AI adoption, from identifying and prioritizing use cases to defining roadmaps, governance and success measures. Analyze customer business processes end to end, identify where AI and automation deliver measurable value, and build the business case (ROI, cost/benefit). Lead workshops and executive briefings, and present recommendations to senior customer stakeholders. Advise on responsible and secure AI adoption, including data protection, access control and AI-specific risks such as prompt injection and data leakage. Domain Support Security (highest demand): Prioritize AI adoption for patch management and system hardening, while also advancing AI-assisted security operations such as playbook automation, incident response and investigation. Manufacturing: Shape AI use cases around factory production processes and IoT/OT data, such as predictive maintenance, quality inspection and anomaly detection. Infrastructure: Support AI use cases in infrastructure build and operations as demand arises. Connected Services: Support AI use cases in connected services as demand arises. Hands-on POC and Product Evaluation Plan, build and run POCs, including scope, success criteria, test scenarios and evaluation reports. Lead hands-on evaluations of AI and automation products and platforms (for example, Tines for security workflow automation and Ignition for industrial/OT data), and deliver objective fit/gap findings and go/no-go recommendations. Design solution architectures for AI, GenAI and AI Agent solutions on Microsoft Azure or AWS, and provide technical input to proposals, POC plans and SoWs. Knowledge Assets and Partners Capture reusable assets such as use cases, reference architectures, evaluation reports, and demo/POC materials for horizontal deployment across domains and customers. Coordinate with external partners (cloud providers, AI and security vendors, system integrators) on joint demos, POCs and validations. Requirements Minimum qualification: Required Education & Experience: Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent practical experience. 8+ years of experience in IT consulting, solution architecture, or related technical roles, including at least 3 years of hands-on experience delivering AI, GenAI or intelligent automation solutions in production or customer POCs. Proven experience advising customers on AI adoption (use case identification, business case, roadmap and governance), credible with both business and executive stakeholders. Strong hands-on technical skills in GenAI and AI Agent technologies (for example, LLMs, RAG, prompt engineering, agent orchestration, Power Platform/Copilot Studio) and in cloud AI services on Microsoft Azure or AWS. Proven track record of running POCs and product evaluations hands-on, from planning through final recommendation. Experience applying technology or AI in at least one of Client focus domains, with enterprise security or cybersecurity strongly preferred and manufacturing as the next priority. Business-analyst capability: experience mapping end-to-end business processes and identifying where AI and automation pay off. Excellent communication, facilitation and presentation skills, and the ability to work independently in cross-functional, multicultural teams. (Candidate would be disqualified if they do not meet these requirements) Preferred Qualifications: Security domain experience, such as SOC operations, incident response, SIEM/XDR (for example, Microsoft Sentinel, Microsoft Defender or Splunk) and SOAR or security automation platforms such as Tines. Manufacturing domain experience, such as factory production processes (production, quality, maintenance, MES), IoT/OT data, and platforms such as Ignition or SCADA. Experience in infrastructure build and operations. Experience with connected services. Experience with AI Agent frameworks and protocols (for example, Semantic Kernel, LangChain/LangGraph, AutoGen or MCP) and AI platforms such as Azure AI Foundry, Azure OpenAI or Amazon Bedrock. Experience applying AI across the software development lifecycle (SDLC), including Requirements, Architecture, Story Creation, Development, and QEA Execution. Relevant certifications, such as Microsoft Azure AI Engineer, AWS Certified Machine Learning Engineer, AWS Certified Generative AI Developer, AWS Certified Data Engineer, CompTIA Security+, CISSP or CBAP. Experience working with Japanese companies or in a global, bilingual environment. Position Type/Expected Hours of Work: Hybrid work environment (2 days per week in the office). Contract-to-hire position. Occasional evening and weekend work may be required as job duties demand. Working hours are Monday Friday from 9AM 6PM. Travel: This position requires up to 10-20% travel.

Description: Larson Financial Holdings LLC is seeking a proven Senior Cybersecurity Engineer to build and drive cybersecurity initiatives with an ownership mindset. The Senior Cybersecurity Engineer plays a critical role in protecting the organization's information systems, data and infrastructure. The role builds and improves security tools, automation and policies, including using AI tools to connect security platforms and produce monitoring dashboards. It also supports the day-to-day administration of cybersecurity operations: threat monitoring, incident response, compliance initiatives and security awareness. The role researches security improvements and implements them. As a member of the Larson Technology Services team, the Senior Cybersecurity Engineer also contributes to broader technology operations as needed, in a collaborative environment where team members support one another across technology functions to keep our services reliable and effective. Key responsibilities: Security engineering and tool development Design and build security controls across endpoint, identity, network and cloud environments, including Microsoft Azure and Entra ID. Research and evaluate new security tools; develop recommendations, business cases, proofs of concept and vendor assessments; and deploy and configure the tools selected. Build detection logic, automation and response playbooks. Perform threat modeling and security reviews for new systems, changes and projects, and recommend mitigations. Develop and improve security baselines and hardening standards. Integrate security tooling to reduce manual work, such as automating phishing triage, phishing campaign reporting and vulnerability ticketing. Use AI tools, APIs and low-code automation to connect security and SaaS platforms (for example EDR, vulnerability management, phishing simulation, Microsoft 365, Entra ID and ticketing) and consolidate their data. Build and maintain dashboards and reports for security monitoring, including vulnerability, phishing, incident and compliance metrics, using AI-assisted development and visualization tools. Use AI tools in line with organizational policy and data-handling requirements and recommend safeguards for AI use within the security environment. Cybersecurity operations Monitor, investigate and respond to security alerts and incidents, including phishing emails, malware alerts and unauthorized access attempts. Administer and maintain security tools, including endpoint detection and response (EDR) and vulnerability scanners. Remediate security incidents, conduct follow-up analysis, document findings and actions taken, and recommend process improvements based on lessons learned. Manage and respond to phishing reports submitted by staff; coordinate containment and communication; and tune detections and build automation to reduce false positives and manual triage. Perform regular vulnerability assessments, and work with system owners and end users to prioritize and remediate identified risks. Contribute to the planning and rollout of new cybersecurity objectives, tools and initiatives as the security program evolves. Security awareness and phishing simulations Plan and run recurring phishing simulation campaigns, including setup, scheduling and distribution. Analyze campaign results and identify departments or individuals who need additional training or follow-up. Develop and deliver security awareness communications, training materials and coaching based on simulation outcomes and leadership direction. Maintain records of simulation results and awareness training completion to support reporting and continuous improvement. Recommend improvements to the security awareness program, including training content, success metrics and risk-based targeting. Compliance and risk management Support day-to-day efforts to achieve and maintain compliance with applicable security controls. Conduct periodic control assessments, gather evidence and work with stakeholders to close compliance gaps. Draft and maintain security policies, standards, procedures, risk assessments and control inventories. Map security controls to applicable frameworks and recommend control improvements. Conduct risk assessments and recommend remediation priorities. Support internal and external audits and regulatory examinations by preparing evidence packages and responding to inquiries. Identify emerging risks and recommend policy or control improvements. Technology operations and service support Provide systems administration support as assigned, including user account management, access provisioning, Conditional Access policies and endpoint configuration. Assist with service desk escalations that require elevated access or advanced troubleshooting. Collaborate with Larson Technology Services colleagues on infrastructure projects, applying a security-first perspective to system design and change management. Requirements: Bachelor's degree in Cybersecurity, Computer Science, Information Systems or a related field, or equivalent professional experience. 