Discount Tire
Pr Information Security Architect
Discount Tire, Scottsdale, Arizona, us, 85261
Overview
Here at Discount Tire, we celebrate the spirit of our people with extraordinary pride and enthusiasm. Our business has been growing for more than 60 years and now is the best time in our history to join us. We are opening more locations every year and we are always looking for qualified individuals to join us in our growth. We are a company that promotes from within, both in our retail and corporate operations. We are seeking an experienced Principal Cybersecurity Architect with a broad skill set encompassing Security Architecture/engineering, identity services, cloud security, and application security. In this role, you will be responsible for designing, evangelizing, and maintaining robust enterprise security architecture solutions to protect our organization's information assets across various platforms and environments. You will collaborate with cross-functional teams to ensure the confidentiality, integrity, and availability of our systems and data; additional responsibilities include mentoring team members and embodying IOOGA (Integrity, Our People, Our Customers, Growth and Attitude).
Essential Duties and Responsibilities:Develop comprehensive security architectures, strategies, standards, and guidelines that address security engineering, identity/access management, network/cloud infrastructure/security, and application security requirements. Design scalable and resilient security solutions that align with business goals and regulatory compliance.Develop and publish security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimates.Plans security systems by evaluating network and security technologies; developing requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related security and network devices; designs public key infrastructures (PKIs), including use of Certificate Authorities (CAs) and digital signatures as well as hardware and software; adhering to industry standards.Architect and implement security controls and best practices (SASE) for cloud infrastructure (e.g., AWS, Azure,) to protect data and workloads in cloud environments. Evaluate and recommend security services and technologies to enhance cloud security posture.Collaborate with development teams to integrate security into the software development lifecycle (SDLC) and ensure secure coding practices are followed. Conduct security assessments inclusive of penetration testing to identify and remediate application security vulnerabilities.Updates job knowledge by tracking and understanding emerging security practices, standards, and technologies - and being able to contextualize for Discount Tire environment and partner with engineering teams to operationalize; participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations and sharing learnings with peers and teams.Collaborate with the Enterprise Architecture team to review new technologies and solutions, publish EA standards and strategies, and to ensure compliance with the company's security standards and best practices.Qualifications:
Education: Relevant certifications (e.g., CISSP, CISM, CEH) etc.Experience: Minimum of 8 years of experience in information security architecture with expertise in security engineering, identity/authentication architecture, cloud security, and application security.Proven understanding of Enterprise Architecture practices, including but not limited to, models, reference architectures, patterns, standards, and frameworks is necessary.Technical Skills:
Proficiency in designing security controls, security tools, needs/assessments, and technologies services.In-depth knowledge of IAM solutions and protocols (e.g., LDAP, SAML, OAuth, OpenID Connect).IAM architecture, SASE and Zero Trust designsExpertise with cloud security principles, services, and controls in major cloud platforms (e.g., AWS, Azure, GCP).Expertise in application security concepts, tools, and techniques (e.g., secure coding practices, static and dynamic application security testing).
Strong analytical and problem-solving skills with the ability to assess complex security challenges and develop effective solutions.Excellent written and verbal communication skills with the ability to communicate technical concepts to non-technical stakeholders. Demonstrated ability to communicate across all levels of the organization, presenting complex ideas concisely and clearly; able to articulate ideas verbally and in writing is required.Proven ability to lead and influence cross-functional teams and drive security controls. Be a security evangelist with the technology teams.Proven experience designing network and/or technical security solutions is necessary. Understanding of Service-Oriented and Cloud-based architectural principles and patterns is needed.Working knowledge of network security, network hardware configuration, network protocols, and networking standards is required. Proven knowledge of common enterprise IT security controls, including but not limited to, firewalls, SIEM platforms, NAC, IPS/IDS, encryption, authentication, tokenization, and desktop virtualization is required. Knowledge of security risk assessment, best practices, and frameworks preferred.Proven knowledge of security ramifications at all layers of the Open Systems Interconnection (OSI) model required.Knowledge of systems, networking devices, virtualization, mobile, and web-based technologies required.Experience with SAP financial and ecommerce platforms preferred.Proficiency with Microsoft office, including skills with Word, Excel, SharePoint, PowerPoint, and Visio is necessary.Proven understanding of project management and the software development lifecycle is needed.Proven collaboration and negotiation skills are vital. Proven ability to provide and recommend innovative ideas with the skill to align projects and Company strategy is critical.Ability to work efficiently and accurately under pressure, meet deadlines, present a professional demeanor, and work well independently is essential.Troubleshooting and organizational skills with a Can-Do attitude and the ability to adjust to changing requirements is necessary.Maintaining confidentiality, treating others with respect, and upholding Company values are critical to success.
Educational Requirements:
This position requires a Bachelor's Degree in Computer Science, Engineering, Criminal Law or related field, or equivalent work experience.
Security-related, cloud-related, and project management certifications are highly desirable
Work Days:
Normal work days are Monday through Friday. Occasional Saturdays and Sundays may be necessary.
Work Hours:
Normal work hours are 8:00 a.m. to 5:00 p.m. Additional hours may be necessary.
Discount Tire provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local law.
