Cloud Security Posture Architect

Freddie Mac

Remote Eligibility

On-site

Domain

Cloud security

State

Virginia

City

McLean

Job Description

Posted on:

February 24, 2025

Primary NIST Speciality

Securely Provision

NIST Sub-speciality

Systems Architecture

Seniority

Senior

Salary ($K)

150

224

Summary and company overview

Position Overview:

The Cloud Security Posture Architect Technical Lead will collaborate the organizations security architecture team to validate the implementation of security controls within Lines of Business (LOB) systems and solutions. This role focuses on ensuring robust security measures across LOB projects and initiatives! This role will be directly involved in the validation of secure design of LOB applications and enterprise services in addition to the following:

Company Overview:

At Freddie Mac, you will do important work to build a better housing finance system and you’ll be part of a team helping to make homeownership and rental housing more accessible and affordable across the nation.

Today, Freddie Mac makes home possible for one in four home borrowers and is one of the largest sources of financing for multifamily housing. Join our smart, creative and dedicated team and you’ll do important work for the housing finance system and make a difference in the lives of others.

We are an equal opportunity employer and value diversity and inclusion at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by applicable law. We will ensure that individuals with differing abilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Responsibilities

Work with the Project Team’s solution architects and technical team members to validate that security solution architectures are following the organization’s InfoSec policies, standards, non-functional requirements, reference architectures and patterns under the guidance of senior staff Domain Security Architects
Identify security risks and provide recommendations, solutions, and options to best mitigate those risks
Have advanced knowledge in cloud security services to evaluate security and compliance in a variety of cloud platforms
Collect, interpret, evaluate, and validate business requirements, functions and processes associated with assigned projects
Have a detailed understanding of industry standard Information Security control frameworks such as ISO 27001/27002, NIST, CIS and for cloud-specific control frameworks such as the Cloud Security Alliance (CSA) Cloud Control Matrix (CCM)

Job Requirements

Required Qualifications:

8-10 years of information technology experience, preferably within the financial services and/or mortgage industry
Advanced working knowledge of Azure Security Center, AWS CloudWatch and CloudTrail
Cloud security (IaaS, PaaS, and SaaS) across multiple cloud platforms such as Azure, AWS, and Google.
Demonstrate basic understanding the concepts and application of the following:
Cloud Security Posture Management (CSPM)
Cloud-Native Application Protection Platforms (CNAPP)
Demonstrate basic understanding the concepts and application of the following architecture and design principles and practices:
Network security and segmentation
Mobile device security (smartphones, tablets, iPads, etc.), to include Bring Your Own Device (BYOD)
Basic understanding of one or more of the following technologies:
Next Generation Firewalls
External Secure Web Gateways and CASBs
Network and Host-based IDS/IPS
Security Information and Event Management (SIEM)
Identity and Access Management (IAM)
ADFS and other federated technologies, including Active Directory, SAML, OAuth, OIDC, and SSO integrations.
BA/BS degree in Computer Science, Information Systems or a related technical field, or the equivalent combination of education and experience

Preferred Qualifications:

AWS Certified Solutions Architect (Associate, Professional)
AWS Certified Security – Specialty certification
Google Professional Cloud Architect
CISSP (+ ISSAP), CCSP
CompTIA Security +, Associate of IC2
SABSA (F1 & F2 minimum) are a plus

Additional commentary

Our Impact: This role ensures a robust and resilient operating environment that conforms to all regulatory, corporate and IT requirements! The Information Security Architect team aids in the validation of secure design in solutions and enterprise architecture. The extended coverage this position will provide is paramount to the success of Freddie Mac security architecture maturity.
Your Impact: This role provides validation, oversight, consultation, advisory, controls design, compliance framework adherence and patterns documentation to the benefit of IT and the businesses.
Keys to Success in this Role:
A customer-focused demeanor
Commit to execution
Continuous improvement to work processes and documentation
Experience within the Financial Services/Mortgage industries.
Additional Notices:
Current Freddie Mac employees please apply through the internal career site.
Notice to External Search Firms: Freddie Mac partners with BountyJobs for contingency search business through outside firms. Resumes received outside the BountyJobs system will be considered unsolicited and Freddie Mac will not be obligated to pay a placement fee. If interested in learning more, please visit www.BountyJobs.com and register with our referral code: MAC.
CA Applicants: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Freddie Mac offers a comprehensive total rewards package to include competitive compensation and market-leading benefit programs. Information on these benefit programs is available on our Careers site.

This position has an annualized market-based salary range of $150,000 - $224,000 and is eligible to participate in the annual incentive program. The final salary offered will generally fall within this range and is dependent on various factors including but not limited to the responsibilities of the position, experience, skill set, internal pay equity and other relevant qualifications of the applicant.

Time-type: Full time

FLSA Status: Exempt