Cyber Architect

• Assists in the design of cybersecurity architecture systems by evaluating application, system, network and security technologies, developing requirements that meet or exceed compliance and best-practice standards. Develops and implements OT security architectures (e.g., network segmentation, asset inventory management support, secure access, intrusion detection systems).

• Establishes and maintains security policies, procedures, and guidelines for OT and Internet of Things environments. Identifies necessary security controls and design elements for new technologies, processes and tools introduced to the environment.

• Analyzes and documents cybersecurity requirements (technical and functional) for new and existing systems, applications, computer resources and infrastructure. Measures and monitors security architecture, reporting metrics on key components to track effectiveness. Creates architectural blueprints that outline the security measures and controls for OT and IoT environments. Executes assessments at the enterprise or local level across the university, including research and OT/IoT security.

• Collaborates with network security teams to seamlessly integrate security solutions into the infrastructure. Actively supports and provides guidance to IT teams that manage systems, applications and infrastructure so that configuration and settings align with the industry-leading practice. Coordinates with university departments, schools and units to implement secure architecture principles and standards.

• Maintains and approves security architecture standards as part of cybersecurity policies, procedures and standards. Defines detailed security standards and configuration baselines for robust security postures. Develops processes that integrate security architecture with change management and systems development lifecycles (SDLC/IDLC) and operational technologies across the university. Develops, formalizes and publishes secure design patterns and knowledge-based articles to enable the secure development, configuration and deployment of security tools and platforms.

• Stays informed about changes in legal, regulatory, and technology environments (e.g., emerging OT security trends, technologies, compliance requirements) that may affect operations, and communicates relevant updates to senior management and staff.

• Collaborates with cyber functional teams to create and formalize use cases, technical and functional requirements and automation design workflows for respective security tools and platforms, aligning solution designs with Enterprise Security Architecture Framework. Coordinates and collaborates with cyber managed service teams (e.g., VM, SOC, IAM) to review cyber architecture and design components prior to configuration changes, tool updates, and deployment.

• Encourages a workplace culture where all employees are valued, value others and have the opportunity to contribute through their ideas, words and actions, in accordance with the USC Code of Ethics.

MINIMUM QUALIFICATIONS

Greatcandidates for the position of Cyber Architectwill meet the following qualifications:

• 5 years of experience in security architecture design and network security and/or related fields.

• A bachelor's degree or combined experience and education as substitute for minimum education.

• Proven experience in security architecture design, with the ability to conceptualize and implement effective security frameworks.

• Familiarity with relevant industry frameworks (e.g., ISO 27001, NIST CSF).

• Extensive knowledge of network security technologies and solutions.

• Understanding of cybersecurity best practices and the ability to apply them effectively.

• Working knowledge of network security concepts and strategies, including fundamentals and attack strategies.

• Ability to coordinate and work efficiently with managed service teams (e.g., VM,SOC, IAM).

• Knowledge and experience with OT and IoT devices and implementation of security controls to protect and monitor those devices and environments.

• Knowledge of OT system (e.g., SCADA, PLCs, Industrial Controls) and IoT device function, including deploymentarchitecture and underlying protocols for communications (e.g., data transfer).

• Understanding of architectural principles and measures in protecting OT environments and IoT devices.

• Familiarity with application frameworks, security concepts and strategies to allow for secure application environments.

• Experience with operational technology architecture requirements and concepts

• Knowledge of modern data center technologies (e.g., virtualization, containerization, cloud computing, disaster recovery).

• Ability to design, evaluate and document processes.

• Understanding of and experience with Enterprise Security Architecture frameworks, Software Development Lifecycle, and Industry Leading practices across the full scope of cyber domains and capabilities.

• Understanding of Software Development Lifecycle (SDLC) and Infrastructure Development Lifecycle (IDLC) processes, integrating security considerations throughout.

PREFERRED QUALIFICATIONS

Exceptional candidates for the position of Cyber Architectwill also bring the following qualifications or more:

• 7 years of related experience.

• A bachelor's degree in information science or computer science or computer engineering or in related field(s); or combined experience/education as substitute for minimum education.

• Experience leading teams in process review and improvement.

• Experience in a university environment.

In addition, the successful candidate must also demonstrate, through ideas, words and actions, a strong commitment to USC's Unifying Values of integrity, excellence, community, well-being, open communication, and accountability.