GENERAL SUMMARY: Reporting to the Director of Medical Device and Emerging Technology Security, the Cloud Security Architect - Emerging Technologies is a technical role that works collaboratively across all functional areas related to cloud-based information technology systems, networks, applications, and data within our healthcare institution. This position provides expert guidance on strategic and technical initiatives for cloud security, with a focus on Azure environments. The role ensures cloud security programs and technical controls adhere to policies, applicable laws, and regulations specific to the healthcare industry. The Cloud Security Architect will work closely with the Enterprise Architecture team to develop and implement secure cloud designs that can be effectively operationalized. The Cloud Security Architect - Emerging Technologies position is a valued member of the IPSO department and will work closely with other members of the SOC, IPSO (Risk, Privacy, etc.), and IT programs to develop and implement a comprehensive approach to the management of security risks in cloud enabled workflows and applications.
EDUCATION/EXPERIENCE REQUIRED:
- Bachelor's Degree in Information Systems, Computer Science, or related field required.
- Minimum of five (5) years of direct, hands-on experience in cloud security architecture design, with a strong focus on Azure environments.
- Minimum of ten (10) years of overall work experience in IT, Information Security, or related field within healthcare or highly regulated industries. Extensive knowledge of cloud security best practices, regulatory compliance requirements (e.g., HIPAA, HITECH), and risk management in healthcare settings.
- Strong experience in implementing and managing Cloud-Native Application Protection Platform (CNAPP) solutions.
- Proven experience in designing and implementing secure Azure architectures, including Azure Active Directory, Azure Security Center, and Azure Sentinel.
- In-depth understanding of cloud security concepts such as shared responsibility model, identity and access management (IAM), data encryption, and secure network design in cloud environments.
- Experience with cloud security assessment tools and methodologies.
- Strong analytical and problem-solving skills for designing, creating, and testing complex cloud-based systems in healthcare environments.
- Excellent communication skills to articulate complex cloud security concepts to both technical and non-technical stakeholders.
- Proficiency in automation and scripting languages relevant to cloud security, such as Python, PowerShell, or Terraform.
- Experience in securing cloud migration processes and implementing best practices for secure cloud adoption.
- Experience delivering detailed architectural design packages, familiarity with TOGAF or other architectural frameworks/standards preferred.
CERTIFICATIONS/LICENSURES REQUIRED:
- At least one of the following certifications are required, but two are preferred: Cloud Security Certification: CCSP (Certified Cloud Security Professional) or CCSK (Certificate of Cloud Security Knowledge).
- Azure-specific Certification: Microsoft Certified:
- Azure Security Engineer Associate or Microsoft Certified: Azure Solutions Architect Expert.
- Security Certification: CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager).
Additional Information
- Organization: Corporate Services
- Department: Ascension MEDICAL DEVICE SECUR
- Shift: Day Job
- Union Code: Not Applicable
|
Henry Ford Health System
May 23, 2025