Security Architect, Senior Director

Reporting to the SVP of Product Engineering, this role leads and directs how all of Teradata’s Engineering teams think, build, and deliver towards a unified security architecture and technical strategy. This Security Architect will operate as a Domain Architect, at a Sr Director level, and will leverage broad technical knowledge of security architecture within a SaaS Data Platform offering. This role guides and defines overarching technical security strategies, across the core Teradata Product, as well as with our 3rd party partners and public cloud partners, AWS, Azure and Google Cloud. This role understands and predicts customer and market requirements, to ensure Teradata solutions are designed and implemented to the highest security standards and are differentiated in the marketplace.

The optimal candidate for this role is a highly technical security subject matter expert and will work in conjunction with Teradata Cloud Architects and Senior Developers, along with Product Management and Teradata’s CISO, to ensure the security and compliance of Engineering’s deliverables. The Security Architect is also focused on enabling secure deployments including end-to-end encryption, identity & access management implementation, third-party software integration, incident management capabilities, system hardening requirements, and security requirements development for our development teams.

Key Areas of Responsibility

• Ensure a highly secure and compliant product architecture
• Define and communicate Product Engineering’s security-focused technical strategy and overarching architectures
• Leverage current and future security technologies to foresee and capitalize on security opportunities and trends, so as to increase Teradata’s differentiation
• Partner closely with Product Management and the Security Organization to ensure alignment and define priority of Engineering investments
• Support relevant requests from customers and global partners, related to Engineering’s security approaches and strategies
• Guide other security architects to ensure quality decision making and continued excellence in execution
• Define and/or contribute to security standards to be implemented by development teams
• Advise developers on cloud architectures and designs to meet accreditation standards
• Verify on-prem and Cloud deployments match defined architecture
• Build secure architectures to support massively globally scaled, and multi-tenant, environments
• Liaison with our consulting practice to develop/enhance and document information security policies, procedures and standards required to design cloud-based solutions
• Ensure adherence to standard regulatory and compliance requirements by overseeing regular 3rd party security audits and penetration testing
• Understand customer base data security needs and applicable standard compliance requirements, and help design solutions fulfilling those requirements
• The SA will have excellent customer facing skills to be able to discuss security concerns raised by client security professionals and executives

Qualifications

• 15+ years of demonstrated product security, information security, risk management & compliance experience
• 10+ years of experience with cloud compliance and/or common industry security standards
• Experience with encrypting, tokenizing, and/or hashing techniques to maximize data protection
• Demonstrated capability to design secure enterprise applications and/or systems on public / hybrid cloud as well as secure solutions for data in transit
• Experience with cloud privileges, tenant isolation, and RBAC solutions at enterprise scale
• Development experience in C, C++ and/or Java, as well as common scripting languages
• Experience with RESTful Microservices
• Experience with container technologies such as Kubernetes and Docker
• Understanding of industry regulatory and compliance requirements (i.e., FedRAMP, PCI-DSS, NIST, HIPAA)
• Technical experience working with database technologies
• Experience with the application of threat modeling or other risk identification techniques
• Knowledge of professional software engineering practices & best practices
• Master’s degree in Computer Science or equivalent experience preferred
• Industry certifications such as CISSP or CCSP preferred
• Excellent written and verbal communication skills

Basic Qualifications

• At least 15 years of professional experience as a security architect