8+ years of hands-on cybersecurity engineering experience, including at least 3 years at a senior or specialist level. Proven experience owning security compliance work aligned to frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, SOC 2 or CIS Controls, including audit preparation and evidence management. Deep experience architecting, deploying and optimizing security tools such as EDR/XDR and vulnerability management platforms, including tuning, policy design and integration across the environment. Advanced proficiency building automation and tooling with scripting languages such as PowerShell and Python to reduce manual effort and improve security operations. Strong experience with SIEM and detection engineering, including developing and tuning detection rules, correlating data sources and mapping detections to frameworks such as MITRE ATT&CK. Experience applying AI tools and APIs to connect systems, automate workflows and build dashboards or reports, with sound judgment about data handling and risk. Extensive hands-on experience designing and securing Microsoft Azure and Entra ID environments, including Conditional Access, identity governance, privileged access management and cloud security posture. Experience authoring and maintaining security policies, standards and procedures, and driving their adoption across business and technical teams. Experience running phishing simulation platforms and security awareness programs, including measuring effectiveness and reporting on outcomes. Demonstrated ability to lead incident investigations and response, and to communicate findings and risk clearly to technical teams, executives and non-technical audiences. Ability to evaluate security solutions, build business cases and present well-supported recommendations to management and leadership. Ability to manage multiple competing priorities independently, balancing strategic projects with operational responsibilities in a fast-paced environment. Experience mentoring and providing technical guidance to technology staff. Preferred qualifications: Relevant certifications, such as CISSP, CISM, CISA, GCIH, CompTIA Security+, CEH, or Microsoft SC-200 or AZ-500. Experience with security architecture reviews, risk assessments, or third-party and vendor risk management. Experience with infrastructure as code or DevSecOps practices. Familiarity with financial services regulatory requirements, such as SEC and FINRA cybersecurity expectations, Regulation S-P and GLBA. Larson is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other character protected by law. PI961c8e15715a-5088

Job Description Job Description Security Solution Architect Location: Columbus, OH Work Model: Hybrid - Tuesday through Thursday onsite, Monday and Friday remote Rate: $77-$88/hour Contract Term: August 17, 2026 - August 13, 2027 Contract-to-Hire: Yes Employment Type: W-2 Only Work Authorization: U.S. Citizens Only Green Card holders also eligible; no visa sponsorship available Travel: Must be open to extensive travel on short notice as needed Position Overview We are seeking an experienced Security Solution Architect to provide enterprise architecture leadership across cybersecurity, infrastructure, applications, data, and compliance capabilities within a large utility environment. This role will be responsible for defining and advancing the organization's security architecture vision, strategy, standards, governance structure, and capability roadmap. The Security Solution Architect will work closely with Enterprise Architecture, Security, Infrastructure, Application Development, Operations, OT/control systems teams, corporate security, service providers, and business stakeholders to ensure security solutions are aligned with business needs, regulatory expectations, technology strategy, and enterprise architecture standards. The ideal candidate brings deep experience across security architecture, identity and access management, threat and vulnerability management, governance/risk/compliance, application security, infrastructure security, data protection, incident response, and utility-related security standards such as NIST, NERC CIP, FERC, and other energy industry frameworks. Key ResponsibilitiesSecurity Architecture Strategy & Roadmap Define and execute the security architecture vision, strategy, standards, frameworks, and capability roadmaps. Develop future-state security architectures and practical roadmaps to achieve target-state capabilities. Evaluate current-state security capabilities and identify gaps, risks, and opportunities for improvement. Drive the future state of cybersecurity and compliance technologies across the enterprise. Ensure security architecture aligns with business strategy, IT strategy, enterprise architecture standards, and regulatory expectations. Security Capability Architecture Provide architectural leadership across key security domains, including: Identity management Authentication and authorization Directory services and single sign-on Threat and vulnerability management System audit Security architecture assurance Availability Information and asset protection Fraud prevention, detection, and response Integrated governance, risk, and compliance Develop reusable security architecture patterns, standards, procedures, and reference models. Ensure security best practices are incorporated into the software development lifecycle and enterprise delivery processes. Governance, Standards & Enterprise Alignment Create, mature, and refine the enterprise security architecture function and governance model. Identify and analyze business drivers to develop security architecture requirements. Publish and promote security architecture standards, frameworks, patterns, and procedures. Develop and execute communication and education plans related to security architecture standards. Support architecture review, security assurance, and governance processes for enterprise technology initiatives. Stakeholder Partnership & Advisory Support Serve as a trusted advisor and sounding board for IT and business leaders developing solutions for security needs. Build and manage relationships with internal and external stakeholders to socialize and advance enterprise security architecture. Partner with application, infrastructure, security, architecture, and operations teams to ensure secure solution design. Communicate security outcomes, standards, risks, and recommendations clearly to both technical and non-technical audiences. Influence and negotiate across teams to drive alignment on secure, practical, and cost-effective solutions. Operations, Incident Response & Resilience Partner with operations teams on long-term solutions related to incident management, problem management, availability, and performance. Provide technical architecture leadership during performance issues, operational challenges, and enterprise security events. Work collaboratively with IT operations, service providers, and local, state, and federal agencies during incident response activities. Support the development of effective security management processes and tools that protect the enterprise IT environment. Utility, OT & Control Systems Security Partner with operations technology teams on strategies for securing control systems, SCADA networks, and related operational environments. Support security architecture considerations for utility operations, critical infrastructure, and regulated technology environments. Collaborate with physical/corporate security teams and serve as a liaison between physical security, cybersecurity, IT, and operations groups. Ensure security architecture considers regulatory, operational, safety, and reliability requirements. Enterprise Assignments & Strategic Initiatives Lead or support special enterprise-wide assignments as needed. Provide architecture leadership for security-related transformation, modernization, compliance, and risk reduction initiatives. Help ensure the organization maintains a secure IT environment at an appropriate cost. Contribute to multi-year strategic IT planning, reuse programs, service provider management, and technology modernization efforts. Day-to-Day Responsibilities Review current and future-state security architecture needs across enterprise projects and platforms. Partner with architecture, security, infrastructure, application development, and operations teams on secure solution design. Develop security architecture roadmaps, standards, patterns, and governance materials. Evaluate security impacts of technology decisions, market trends, regulatory requirements, and business priorities. Support architecture reviews, risk discussions, incident response activities, and long-term remediation planning. Advise stakeholders on identity, access, data protection, vulnerability management, GRC, and security assurance needs. Collaborate with OT, SCADA, operations, and physical security teams where security solutions intersect with utility operations. Prepare executive-ready communications, recommendations, and architecture documentation. Required Qualifications Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related technical discipline, or equivalent combination of education and relevant work experience. Minimum 8 years of experience in Information Technology and/or security capabilities. Strong competency in security practices across business, application, information, and technical architecture. Experience developing future-state architectures and practical roadmaps to achieve target-state capabilities. Experience providing leadership across information/data management, master data management, data warehousing, and business intelligence environments. Working knowledge of NIST, NERC CIP, FERC, and other energy industry security standards and best practices. Experience creating or evolving security architecture standards, frameworks, governance structures, patterns, and procedures. Strong understanding of identity management, authentication, authorization, directory services, single sign-on, threat and vulnerability management, system audit, data protection, and GRC capabilities. Strong communication, influence, negotiation, and stakeholder management skills. Ability to self-prioritize work effectively and manage multiple enterprise priorities. Ability and willingness to travel extensively on short notice as needed. Preferred Qualifications Security certifications strongly preferred. Experience developing multi-year strategic IT plans. Working knowledge of business process re-engineering. Experience with legacy and modern computing architectures. Experience applying ITIL practices. Experience managing or supporting effective reuse programs across the enterprise. Experience managing or partnering with service providers. Experience in utility, energy, critical infrastructure, or highly regulated environments. Experience securing OT, control systems, SCADA networks, or operational technology environments. Experience working with local, state, or federal agencies during security, incident response, or compliance-related activities. Preferred Certifications CISSP CISM CISA CRISC GIAC security certifications Security+ Cloud security certifications Architecture certifications ITIL certification Core Competencies Security Architecture Enterprise Architecture Identity & Access Management Authentication & Authorization Directory Services / Single Sign-On Threat & Vulnerability Management Governance, Risk & Compliance . click apply for full job details

