Senior Cloud and Product Security Architect

Job Responsibility:

At Boeing, we innovate and collaborate to make the world a better place. From the seabed to outer space, you can contribute to work that matters with a company where diversity, equity and inclusion are shared values. We're committed to fostering an environment for every teammate that's welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.

Boeing Vancouver is seeking a Senior Cloud and Product Security Architect , reporting to the Director, Flight operations software engineering. The position will be based from our Richmond, British Columbia office, and a virtual work style is offered.

The Boeing Digital Aviation Solutions (DAS) Application Engineering Senior Cloud and Product Security Architect must have broad cloud and application security background with experience in leading the definition and implementation of secure architecture and coding best practices for cloud native, customer-facing software solutions.

The candidate needs strong technology leadership, analytical skills, teamwork, and excellent communication skills. The candidate will need to communicate at different levels in the organization to other technical personnel, business leaders and customers. This role will drive best-in-class software security practices into the Application Engineering organization in support of DAS modernization efforts to bring market-leading solutions to our aviation customers.

Position Responsibilities :

• Develops and leads implementation of security architecture and secure coding standards and strategies for DAS software solutions.

• Contribute to the definition of overall DAS architecture security principles, guidelines, patterns, training, and standards.

• Drive adoption of DevSecOps practices into the software engineering organization by working directly with teams on implementation.

• Provide effective communication to business and technical community on security architecture topics.

• Perform security tool evaluations and make recommendations for adoption.

• Assesses security impact of architectural decisions to product lifecycle.

• Leads the identification of design constraints and ensures architecture conforms to security requirements.

• Work across software engineering teams and architects for end to end alignment, process improvements and future designs.

• Contributes to the standard software artifacts including the Software Architecture Document, Software Architecture models and other standard artifacts.

• Work with customers to understand their security requirements.

• Ensure compliance with Boeing Information Security requirements.

• Collaborate with cloud service providers, Boeing InfoSec and Boeing Enterprise External Cloud teams to architect best-of-breed application security solutions across multiple clouds.

• Reviews internal and vendor artifacts for security architecture compliance.

This position has been identified as a virtual opportunity and will not require the selected candidate to relocate.

Employer will not sponsor applicants for employment visa status.

Basic Qualifications (Required Skills/Experience):

• 10+ years of IT implementation experience (Highly technical and analytical).

• 5+ years of experience in IT security, compliance and risk management, including privacy, controls, etc.

• Hands-on technical expertise in Security Architecture, automation, integration, and deployment (DevSecOps).

• Strong verbal and written communications skills and ability to lead effectively across organizations.

• Proven experience leading a globally distributed team.

• Proven experience to research, advise, compare and recommend technology solutions; ability to demonstrate and maintain method of keeping current on new technologies.

• Must be legally able to work in Canada.

• Individual must not pose a risk for safeguarding of controlled goods.

• Must be eligible to handle US export-controlled data.

Preferred Qualifications (Education/Experience):

• 7+ years' experience in IT security, compliance, and risk management, including privacy, controls, etc.

• Proven ability to deliver application and infrastructure security solutions in a multi-cloud environment.

• DevSecOps automation best practices

• DFARS/FedRAMP/ITAR

• NIST Cybersecurity Framework

• ISO 27001

• Security Development Lifecycle

• AWS/Azure/GCP Security services

• Cloud Security monitoring process

• Certificate Management

• Threat modeling

• Dynamic and Static Application Security Testing (DAST & SAST)

• Software Composition Analysis

Typical Education and Experience:

Education/experience typically acquired through advanced technical education (e.g. Bachelor) and typically 14 or more years' related work experience or an equivalent combination of technical education and experience (e.g. PhD+9 years' related work experience, Master+12 years' related work experience, 18 years' related work experience, etc.).

Relocation:

Relocation assistance is not a negotiable benefit for this position. Candidates must live in the immediate area or relocate at their own expense.

Additional Information:

This requisition is for a locally hired position in Canada. The employer is Boeing Canada. Candidates must be legally authorized to work in Canada. Benefits and pay are determined by Canada and are not on Boeing US-based payroll. This is not an expatriate assignment.

Summery Pay Range: CAD $110,000.00 - $195,000.00

Applications for this position will be accepted through July 06th, 2024

Export Control Requirements: Not an export control position

Equal Opportunity Employer:

We are an equal opportunity employer. We do not accept unlawful discrimination in our recruitment or employment practices on any grounds including but not limited to; race, color, ethnicity, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military and veteran status, or other characteristics covered by applicable law.

We have teams in more than 65 countries, and each person plays a role in helping us become one of the world's most innovative, diverse and inclusive companies. We are proud members of the Valuable 500 and welcome applications from candidates with disabilities. Applicants are encouraged to share with our recruitment team any accommodations required during the recruitment process. Accommodations may include but are not limited to: conducting interviews in accessible locations that accommodate mobility needs, encouraging candidates to bring and use any existing assistive technology such as screen readers and offering flexible interview formats such as virtual or phone interviews.