Lead Information Security Architect

Company

Federal Reserve Bank of San Francisco

We are the Federal Reserve Bank of San Francisco (FRBSF)—public servants with a mission to advance the nation’s monetary, financial, and payment systems to build a stronger economy for all Americans.

We are a community-engaged bank, and are committed to understanding and serving the vibrant, expansive communities of the Twelfth District.

That means we seek and appreciate new perspectives.

We respect people for what they do and for who they are.

We build opportunities to learn and grow.

When you join the SF Fed, you become part of a diverse team united in its purpose to promote an economy that works for everyone.
We empower our people to balance their life and work responsibilities.

That’s why we offer a flexible hybrid work model that allows you to collaborate with office colleagues on some days, and work from home on others.

Information Security at the FRBSF has a position for a Senior or Lead Information Security Architect who will join us in evolving application security and fostering collaboration with development teams.

 This role offers the opportunity to use your technical skills, and security understanding, to review and design solutions that assist our development teams in implementing DevSecOps and creating secure and resilient applications and environments.

 This role requires strong analytical, communication, problem solving, engineering, design and interpersonal skills.  In this role you will work closely with other members of the Information Security team, our application development groups, and other groups across the Federal Reserve System (FRS), helping to build strong relationships across functions and create solutions that provide effective, seamless security to protect our custom developed products.

Essential Responsibilities:


* Evolve and mature our models, templates, standards and procedures related to secure application development and secure application and cloud architecture.  Ensure these artifacts are in alignment with FRS policy and standards.


* Consult with our development teams to help them align with FRS policy and standards and meet the risk appetite of the customer.


* Work with members of application development teams to review and create secure application and infrastructure designs and patterns.


* Assist development teams by reviewing threat models related to applications and related systems.  Analyze potential business impact and exposure leading to risk, based on emerging security threats, vulnerabilities, configurations, threat actor TTPs, etc.


* Evaluate CICD pipeline design, and related development team processes and help to mature and secure creation, management and utilization of pipelines.


* Assist in identification and integration of security focused tooling into development and operations processes.


* Support secure application architecture within the Federal Reserve System by fostering constructive dialo...