Description: Larson Financial Holdings LLC is seeking a proven Senior Cybersecurity Engineer to build and drive cybersecurity initiatives with an ownership mindset. The Senior Cybersecurity Engineer plays a critical role in protecting the organization's information systems, data and infrastructure. The role builds and improves security tools, automation and policies, including using AI tools to connect security platforms and produce monitoring dashboards. It also supports the day-to-day administration of cybersecurity operations: threat monitoring, incident response, compliance initiatives and security awareness. The role researches security improvements and implements them. As a member of the Larson Technology Services team, the Senior Cybersecurity Engineer also contributes to broader technology operations as needed, in a collaborative environment where team members support one another across technology functions to keep our services reliable and effective. Key responsibilities: Security engineering and tool development Design and build security controls across endpoint, identity, network and cloud environments, including Microsoft Azure and Entra ID. Research and evaluate new security tools; develop recommendations, business cases, proofs of concept and vendor assessments; and deploy and configure the tools selected. Build detection logic, automation and response playbooks. Perform threat modeling and security reviews for new systems, changes and projects, and recommend mitigations. Develop and improve security baselines and hardening standards. Integrate security tooling to reduce manual work, such as automating phishing triage, phishing campaign reporting and vulnerability ticketing. Use AI tools, APIs and low-code automation to connect security and SaaS platforms (for example EDR, vulnerability management, phishing simulation, Microsoft 365, Entra ID and ticketing) and consolidate their data. Build and maintain dashboards and reports for security monitoring, including vulnerability, phishing, incident and compliance metrics, using AI-assisted development and visualization tools. Use AI tools in line with organizational policy and data-handling requirements and recommend safeguards for AI use within the security environment. Cybersecurity operations Monitor, investigate and respond to security alerts and incidents, including phishing emails, malware alerts and unauthorized access attempts. Administer and maintain security tools, including endpoint detection and response (EDR) and vulnerability scanners. Remediate security incidents, conduct follow-up analysis, document findings and actions taken, and recommend process improvements based on lessons learned. Manage and respond to phishing reports submitted by staff; coordinate containment and communication; and tune detections and build automation to reduce false positives and manual triage. Perform regular vulnerability assessments, and work with system owners and end users to prioritize and remediate identified risks. Contribute to the planning and rollout of new cybersecurity objectives, tools and initiatives as the security program evolves. Security awareness and phishing simulations Plan and run recurring phishing simulation campaigns, including setup, scheduling and distribution. Analyze campaign results and identify departments or individuals who need additional training or follow-up. Develop and deliver security awareness communications, training materials and coaching based on simulation outcomes and leadership direction. Maintain records of simulation results and awareness training completion to support reporting and continuous improvement. Recommend improvements to the security awareness program, including training content, success metrics and risk-based targeting. Compliance and risk management Support day-to-day efforts to achieve and maintain compliance with applicable security controls. Conduct periodic control assessments, gather evidence and work with stakeholders to close compliance gaps. Draft and maintain security policies, standards, procedures, risk assessments and control inventories. Map security controls to applicable frameworks and recommend control improvements. Conduct risk assessments and recommend remediation priorities. Support internal and external audits and regulatory examinations by preparing evidence packages and responding to inquiries. Identify emerging risks and recommend policy or control improvements. Technology operations and service support Provide systems administration support as assigned, including user account management, access provisioning, Conditional Access policies and endpoint configuration. Assist with service desk escalations that require elevated access or advanced troubleshooting. Collaborate with Larson Technology Services colleagues on infrastructure projects, applying a security-first perspective to system design and change management. Requirements: Bachelor's degree in Cybersecurity, Computer Science, Information Systems or a related field, or equivalent professional experience. 8+ years of hands-on cybersecurity engineering experience, including at least 3 years at a senior or specialist level. Proven experience owning security compliance work aligned to frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, SOC 2 or CIS Controls, including audit preparation and evidence management. Deep experience architecting, deploying and optimizing security tools such as EDR/XDR and vulnerability management platforms, including tuning, policy design and integration across the environment. Advanced proficiency building automation and tooling with scripting languages such as PowerShell and Python to reduce manual effort and improve security operations. Strong experience with SIEM and detection engineering, including developing and tuning detection rules, correlating data sources and mapping detections to frameworks such as MITRE ATT&CK. Experience applying AI tools and APIs to connect systems, automate workflows and build dashboards or reports, with sound judgment about data handling and risk. Extensive hands-on experience designing and securing Microsoft Azure and Entra ID environments, including Conditional Access, identity governance, privileged access management and cloud security posture. Experience authoring and maintaining security policies, standards and procedures, and driving their adoption across business and technical teams. Experience running phishing simulation platforms and security awareness programs, including measuring effectiveness and reporting on outcomes. Demonstrated ability to lead incident investigations and response, and to communicate findings and risk clearly to technical teams, executives and non-technical audiences. Ability to evaluate security solutions, build business cases and present well-supported recommendations to management and leadership. Ability to manage multiple competing priorities independently, balancing strategic projects with operational responsibilities in a fast-paced environment. Experience mentoring and providing technical guidance to technology staff. Preferred qualifications: Relevant certifications, such as CISSP, CISM, CISA, GCIH, CompTIA Security+, CEH, or Microsoft SC-200 or AZ-500. Experience with security architecture reviews, risk assessments, or third-party and vendor risk management. Experience with infrastructure as code or DevSecOps practices. Familiarity with financial services regulatory requirements, such as SEC and FINRA cybersecurity expectations, Regulation S-P and GLBA. Larson is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other character protected by law. PI11172d4500bc-5088

Job Description Job Description Job Title: Principal SDET, Cybersecurity Test Engineer Location: Lakewood, CO Type: Direct Hire Job Summary: System One is seeking a Principal SDET - Cybersecurity Test Engineer for a full-time/permanent opportunity in Lakewood, CO. As a Sr. Technical Leader, this role is responsible for developing and driving the cybersecurity testing strategy across the Software Quality Engineering organization while enabling the broader organization to consistently implement and execute a unified cybersecurity testing approach. A core focus of this role is embedding cybersecurity as a continuous, front-loaded component of the software development lifecycle to enable early identification and prevention of vulnerabilities and potential security risks, while maintaining compliance with medical device regulatory requirements. The Principal SDET is responsible for evaluating, documenting, managing, and developing cybersecurity tests for software systems within the R&D organization. This individual ensures comprehensive coverage of cybersecurity requirements that are translated into actionable, testable, and verifiable outcomes across teams, enabling consistent execution of cybersecurity test strategies. Responsibilities Define a standardized cybersecurity testing strategy for the Software Quality Engineering organization that aligns with product architecture, regulatory requirements, and business goals. Train and mentor engineers on cybersecurity testing practices, build training materials, and run knowledge transfer sessions so teams can execute independently. Build cybersecurity test plans that meet medical device regulatory standards. Run risk and vulnerability assessments