IT Security Solution Architect – Senior Manager Full Time

Boston Consulting Group
WHAT YOU’LL DOThe IT Architect provides consulting expertise and thought leadership for the internal BCG Secure Identity and Data program. The IT Architect provides technical consulting for secure identity and data architecture, design, and strategy; and is responsible for assisting with technical implementation and product integration for solutions across hybrid on-premises, multi-cloud and SaaS ecosystems, and influencing engineering decisions and outcomes that drive business success. The IT Architect ensures the digital applications, tools, and services protect our data, our clients’ data, and our intellectual property; are resilient to cyber-attack; meet BCG policy and standards, regulatory requirements, and industry best practices; while using a risk-based approach to meeting BCG business needs and objectives. The IT Architect works with teams inside BCG to secure enterprise information by determining identity, access, and security requirements, planning, implementing, testing, and supporting secure systems, participating in IT projects as a Subject Matter Expert, preparing security standards, policies and procedures, and mentoring team members.YOU’RE GOOD AT

• Determining requirements by evaluating business strategies and requirements, implementing information security standards, conducting system and vulnerability analyses and risk assessments, recommending secure architecture aligned to business architecture, and identifying/driving remediation of integration issues.
• Support implementation, maintenance, and troubleshooting of Information Protection issues notably for CASB, DLP, AIP, and related services.
• Researching and analyzing emerging technologies, designing, and advocating new technologies, architectures, and IAM products in collaboration with system and service owners.
• Providing expert knowledge of solution/application architecture for identity related capabilities as well as methodologies in the software development life cycle.
• Managing end to end delivery of projects with hands on involvement in the development and configuration of products around data and identity services.
• Maintaining security data and identity principles by ensuring compliance to standards, policies, regulatory requirements, and good industry practices are achieved.
• Self-managing progress and status of tasks and deliverables on projects and escalating issues and risks timely.
• Interacting with stakeholders and possessing the ability to influence direction, articulate risks and advocate for solutions and roadmaps.
• Completing market assessments on vendor products, packages, and services; guiding tests and implementation of products solving enterprise information security requirements.
• Suggesting and implementing alternative mitigations/compensating controls to allow for business to continue while protecting BCG’s assets.
• Guiding the configuration, implementation, monitoring, and support for software and systems with identity and access management solutions that will help ensure compliance with regulatory, industry, and corporate policies and procedures.
• Partnering with cross functional teams to ensure compliance to industry and company standards including ISO 27001, SOC2, NIST, GDPR, and DPO standards.
• Subject Matter Expert and security domain participant for overall enterprise architecture and squad related technology.
• Updating job knowledge by tracking and understanding emerging practices and standards; participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations.
• Vendor escalations and Major Incident Management support for business critical services.
• Able to provide L3 operational support for Secrets Management tooling and oversight of L1/L2 ops issues.

YOU BRING (EXPERIENCE & QUALIFICATIONS)

• Bachelor’s degree (or equivalent)
• 10+ years’ experience working with Microsoft Active Directory and Azure Active Directory
• 7+ years’ experience working with AWS, GCP, Azure, or Alibaba cloud
• Understanding of API concepts and RESTful services
• Understanding of cloud security, zero trust, risk-based authentication, and multi-factor authentication (MFA) solutions
• Hands-on/direct experience integrating web, single-page, native applications through API endpoints, API services for machine-to-machine authentication
• Related certifications ( Security Plus, CISSP, CCSP, ITIL Foundations, CE+, etc)
• Experience with Information Rights Management solutions (AIP)
• Experience with Cloud Access Security Brokers (CASB) and Data Loss Prevention (DLP) services across the Hybrid Cloud
• Knowledge of Data Classification concepts and strategies
• Experience working in Agile, knowledge of Jira, Jira Align, Miro, and related tools and principals
• Experience as a change management practitioner using industry best practices and ServiceNow tooling and workflows
• Knowledge and experience with automating solutions using one or more languages ( , Python, PowerShell, Terraform, or similar)

YOU’LL WORK WITHYou will work in a fast-paced, intellectually intense, service-oriented environment to interpret rules and guidelines flexibly to enhance the business and in keeping with BCG’s values and culture. You will be a part of a team of professionals in support of internal IT, business professionals, and consultants delivering business and management strategy to our clients. You will work with enterprise architects, IT and business professionals, application developers, and analysts providing capabilities, tools, and support for our consultants. You will be an integral part of the BCG Identity & Access Management team in delivering Information Technology for all of BCG.