#LI-Hybrid
#LI-GW1
Here at Discount Tire, we celebrate the spirit of our people with extraordinary pride and enthusiasm. Our business has been growing for more than 60 years and now is the best time in our history to join us. We are opening more locations every year and we are always looking for qualified individuals to join us in our growth. We are a company that promotes from within, both in our retail and corporate operations. We are seeking an experienced Principal Cybersecurity Architect with a broad skill set encompassing Security Architecture/engineering, identity services, cloud security, and application security. In this role, you will be responsible for designing, evangelizing, and maintaining robust enterprise security architecture solutions to protect our organization's information assets across various platforms and environments. You will collaborate with cross-functional teams to ensure the confidentiality, integrity, and availability of our systems and data; additional responsibilities include mentoring team members and embodying IOOGA (Integrity, Our People, Our Customers, Growth and Attitude).
Essential Duties and Responsibilities:Develop comprehensive security architectures, strategies, standards, and guidelines that address security engineering, identity/access management, network/cloud infrastructure/security, and application security requirements. Design scalable and resilient security solutions that align with business goals and regulatory compliance.Develop and publish security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimates.Plans security systems by evaluating network and security technologies; developing requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related security and network devices; designs public key infrastructures (PKIs), including use of Certificate Authorities (CAs) and digital signatures as well as hardware and software; adhering to industry standards.Architect and implement security controls and best practices (SASE) for cloud infrastructure (e.g., AWS, Azure,) to protect data and workloads in cloud environments. Evaluate and recommend security services and technologies to enhance cloud security posture.Collaborate with development teams to integrate security into the software development lifecycle (SDLC) and ensure secure coding practices are followed. Conduct security assessments inclusive of penetration testing to identify and remediate application security vulnerabilities.Updates job knowledge by tracking and understanding emerging security practices, standards, and technologies - and being able to contextualize for Discount Tire environment and partner with engineering teams to operationalize; participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations and sharing learnings with peers and teams.Collaborate with the Enterprise Architecture team to review new technologies and solutions, publish EA standards and strategies, and to ensure compliance with the company's security standards and best practices.Qualifications:
Education: Relevant certifications (e.g., CISSP, CISM, CEH) etc.Experience: Minimum of 8 years of experience in information security architecture with expertise in security engineering, identity/authentication architecture, cloud security, and application security.Proven understanding of Enterprise Architecture practices, including but not limited to, models, reference architectures, patterns, standards, and frameworks is necessary.Technical Skills:
Proficiency in designing security controls, security tools, needs/assessments, and technologies services.In-depth knowledge of IAM solutions and protocols (e.g., LDAP, SAML, OAuth, OpenID Connect).IAM architecture, SASE and Zero Trust designsExpertise with cloud security principles, services, and controls in major cloud platforms (e.g., AWS, Azure, GCP).Expertise in application security concepts, tools, and techniques (e.g., secure coding practices, static and dynamic application security testing).
Strong analytical and problem-solving skills with the ability to assess complex security challenges and develop effective solutions.Excellent written and verbal communication skills with the ability to communicate technical concepts to non-technical stakeholders. Demonstrated ability to communicate across all levels of the organization, presenting complex ideas concisely and clearly; able to articulate ideas verbally and in writing is required.Proven ability to lead and influence cross-functional teams and drive security controls. Be a security evangelist with the technology teams.Proven experience designing network and/or technical security solutions is necessary. Understanding of Service-Oriented and Cloud-based architectural principles and patterns is needed.Working knowledge of network security, network hardware configuration, network protocols, and networking standards is required. Proven knowledge of common enterprise IT security controls, including but not limited to, firewalls, SIEM platforms, NAC, IPS/IDS, encryption, authentication, tokenization, and desktop virtualization is required. Knowledge of security risk assessment, best practices, and frameworks preferred.Proven knowledge of security ramifications at all layers of the Open Systems Interconnection (OSI) model required.Knowledge of systems, networking devices, virtualization, mobile, and web-based technologies required.Experience with SAP financial and ecommerce platforms preferred.Proficiency with Microsoft office, including skills with Word, Excel, SharePoint, PowerPoint, and Visio is necessary.Proven understanding of project management and the software development lifecycle is needed.Proven collaboration and negotiation skills are vital. Proven ability to provide and recommend innovative ideas with the skill to align projects and Company strategy is critical.Ability to work efficiently and accurately under pressure, meet deadlines, present a professional demeanor, and work well independently is essential.Troubleshooting and organizational skills with a Can-Do attitude and the ability to adjust to changing requirements is necessary.Maintaining confidentiality, treating others with respect, and upholding Company values are critical to success.
Educational Requirements:
This position requires a Bachelor's Degree in Computer Science, Engineering, Criminal Law or related field, or equivalent work experience.
Security-related, cloud-related, and project management certifications are highly desirable
Work Days:
Normal work days are Monday through Friday. Occasional Saturdays and Sundays may be necessary.
Work Hours:
Normal work hours are 8:00 a.m. to 5:00 p.m. Additional hours may be necessary.
Discount Tire provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local law.
#LI-Hybrid
#LI-GW1