on new and existing products and put security testing protocols in place to protect sensitive data. Oversee the design and execution of automated test scripts and frameworks across all levels of the test pyramid and apply design patterns suited to security testing. Lead dynamic application security testing (DAST) and advise the group on the feasibility, implementation, and maintenance of cybersecurity test automation. Work with architecture teams to set cybersecurity testing standards and shape software architecture and development practices so vulnerabilities surface earlier. Partner with development, cybersecurity, quality assurance, peer engineers, and architects to find vulnerabilities and embed security testing into the product lifecycle. Coordinate with external partners and consultants on joint security testing. Contribute to multiple codebases within Scrum teams, resolve environment and test automation issues, and review and approve code and test changes. Lead discussions about which test level is right for a given piece of functionality, and engage at any test level when the work requires it. Keep up with new cybersecurity threats, tools, and practices, and revise testing methods when needed. Requirements Bachelor's degree in Computer Science, Engineering, or related field, or equivalent education and experience. Minimum 8 years experience in an SDET role, with at least 5 years experience in Cybersecurity Testing. Strong foundation in computer science fundamentals, including design patterns, data structures, object-oriented programming (OOP), and software design principles. Proficient in object-oriented and embedded software development using C#, C++, and Python. Deep expertise in cybersecurity principles, frameworks, and secure software development practices, particularly for medical devices. Skilled in identifying, assessing, and mitigating security vulnerabilities, including performing structured risk assessments. Extensive experience designing and implementing automated test frameworks and scripting solutions. Proficient in applying cybersecurity testing across all levels, including unit, integration, and system testing. Experience in integrating automated testing and security practices into CI/CD pipelines (DevSecOps). Hands-on experience with DAST and other security testing tools, methodologies, and techniques. Holds relevant cybersecurity and product security certifications (e.g., CISSP, CSSLP, OSCP). Familiar with modern development technologies, including Docker, REST APIs, JSON, and cloud platforms (Azure). Skilled in source code management, version control, and collaborative development workflows (e.g., Git-based environments). Proven ability to drive organizational change, align stakeholders, and lead adoption of engineering and security best practices. Strong technical leadership and cross-functional communication skills, with the ability to influence architecture, development, and quality strategies. Self-driven, adaptable, and committed to continuous learning, innovation, and process improvement. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref:

Intro Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you'll travel the world, grow your expertise, and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop onboard! Why you'll love this job As part of the Identity Services team, you'll help deliver secure digital products that support a reliable and profitable airline. You will design, implement, and care for cybersecurity solutions that protect users, systems, operations, and data, by ensuring strong identity controls such as role based access, authentication, authorization, and governance. This role requires attention to detail, strong problem solving, and high ethical responsibility. The fast paced global airline environment offers opportunities for professional development, continuous growth, and meaningful impact. In the Identity Services domain, you will be responsible for the architecture, design, standards, and patterns for delivering strong identity and access programs. You will be expected to balance technical oversight, and business alignment to secure organization's digital assets while ensuring the team is empowered, the systems are resilient, and the entire operation runs smoothly, effectively, and proactively. Additional information about the skills needed for this position is listed in the Skills, Licenses & Certifications section below. What you'll do As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. Identity and Access Management (IAM) Architecture: Design and oversee the architecture and deployment of IAM solutions to manage user identities, roles, and access privileges across the organization's systems and applications. User Provisioning and De-provisioning Framework: Architect and optimize the processes for automating the creation, modification, and removal of user accounts and access rights based on organizational policies and user roles. Security and Governance: Establishing policies for user access, role-based access control (RBAC), and ensuring audit compliance. Designing Secure Architectures: Develop and design secure IT architectures that protect the organization's data, applications, and infrastructure from cyber threats. Collaboration with Stakeholders: Work closely with other IT teams, business units, and external partners to ensure security requirements are understood and implemented effectively. Security Standards and Best Practices: Establish and enforce security standards, guidelines, and best practices across the organization. Leadership: Provide technical guidance and oversight to the engineering team, system owners and customers. Incident Response Planning: Develop and maintain comprehensive incident response plans and procedures to ensure swift and effective handling of security incidents. Monitoring and Auditing Systems: Design and direct the continuous monitoring of IAM systems for suspicious activities, perform regular audits to ensure compliance with security policies, and generate comprehensive reports on access controls and user activities. Communication: Clearly convey project risks and strategies to senior management and stakeholders, ensuring transparency and informed decision-making. Operational Management and Monitoring: Design monitoring strategies to ensure the continuous availability, performance, and reliability of identity services. Compliance and Risk Management Framework: Design frameworks to ensure compliance with data protection laws and standards (e.g., GDPR, CCPA). Conduct risk assessments and audits to identify and address vulnerabilities. All you'll need for success Minimum Qualifications- Education & Prior Job Experience Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering, or a related technical discipline, or equivalent experience/training. Extensive job experience in cybersecurity architecture or a related field is required, with a proven track record of designing and implementing secure IT architecture and frameworks. Demonstrated expertise in leading architectural design and strategic oversight in cybersecurity initiatives. 12+ years experience in Cybersecurity Architecture Preferred Qualifications- Education & Prior Job Experience Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; advanced degree preferred. 5+ years' experience in cybersecurity architecture or related roles. Experience designing and implementing comprehensive security architectures and frameworks. Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security features. Experience with regulatory compliance and industry standards (e.g., GDPR, PCI-DSS, ISO 27001). Skills, Licenses & Certifications Relevant certifications including but not limited to Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); Certified Information Systems Auditor (CISA); Certified in Risk and Information Systems Control (CRISC); Certified Information Privacy Professional (CIPP); Certified Information Systems Security Professional - Architecture (CISSP-ISSAP) Proficiency in identity and access management (IAM) tools and technologies Expertise in developing and implementing cybersecurity IAM policies and procedures Knowledge of IAM principles and methodologies Understanding of regulatory requirements and standards related to IAM (e.g., GDPR, HIPAA, SOX) Familiarity with cybersecurity frameworks and standards (e.g., NIST, ISO 27001) Ability to conduct assessments and audits of IAM practices to identify vulnerabilities and gaps Strong problem-solving skills to address IAM management challenges Ability to collaborate effectively with cross-functional teams Experience in managing IAM projects, including planning, execution, and monitoring Proficiency in identity and access management (IAM) solutions (e.g., Saviynt, Okta, Ping Identity, Microsoft Azure AD) Knowledge of authentication protocols (e.g., SAML, OAuth, OpenID Connect, Kerberos) Familiarity with cloud security and cloud IAM (e.g., AWS IAM, Azure AD) Ability to analyze complex security requirements and design effective access management solutions Strong problem-solving skills to address security challenges and incidents Excellent written and verbal communication skills to articulate security concepts and solutions to technical and non-technical stakeholders What you'll get Feel free to take advantage of all that American Airlines has to offer: Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network. Health Benefits: On day one, you'll have access to your health, dental, prescription and vision benefits to help you stay well. And that's just the start, we also offer virtual doctor visits, flexible spending accounts and more. Wellness Programs: We want you to be the best version of yourself - that's why our wellness programs provide you with all the right tools, resources and support you need. 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year. Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more Feel free to be yourself at American From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Team Member Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world. Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life's journey? Feel free to be yourself at American.

