Senior Cloud and Product Security Architect

Senior Cloud and Product Security Architect

Company:

The Boeing Company

Job ID:

00000421742

Date Posted:

2024-04-12

Location:

CAN - Vancouver, Canada

Job Description Qualifications:

Boeing Vancouver is seeking a Senior Cloud and Product Security Architect, reporting to the Director, Flight operations software engineering. The position will be based from our Richmond, British Columbia office, and a virtual work style is offered.

The Boeing Digital Aviation Solutions (DAS) Application Engineering Senior Cloud and Product Security Architect must have broad cloud and application security background with experience in leading the definition and implementation of secure architecture and coding best practices for cloud native, customer-facing software solutions.

The candidate needs strong technology leadership, analytical skills, teamwork, and excellent communication skills. The candidate will need to communicate at different levels in the organization to other technical personnel, business leaders and customers. This role will drive best-in-class software security practices into the Application Engineering organization in support of DAS modernization efforts to bring market-leading solutions to our aviation customers.

Position Responsibilities:

• Develops and leads implementation of security architecture and secure coding standards and strategies for DAS software solutions.

• Contribute to the definition of overall DAS architecture security principles, guidelines, patterns, training, and standards.

• Drive adoption of DevSecOps practices into the software engineering organization by working directly with teams on implementation.

• Provide effective communication to business and technical community on security architecture topics.

• Perform security tool evaluations and make recommendations for adoption.

• Assesses security impact of architectural decisions to product lifecycle.

• Leads the identification of design constraints and ensures architecture conforms to security requirements.

• Work across software engineering teams and architects for end to end alignment, process improvements and future designs.

• Contributes to the standard software artifacts including the Software Architecture Document, Software Architecture models and other standard artifacts.

• Work with customers to understand their security requirements.

• Ensure compliance with Boeing Information Security requirements.

• Collaborate with cloud service providers, Boeing InfoSec and Boeing Enterprise External Cloud teams to architect best-of-breed application security solutions across multiple clouds.

• Reviews internal and vendor artifacts for security architecture compliance.

This position has been identified as a virtual opportunity and will not require the selected candidate to relocate.

Employer will not sponsor applicants for employment visa status.

Basic Qualifications (Required Skills/Experience):

• 10+ years of IT implementation experience (Highly technical and analytical).

• 5+ years of experience in IT security, compliance and risk management, including privacy, controls, etc.

• Hands-on technical expertise in Security Architecture, automation, integration, and deployment (DevSecOps).

• Strong verbal and written communications skills and ability to lead effectively across organizations.

• Proven experience leading a globally distributed team.

• Proven experience to research, advise, compare and recommend technology solutions; ability to demonstrate and maintain method of keeping current on new technologies.

• Must be legally able to work in Canada.

• Individual must not pose a risk for safeguarding of controlled goods.

• Must be eligible to handle US export-controlled data.

Preferred Qualifications (Education/Experience):

• 7+ years’ experience in IT security, compliance, and risk management, including privacy, controls, etc.

• Proven ability to deliver application and infrastructure security solutions in a multi-cloud environment.

• DevSecOps automation best practices

• DFARS/FedRAMP/ITAR

• NIST Cybersecurity Framework

• ISO 27001

• Security Development Lifecycle

• AWS/Azure/GCP Security services

• Cloud Security monitoring process

• Certificate Management

• Threat modeling

• Dynamic and Static Application Security Testing (DAST & SAST)

• Software Composition Analysis

Typical Education and Experience:

Education/experience typically acquired through advanced technical education (e.g. Bachelor) and typically 14 or more years' related work experience or an equivalent combination of technical education and experience (e.g. PhD+9 years' related work experience, Master+12 years' related work experience, 18 years' related work experience, etc.).

Relocation:

Relocation assistance is not a negotiable benefit for this position. Candidates must live in the immediate area or relocate at their own expense.

Additional Information:

This requisition is for a locally hired position in Canada. The employer is Boeing Canada.  Candidates must be legally authorized to work in Canada. Benefits and pay are determined by Canada and are not on Boeing US-based payroll. This is not an expatriate assignment.

Summery Pay Range: CAD $110,000.00 - $195,000.00

Applications for this position will be accepted through May 01st, 2024

Boeing is the world's largest aerospace company and leading manufacturer of commercial airplanes and defense, space and security systems. We are engineers and technicians. Skilled scientists and thinkers. Bold innovators and dreamers. Join us, and you can build something better for yourself, for our customers and for the world.

Relocation:

No relocation available

Export Control Requirement:

Not an export control position

Safety Sensitive:

This is not a safety sensitive position

Contingent Upon Award Program

This position is not contingent upon program award

Experience Level:

Individual Contributor - 5

Job Type:

Regular

Job Code:

BAULI5 (B80)