Security Development Operations Architect

Security Development Operations Architect

The Security Development Operations (SecDevOps) Architect is responsible for the design, development, and implementation of web applications, command line scripts, and diverse technical deliverables of the Security Development Operations (SecDevOps) Team under NYP Information Security. The SecDevOps Architect will use agile methodologies and modern development practices to conceptualize, create, operationalize, and support bespoke applications that provide vital capabilities to Information Security and other stakeholders.

Essential Job Duties

• Design, develop, and maintain scalable web applications using modern Python and Node.js frameworks.
• Write clean, maintainable, and secure code following best practices and internal coding standards.
• Write HTML, JavaScript, and CSS to satisfy user interface requirements.
• Create, secure, and implement APIs for data exchange and integration with other systems.
• Write performant SQL queries for relational databases that support web application functionality.
• Develop and execute unit tests to ensure code quality.
• Debug, diagnose, and correct issues impacting the performance of web applications, scripts, and other solutions.
• Use version control system (e.g., Git) for all development activities. 
• Work with a DevOps platform to manage code repositories, track work, and collaborate with team members.
• Develop CI/CD pipelines to automate and streamline deployments. 
• Participate in, and contribute to, code reviews and other collaborative technical sessions.
• Create and maintain detailed technical documentation.
• Perform periodic system administration and configuration tasks in Linux server environments
• Continually improve web application functionality and user experience through ongoing collaboration with stakeholders and Information Security leadership.
• Collaborate with project stakeholders to identify emerging requirements, operational and technical gaps, and potential targets for automation. 
• Implement and utilize various open-source and commercial software solutions to strengthen software development practices and enhance security.
• Stay up to date on industry trends, new technologies, and best practices directly applicable to the role.
• Organize and lead technical workshops for team members and other user-facing training events.
• Work effectively as part of a team and independently.
• Perform various technical, administrative, and other tasks as required.

“May require occasional on-site presence; therefore, should live within a commutable distance.  No relocation assistance available.”

Required Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a computer related discipline or equivalent experience
• SEC401, Security+, or similar security professional certifications
• Experience creating web applications using Python frameworks 
• Experience creating web applications using Node.js frameworks
• Experience writing command line scripts with Python
• Experience working with REST APIs
• Experience writing HTML, CSS, and JavaScript for user interfaces
• Experience with relational databases and SQL
• Experience with the Linux operating system
• 10+ years of relevant web application development experience
• Experience configuring and administering web and application services in Linux
• Strong communication skills to communicate systems proposals to management and customers, and provide systems diagnoses and resolution for current systems
• Strong organization skills to prioritize work and deliver on complex projects
• Strong interpersonal skills to interact with customers, leadership, and team members.
• Able to work autonomously and collaboratively

Preferred Qualifications:

• Knowledge and experience with authentication and authorization mechanisms, including two-factor and federation platforms.
• Knowledge and experience with networking, network security platforms including SIEM, firewalls, intrusion detection and prevention, web proxies and internet content filtering.
• Knowledge and experience with the following security technologies: cryptography and encryption products, data handling and classification procedures, vulnerability remediation 
• Knowledge and experience of security operations orchestration platforms, infrastructure monitoring platforms, and automation fundamentals

Join a healthcare system where employee engagement is at an all-time high. Here we foster a culture of respect, diversity, and inclusion. Enjoy comprehensive and competitive benefits that support you and your family in every aspect of life. Start your life-changing journey today.

Please note that all roles require on-site presence (variable by role). Therefore, all employees should live within a commutable distance to NYP.

NYP will not reimburse for travel expenses.

__________________

• 2024 “Great Place To Work Certified”
• 2024 “America’s Best Large Employers” – Forbes
• 2024 “Best Places to Work in IT” – Computerworld
• 2023 “Best Employers for Women” – Forbes
• 2023 “Workplace Well-being Platinum Winner” – Aetna
• 2023 “America’s Best-In-State Employers” – Forbes
• “Silver HCM Excellence Award for Learning & Development” – Brandon Hall Group

NewYork-Presbyterian Hospital is an equal opportunity employer.

Salary Range:

It all begins with you. Our amazing compensation packages start with competitive base pay and include recognition for your experience, education, and licensure. Then we add our amazing benefits, countless opportunities for personal and professional growth and a dynamic environment that embraces every person. Join our team and discover where amazing works.