Job Description Job Description ASI Government provides government leaders with the expertise they need to navigate acquisition and organizational challenges so they can make an impact and achieve their goals. For over 30 years, ASI has transformed the way government does business, impacting over 70 government agencies across the civilian, defense, and intelligence communities. Do you thrive on creating unique and impactful value for Federal clients? Are you passionate about partnering with clients and collaborating to create solutions? Do you enjoy the opportunity to drive change that impacts our nation? We are looking for smart, curious, driven individuals to join us in partnering with our client to help them solve some of the nation's most challenging problems. ASI Government serves as a trusted adviser to government leaders seeking improved performance, enhanced organization effectiveness, and strategic change. ASI Government's AI Practice is seeking a Deployment Lead / Information System Security Officer (ISSO) to own everything between a finished build and a live, authorized system at Naval Supply Systems Command (NAVSUP). This is a full-time, 100% NAVSUP-dedicated role and ASI's anchor presence on the account. You will lead every AI Practice deployment into the NAVSUP environment and serve as ISSO for those systems, carrying them through the Department of War (DoW) Risk Management Framework (RMF) to an Authority to Operate (ATO) and keeping them authorized through continuous monitoring. You will partner with ASI's NAVSUP account lead and off-site development team, work closely with NAVSUP IT, cybersecurity and badging staff, and operate under the direction of the government Information System Security Manager (ISSM). Key Responsibilities: Deployment Leadership Lead every AI Practice deployment at NAVSUP, from intake through go-live, following the PAIRD Deployment Guide. Run the development kickoff for each new use case with NAVSUP IT, cybersecurity and badging staff, defining screening and ATO requirements before work begins. Receive builds from ASI's off-site development team and own their integration, testing in the NAVSUP environment, and production release. Serve as the day-to-day technical point of contact for NAVSUP stakeholders and the ASI account lead. Coordinate site access and badging for ASI staff assigned to NAVSUP, and maintain a current record of badged and in-process personnel. Report deployment status, risks and blockers to ASI leadership. Information System Security Officer (ISSO) Carry ASI's systems at NAVSUP through the DoW Risk Management Framework (DoDI 8510.01), applying NIST SP 800-37 and the NIST SP 800-53 security controls. Prepare and maintain authorization packages, including system security plans, control implementation statements, assessment evidence and supporting documentation. Develop and track Plans of Action and Milestones (POA&Ms) for known vulnerabilities through closure. Run continuous monitoring after authorization, including vulnerability scans, configuration compliance checks, patch status and periodic control reviews. Work under the direction of the government ISSM and provide accurate, timely security status to support the Authorizing Official's decisions. Review planned changes to deployed systems for security impact before release. Lead ASI's response to security incidents on NAVSUP systems and report them through NAVSUP's established channels. Required: 5+ years of cybersecurity experience, including 3+ years as an ISSO or in a comparable security role on DoW systems under the Risk Management Framework, with hands-on experience building authorization packages and managing POA&Ms. Demonstrated experience leading software deployments into a government environment, from test through production release. Qualified, or able to qualify, under DoD Manual 8140.03 for the cyber work role assigned to this position: foundational qualification through certification, education, or DoW training and experience; on-the-job resident qualification at the site; and 20 hours of continuing professional development annually. Eligible to obtain and maintain a NAVSUP badge and the security clearance level required by the account. U.S. citizenship required. Clear written and verbal communication with government security staff, engineers and program leadership. Preferred: A security certification commonly accepted for DoW security management roles, such as CISSP, CISM or CompTIA SecurityX (formerly CASP+). An active NAVSUP badge or prior NAVSUP site access. Hands-on experience with eMASS, ACAS/Tenable, and DISA STIG and SCAP compliance tools. Experience deploying cloud-hosted applications, data pipelines or AI/ML models, and applying security controls to them. Familiarity with Navy supply chain, acquisition or contracting systems. Experience working on a team where developers and deployers are on different sites or accounts. Bachelor's degree in cybersecurity, information technology, computer science or a related field. Why Join ASI Government? Work on high-impact, high-visibility projects that improve government services. Collaborate with experienced consultants in strategy, analytics, and organizational development. Opportunity for career growth in a dynamic and mission-driven environment. Competitive compensation and comprehensive benefits package (viewable on our careers site). BENEFITS : ASI Government offers a comprehensive benefit package to our employees. Benefits can be viewed on our careers site. EQUAL OPPORTUNITY EMPLOYER: ASI Government is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, or status as a qualified individual with a disability. To view the EEO Is the Law Poster, click here. PAY TRANSPARENCY NONDISCRIMINATION PROVISION: We will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. E-VERIFY: ASI Government participates in E-Verify, a service of DHS and SSA. See the E-Verify Notice and Learn About your Right to Work here and here. REASONABLE ACCOMMODATIONS: ASI is committed to working with and providing reasonable accommodations to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application process, please send an email at or call and let us know the nature of your request.

This job posting is anticipated to remain open for 30 days, from 19-Oct-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Overview: Edward Jones is seeking a Senior Security Architect to lead strategic alignment of infrastructure security tools, processes, and capabilities across all security domains. This role is pivotal in ensuring that security architecture supports the firm's broader technology and business strategy, including cloud transformation, operational resilience, enterprise encryption standards, and risk reduction. The ideal candidate will be a seasoned security leader with deep expertise in cryptography, governance, and architecture. They will own and maintain key security templates and artifacts, provide expert guidance during reviews, and drive alignment with enterprise architecture and other technical organizations. What You'll Do: Own and maintain templates for security artifacts (e.g., Patterns, Baseline Control Documents, Procedures, Architecture Decision Records, and Standards) and manage a repository of completed, approved versions. Provide expert infrastructure security guidance and oversight during security reviews and the development of security artifacts. Define and govern infrastructure security standards, including cryptographic controls for data in transit and at rest across hybrid environments. Provide architectural guidance on encryption, key management, and certificate usage as part of security reviews and standards development. Lead strategic alignment of infrastructure security capabilities and processes with enterprise architecture and other technical domains. Serve as a senior technical leader across the Information Security Division, influencing infrastructure security strategy and execution. Collaborate with cross functional teams to ensure infrastructure security solutions are scalable, resilient, and aligned with cloud native and hybrid environments. Monitor industry trends and emerging threats to inform infrastructure security strategy and tooling. Engage with vendors and external partners to evaluate solutions, negotiate contracts, and represent the firm in technical forums. Drive maturity of infrastructure security practices across cloud platforms (Azure, OCI, AWS, GCP) and on premises environments. What Experience You'll Need: Bachelor's degree in Computer Science, Engineering, or related field; or equivalent work experience. 10+ years of experience in infrastructure security architecture within a complex, matrixed organization. Deep understanding of infrastructure security domains including network security, endpoint protection, identity and access management, servers and containerization, applications, and cloud security, including encryption, key management, and certificate-based controls. Experience designing and implementing secure infrastructure architectures across hybrid cloud environments. Experience defining or applying enterprise encryption standards, including data-at-rest, data-in-transit, and key lifecycle management requirements. Extensive experience in securing endpoint devices (e.g., laptops, mobile devices, servers) through technologies such as EDR/XDR, antivirus, device hardening, and policy enforcement. Familiarity with security frameworks and standards (e.g., NIST, CIS, ISO 27001). Strong knowledge of security tooling such as SIEM, vulnerability management, configuration management, and cloud-native security services. Proven ability to lead cross-functional initiatives and influence technical direction at the enterprise level. Excellent communication and interpersonal skills; able to build trust and credibility across technical and business teams. Ability to assess and integrate proposed standards and technologies across interdependent systems. Demonstrated experience in risk management and incident response within infrastructure environments. What Could Set You Apart: Relevant security certifications such as CISSP, CISM, CCSP, advanced network vendor certifications, ISC2 certifications, or SANS certifications Experience supporting advanced encryption solutions, certificate management, and post-quantum readiness Experience securing AI/ML systems, including model governance, data pipeline protection, and secure deployment strategies Technology background in the financial sector Understanding of various regulatory requirements and laws, including but not limited to NYDFS Cybersecurity Regulations and FINRA Regulations Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .

