Architect: Enterprise Identity & Data Security (MIRION)

 Architect: Enterprise Identity & Data Security

Location: can be located at one
 of our North America sites

 Mirion is looking for motivated, experienced, and expert cyber defenders.
 As part of corporate cyber security team and reporting to Chief Information Security Officer (CISO), the Enterprise Identity & Data Security Architect shall perform responsibilities and have qualification, experience and expertise as described below.

POSITION RESPONSIBILITIES

• Define the enterprise wide IAM and Data Security strategy addressing the needs of global IT operations, Operational Technologies (OT – factories / sites) and Connected Products – IIoT solution being offered by Mirion in focused industry verticals.
• Act as an IAM subject matter expert addressing different aspects of the solution – Identity, Authentication, Authorization, Access-Control and Life-cycle Management.
• Act as a Data Security subject matter expert addressing confidentiality, integrity, and privacy requirements.
• Define IAM and Data Security policies, governance model and industry standards adoption.
• Design technical architecture and operational processes to implement Identity and Data Security solutions. A coherent, reusable, reliable and phased architecture to help the business grow and change while aligning to strategic vision.
• Drive adoption of IAM and Data Security controls globally (IT and OT/IIoT) and with different division’s Connected Products offering to Mirion customers.
• Keep track of emerging security threats, technology trends and maintain agile solution framework that can align to growing need of organization while offering resilient cyber security control.
• Work with partner organization to manage IAM and Data Security operations. Operate in-scope cyber security controls at highest assurance level.
• Identify the white space to implement most cost-effective means of achieving organizational goals. 
• Be champion of cyber security discipline and participate/offer user training, educational sessions to internal / external users.

QUALIFICATION REQUIRED

• 10+ years of experience as security engineer/architect – must have worked on large enterprise wide IAM and Data security policy, process, and technology implementation.
• Industry recognized certifications are a plus – e.g., CISSP, SSCP, SANS GSEC, ECSA or similar
• In-depth knowledge of NIST SP 800-53, NIST SP 800-63, NIST SP 800-171, NIST SP 800-57, NIST SP 800-175, GDPR
• In-Depth knowledge of Identity and Access management:
  • designing and onboarding processes related to identity management from the business and technical perspective (e.g., identity enrollment, provisioning, credential management, federation, requesting access and entitlement, accountability of entitlements)
  • design and implement solution using – AD/LDAP, OAuth, OpenID, SAML, Kerberos, SCIM, SPML, XACML | WebAuthN, FIDO, U2F, TOTP, HOTP
  • deep expertise in Azure-AD architecture design (B2B/B2C), SSO, federation, delegated administration, privilege-access-management, 2FA/MFA, Password-less authentication.
• Extensive experience in 
  • Crypto, key-management & PKI technology – Hash, Symmetric / Asymmetric encryption | RSA, ECC crypto | X.509 Cert-Life-Cycle-Management, Code-signing etc.
  • data security – encryption/decryption (at-rest and in-transit), run-time system integrity check, message signing, data obfuscation / pseudonymization, tokenization, dynamic access control and data loss prevention (DLP)
• Bachelor’s degree in Engineering or related field. 

OTHER SKILLS REQUIRED

• Strong understanding of security products and vendors, relevant technologies and trends, and industry standards. 
• Demonstrated experience in gathering and transforming business requirements into a comprehensive technology solution definition.
• Strong team player – work with internal and external stakeholder to solve problems and actively incorporate input from various sources.   
• Excellent communication skills and collaborative working style. Strong critical thinking and analytical skills and ability to think “out of the box” required.
• Willing to travel

Closing Date: April 4th 

Please send your application to:

Louise May, lmay@mirion.com

This position is also posted through external channels.

Thank you,

Mirion HR Team