Job Description Overview: At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer's and partner's needs and solve their challenges. Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve. You'll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about-locally and globally. Come make an impact every day at Zebra. What We're Looking For: As an Advanced Network Engineer at Zebra Technologies, you will be a vital leader within our Global IT Network Team. In this role, you won't just keep things running-you will serve as the technical spearhead for complex, global network implementations. You will help shape the future of Zebra's infrastructure by establishing network architecture standards and directing the deployment of innovative solutions. If you are passionate about driving enterprise-level IT infrastructure forward, collaborating seamlessly across a global IT landscape, and mentoring junior engineers to reach their full potential, we want you on our team. What You Will Do: Architecture, Design & Strategy Architect the Future: Lead the research, design, and planning of our enterprise network and network security architecture. Evaluate & Innovate: Perform advanced technology evaluations and Proof of Concept (PoC) testing. Develop network security solutions, including financial analysis of alternatives, to meet evolving business needs. Set the Standard: Develop, review, and approve installation requirements across LAN, WAN, VPN, firewalls, routers, and related network devices. M&A Integration: Lead network assessments for Mergers and Acquisitions (M&A). Analyze pre-built environments and develop project timelines to establish standardization. Security, Resilience & Compliance Ensure Business Continuity: Design and implement robust network infrastructure to support critical Disaster Recovery and Cyber Recovery exercises. Strengthen Posture: Continuously review system network security measures and implement necessary enhancements while strictly adhering to change control processes. Maintain Compliance: Ensure all network operations comply with applicable policies, procedures, and industry best practices, while providing Level 3 validation of network security changes. Operations, Support & Leadership Act as the Expert: Serve as the Subject Matter Expert (SME) and provide strategic consulting support to business stakeholders. Level 3 Escalation: Respond to complex Network Security and Operations incidents, providing advanced troubleshooting, thorough post-event analysis, and participating in an on-call rotation. Drive Project Delivery: Independently manage projects, deliverables, and timelines for ongoing system upgrades. Empower the Team: Champion "shift-left" opportunities by producing detailed High-Level Designs (HLD), Low-Level Designs (LLD), standard operating procedures (SOPs), and knowledge base articles. Core Networking, Cloud & Security Expertise Deep Networking Knowledge: Master-level understanding of data networking theory, advanced routing (BGP, OSPF), TCP/IP fundamentals, directory services, and complex LAN/WAN switching topologies. WAN & Cloud Infrastructure: Proven hands-on experience manipulating routing metrics for WAN protocols. Thorough understanding of cloud networks (AWS/Azure/GCP), specifically designing intra- and inter-cloud secure routing utilizing native cloud technologies alongside enterprise firewalls. Advanced Security Foundation: Deep knowledge of security protocols, cryptography, and zero-trust concepts. Strong understanding of how systems are compromised based on known vulnerabilities to proactively secure the network. Leadership & Business Acumen Technical Mentorship: A natural leader who provides clear direction, guides cross-functional teams on standardized technology integration, and leads junior technical staff by example. Global & Customer-Centric Mindset: Demonstrates strong empathy for global cultural differences and a highly customer-centric approach to IT support. Analytical Problem Solving: Top-tier troubleshooting and root-cause analysis skills under pressure, paired with excellent communication skills to consult with cross-functional stakeholders. Minimum Qualifications: Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field. Minimum of 8+ years of progressive, proven experience in enterprise-level network engineering, network security, and infrastructure architecture. Demonstrated experience operating within a large, complex, global IT environment. Zscaler Zero Trust Ecosystem: Deep familiarity with Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Branch Connectors (ZTB). Data Center Automation & Visibility: Hands-on experience utilizing Cisco Nexus Dashboard for centralized fabric management, proactive network monitoring, and operational automation across complex data center environments. Enterprise Wireless & Edge: Proficiency in HPE Mist Wireless, Cisco Meraki, and Cisco Enterprise Wireless technologies. Next-Generation Firewalls: Extensive experience with Palo Alto Firewalls, supported by an active Palo Alto Networks Certified Network Security Engineer (PCNSE) or Administrator (PCNSA) certification to validate deep expertise in designing, deploying, and managing enterprise firewall. Travel Requirements: Willingness and ability to travel up to 10% globally or domestically as needed for major project implementations or M&A integrations.architectures. Preferred Qualifications: CCNP/CCIE (Enterprise and/or Data Center) JNCIP-MistAI Zscaler Digital Transformation Engineer (ZDTE) CISSP or PCNSE Equal Opportunity Employer: Zebra is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability and protected veteran status, or any other basis prohibited by law. If you are an individual with a disability and need assistance in applying for a position, please contact us at . Know Your Rights: - 10/EEOC_KnowYourRights_screen_reader_10_20.pdf Conozca sus Derechos: -_EEOC_KnowYourRightsSp_10_20.pdf We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation at . Pay Range: $108,960.00 - $163,440.00 Annual Incentive Compensation: In addition to base pay, Zebra offers this role the opportunity to earn a performance-based annual cash incentive, at a target equal to 12% of base pay, in accordance with the terms of the applicable incentive plan. Zebra Total Rewards: Zebra Total Rewards includes more than just pay and is structured to meet the needs of our changing global business and evolving talent. We are committed to providing our employees with a benefits program that is comprehensive and competitive - including healthcare, wellness, inclusion networks, and continued learning and development offerings. We offer community service days, in addition to the traditional insurances, compensation, parental leave, employee assistance program and paid time off offerings depending on the country where you work. Salary offered will vary depending on your location, job-related skills, knowledge, and experience. Additionally, all Zebra roles are eligible for cash incentive programs. For example, sales roles have additional opportunity to earn substantial variable compensation tied to quota achievement. In most other roles, the Zebra annual cash incentive program links Company and individual performance together. Some roles may also be eligible for long-term incentive equity awards. Benefits: We understand the importance of work-life balance and wellbeing, which is why we offer flexibility for our teams including: hybrid work, adaptable hours, Summer Flex Fridays, Focus Fridays, and an annual companywide well-being day to promote revitalization and success. Job Posting Statement: To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system . click apply for full job details

Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. We are seeking a CCIE-certified Enterprise Network Architect to provide technical leadership, guidance, and design expertise to a team supporting a DoD agency's WAN as well as emerging technology initiatives as related to network engineering. Provides enterprise-level network architecture, technical strategy, and engineering leadership for network infrastructure. Develops architectural solutions and modernization strategies that improve network security, interoperability, scalability, and operational performance. Responsibilities Include: Develop enterprise network architectures, technical designs, and infrastructure modernization roadmaps. Provide senior technical guidance to network engineers, cybersecurity personnel, and Government leadership. Evaluate existing network architecture and recommend improvements to performance, security, availability, and resilience. Design solutions integrating Cisco routing and switching, Check Point firewalls, and enterprise telecommunications technologies. Assess interoperability between agency classified and unclassified networks as well as with NIPRNet, SIPRNet, and cloud-hosted environments. Lead technical assessments of emerging network technologies, platforms, and architectures. Develop high-level and detailed network designs, engineering specifications, and implementation strategies. Support architectural planning for IPv6, MPLS, multicast, QoS, and enterprise network segmentation. Evaluate hardware and software acquisitions for architectural compatibility, lifecycle suitability, and security compliance. Provide architectural guidance for enterprise cloud connectivity, SCCA integration, and application delivery. Review engineering changes, technical proposals, and major network modernization initiatives. Develop technology assessments, analyses of alternatives, and technical recommendations for Government stakeholders. Support laboratory evaluations, proof-of-concept testing, and technical design validation. Provide expert technical support for complex network performance, interoperability, and security issues. Ensure proposed architectures comply with applicable DoD, DISA, and agency technical and security standards. Advise on selection of technological purchases with regards to processing, data storage, data access, and applications development. Advises of feasibility of potential future projects to management. Required Skills, Qualifications and Experience: Experience: Eight years of relevant experience including experience with network WAN/LAN hardware and software and firewalls. Education: High School Diploma. Citizenship and Clearance: US Citizenship is required. DoD Top Secret clearance or Secret clearance with favorably adjudicated Tier 5/SSBI investigation. Certification: DoD 8570/8140: IAT Level III baseline certification such as CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH. CCIE Enterprise Infrastructure certification. Location: Work will be primarily performed from a contractor-owned facility near Fort Belvoir, VA and customer locations. Candidates may work onsite/reside within commuting distance of one of the following: Fort Belvoir, VA ( highly preferred ) Battle Creek, MI Columbus, OH Dayton, OH New Cumberland, PA Ogden, UT Philadelphia, PA Richmond, VA Anniston, AL San Diego, CA Fort Bragg, NC Robins AFB, GA Tobyhanna, PA. Preferred Qualifications: Check Point Certified Security Administrator (CCSA) or higher certification. AWS, Microsoft Azure, Google Cloud, or Cloud+ certification. Work Environment and Physical Demand: Must be able to work for extended hours at a computer in an office environment as well as work from comm closets and warehouse spaces as needed. The projected salary range for this position is $190,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.

Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. We are seeking a CCIE-certified Enterprise Network Architect to provide technical leadership, guidance, and design expertise to a team supporting a DoD agency's WAN as well as emerging technology initiatives as related to network engineering. Provides enterprise-level network architecture, technical strategy, and engineering leadership for network infrastructure. Develops architectural solutions and modernization strategies that improve network security, interoperability, scalability, and operational performance. Responsibilities Include: Develop enterprise network architectures, technical designs, and infrastructure modernization roadmaps. Provide senior technical guidance to network engineers, cybersecurity personnel, and Government leadership. Evaluate existing network architecture and recommend improvements to performance, security, availability, and resilience. Design solutions integrating Cisco routing and switching, Check Point firewalls, and enterprise telecommunications technologies. Assess interoperability between agency classified and unclassified networks as well as with NIPRNet, SIPRNet, and cloud-hosted environments. Lead technical assessments of emerging network technologies, platforms, and architectures. Develop high-level and detailed network designs, engineering specifications, and implementation strategies. Support architectural planning for IPv6, MPLS, multicast, QoS, and enterprise network segmentation. Evaluate hardware and software acquisitions for architectural compatibility, lifecycle suitability, and security compliance. Provide architectural guidance for enterprise cloud connectivity, SCCA integration, and application delivery. Review engineering changes, technical proposals, and major network modernization initiatives. Develop technology assessments, analyses of alternatives, and technical recommendations for Government stakeholders. Support laboratory evaluations, proof-of-concept testing, and technical design validation. Provide expert technical support for complex network performance, interoperability, and security issues. Ensure proposed architectures comply with applicable DoD, DISA, and agency technical and security standards. Advise on selection of technological purchases with regards to processing, data storage, data access, and applications development. Advises of feasibility of potential future projects to management. Required Skills, Qualifications and Experience: Experience: Eight years of relevant experience including experience with network WAN/LAN hardware and software and firewalls. Education: High School Diploma. Citizenship and Clearance: US Citizenship is required. DoD Top Secret clearance or Secret clearance with favorably adjudicated Tier 5/SSBI investigation. Certification: DoD 8570/8140: IAT Level III baseline certification such as CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH. CCIE Enterprise Infrastructure certification. Location: Work will be primarily performed from a contractor-owned facility near Fort Belvoir, VA and customer locations. Candidates may work onsite/reside within commuting distance of one of the following: Fort Belvoir, VA ( highly preferred ) Battle Creek, MI Columbus, OH Dayton, OH New Cumberland, PA Ogden, UT Philadelphia, PA Richmond, VA Anniston, AL San Diego, CA Fort Bragg, NC Robins AFB, GA Tobyhanna, PA. Preferred Qualifications: Check Point Certified Security Administrator (CCSA) or higher certification. AWS, Microsoft Azure, Google Cloud, or Cloud+ certification. Work Environment and Physical Demand: Must be able to work for extended hours at a computer in an office environment as well as work from comm closets and warehouse spaces as needed. The projected salary range for this position is $190,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.

Job Description Job Description Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite - onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud environments, hybrid infrastructure, cybersecurity platforms, APIs, containers, data solutions, and AI enabled applications. Partner with application and engineering teams to securely migrate workloads from on premises environments to AWS and other approved cloud platforms. Define and maintain cloud security patterns, standards, guardrails, security requirements, reference architectures, and implementation guidance. Conduct security architecture reviews, threat modeling, and risk assessments for cloud native, hybrid, API, container, third-party, and AI/GenAI solutions. Define appropriate security controls and recommend remediation or compensating controls when security gaps are identified. Support secure AI/GenAI adoption, including LLM integrations, RAG implementations, prompt security, data protection, access controls, monitoring, logging, and human in the loop safeguards. Support AI governance and risk management processes, including security reviews, monitoring requirements, incident escalation, and lifecycle controls. Assess solutions against applicable security frameworks and standards, including NIST, FedRAMP, and FIPS. Provide security guidance during technology evaluations, architecture reviews, security exceptions, and path to production activities. Work with cybersecurity engineering and operations teams on security capabilities involving SIEM, network security, endpoint security, data protection, and security configuration. Communicate security risks, requirements, and recommendations clearly to both technical teams and business stakeholders. Requirements 8+ years of overall IT experience, including significant cybersecurity and cloud security experience. 5+ years of cybersecurity architecture experience in roles such as Information Security Architect, Cloud Security Architect, or Infrastructure Security Architect. 5+ years of hands-on AWS cloud security experience, including securing enterprise workloads and cloud migrations. Strong knowledge of AWS security services, controls, IAM, networking, logging, monitoring, data protection, and cloud security best practices. Experience securing enterprise cloud and hybrid environments and performing security architecture reviews. Experience with threat modeling, security risk assessments, control gap analysis, and remediation planning. Knowledge of cybersecurity and compliance frameworks such as NIST, FedRAMP, and FIPS. Experience defining and applying security standards, patterns, guardrails, and technical security controls. Working knowledge of AI/GenAI security, including prompt injection, data leakage, model access controls, AI guardrails, observability, approved model usage, and human oversight. Understanding of security considerations for LLMs, RAG solutions, APIs, containers, and enterprise data integrations. Ability to work effectively with application developers, cloud and infrastructure engineers, cybersecurity teams, enterprise architecture, compliance, risk, and business stakeholders. Strong written and verbal communication skills with the ability to explain technical security risks and requirements clearly. Strong organizational, coordination, and stakeholder management skills. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification is preferred. AWS Certified Security - Specialty, Azure AZ 500, or another relevant cloud security certification is preferred. Desired Skillset: Security experience across Azure and/or GCP in addition to AWS. AI/GenAI security, AI governance, or AI risk management experience. Container and workload security experience covering build time and runtime controls. API security experience, including enterprise API gateways. Security engineering experience with SIEM, firewalls, endpoint/host security, or security configuration management. Experience with AI-enabled cybersecurity capabilities such as security analysis, vulnerability prioritization, detection support, secure code review, or workflow automation. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification. AWS Certified Security - Specialty, Azure Security Engineer Associate (AZ 500), or comparable cloud security certification. Education: Bachelor's degree in Computer Science, Information Systems, or a related field. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh

Job Description Job Description Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite - onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud environments, hybrid infrastructure, cybersecurity platforms, APIs, containers, data solutions, and AI enabled applications. Partner with application and engineering teams to securely migrate workloads from on premises environments to AWS and other approved cloud platforms. Define and maintain cloud security patterns, standards, guardrails, security requirements, reference architectures, and implementation guidance. Conduct security architecture reviews, threat modeling, and risk assessments for cloud native, hybrid, API, container, third-party, and AI/GenAI solutions. Define appropriate security controls and recommend remediation or compensating controls when security gaps are identified. Support secure AI/GenAI adoption, including LLM integrations, RAG implementations, prompt security, data protection, access controls, monitoring, logging, and human in the loop safeguards. Support AI governance and risk management processes, including security reviews, monitoring requirements, incident escalation, and lifecycle controls. Assess solutions against applicable security frameworks and standards, including NIST, FedRAMP, and FIPS. Provide security guidance during technology evaluations, architecture reviews, security exceptions, and path to production activities. Work with cybersecurity engineering and operations teams on security capabilities involving SIEM, network security, endpoint security, data protection, and security configuration. Communicate security risks, requirements, and recommendations clearly to both technical teams and business stakeholders. Requirements 8+ years of overall IT experience, including significant cybersecurity and cloud security experience. 5+ years of cybersecurity architecture experience in roles such as Information Security Architect, Cloud Security Architect, or Infrastructure Security Architect. 5+ years of hands-on AWS cloud security experience, including securing enterprise workloads and cloud migrations. Strong knowledge of AWS security services, controls, IAM, networking, logging, monitoring, data protection, and cloud security best practices. Experience securing enterprise cloud and hybrid environments and performing security architecture reviews. Experience with threat modeling, security risk assessments, control gap analysis, and remediation planning. Knowledge of cybersecurity and compliance frameworks such as NIST, FedRAMP, and FIPS. Experience defining and applying security standards, patterns, guardrails, and technical security controls. Working knowledge of AI/GenAI security, including prompt injection, data leakage, model access controls, AI guardrails, observability, approved model usage, and human oversight. Understanding of security considerations for LLMs, RAG solutions, APIs, containers, and enterprise data integrations. Ability to work effectively with application developers, cloud and infrastructure engineers, cybersecurity teams, enterprise architecture, compliance, risk, and business stakeholders. Strong written and verbal communication skills with the ability to explain technical security risks and requirements clearly. Strong organizational, coordination, and stakeholder management skills. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification is preferred. AWS Certified Security - Specialty, Azure AZ 500, or another relevant cloud security certification is preferred. Desired Skillset: Security experience across Azure and/or GCP in addition to AWS. AI/GenAI security, AI governance, or AI risk management experience. Container and workload security experience covering build time and runtime controls. API security experience, including enterprise API gateways. Security engineering experience with SIEM, firewalls, endpoint/host security, or security configuration management. Experience with AI-enabled cybersecurity capabilities such as security analysis, vulnerability prioritization, detection support, secure code review, or workflow automation. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification. AWS Certified Security - Specialty, Azure Security Engineer Associate (AZ 500), or comparable cloud security certification. Education: Bachelor's degree in Computer Science, Information Systems, or a related field. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh

Job Description Job Description Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite - onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud environments, hybrid infrastructure, cybersecurity platforms, APIs, containers, data solutions, and AI enabled applications. Partner with application and engineering teams to securely migrate workloads from on premises environments to AWS and other approved cloud platforms. Define and maintain cloud security patterns, standards, guardrails, security requirements, reference architectures, and implementation guidance. Conduct security architecture reviews, threat modeling, and risk assessments for cloud native, hybrid, API, container, third-party, and AI/GenAI solutions. Define appropriate security controls and recommend remediation or compensating controls when security gaps are identified. Support secure AI/GenAI adoption, including LLM integrations, RAG implementations, prompt security, data protection, access controls, monitoring, logging, and human in the loop safeguards. Support AI governance and risk management processes, including security reviews, monitoring requirements, incident escalation, and lifecycle controls. Assess solutions against applicable security frameworks and standards, including NIST, FedRAMP, and FIPS. Provide security guidance during technology evaluations, architecture reviews, security exceptions, and path to production activities. Work with cybersecurity engineering and operations teams on security capabilities involving SIEM, network security, endpoint security, data protection, and security configuration. Communicate security risks, requirements, and recommendations clearly to both technical teams and business stakeholders. Requirements 8+ years of overall IT experience, including significant cybersecurity and cloud security experience. 5+ years of cybersecurity architecture experience in roles such as Information Security Architect, Cloud Security Architect, or Infrastructure Security Architect. 5+ years of hands-on AWS cloud security experience, including securing enterprise workloads and cloud migrations. Strong knowledge of AWS security services, controls, IAM, networking, logging, monitoring, data protection, and cloud security best practices. Experience securing enterprise cloud and hybrid environments and performing security architecture reviews. Experience with threat modeling, security risk assessments, control gap analysis, and remediation planning. Knowledge of cybersecurity and compliance frameworks such as NIST, FedRAMP, and FIPS. Experience defining and applying security standards, patterns, guardrails, and technical security controls. Working knowledge of AI/GenAI security, including prompt injection, data leakage, model access controls, AI guardrails, observability, approved model usage, and human oversight. Understanding of security considerations for LLMs, RAG solutions, APIs, containers, and enterprise data integrations. Ability to work effectively with application developers, cloud and infrastructure engineers, cybersecurity teams, enterprise architecture, compliance, risk, and business stakeholders. Strong written and verbal communication skills with the ability to explain technical security risks and requirements clearly. Strong organizational, coordination, and stakeholder management skills. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification is preferred. AWS Certified Security - Specialty, Azure AZ 500, or another relevant cloud security certification is preferred. Desired Skillset: Security experience across Azure and/or GCP in addition to AWS. AI/GenAI security, AI governance, or AI risk management experience. Container and workload security experience covering build time and runtime controls. API security experience, including enterprise API gateways. Security engineering experience with SIEM, firewalls, endpoint/host security, or security configuration management. Experience with AI-enabled cybersecurity capabilities such as security analysis, vulnerability prioritization, detection support, secure code review, or workflow automation. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification. AWS Certified Security - Specialty, Azure Security Engineer Associate (AZ 500), or comparable cloud security certification. Education: Bachelor's degree in Computer Science, Information Systems, or a related field. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh