Career Category Information Systems Job Description HOW MIGHT YOU DEFY IMAGINATION?
If you feel like you’re part of something bigger, it’s because you are. At Amgen, our shared mission—to serve patients—drives all that we do. It is key to our becoming one of the world’s leading biotechnology companies. We are global collaborators who achieve together—researching, manufacturing, and delivering ever-better products that reach over 10 million patients worldwide. It’s time for a career you can be proud of. Join us.
Principal Architect Application Security
Live What you will do
Let’s do this. Let’s change the world. In this vital role you will report to the Director of Security Architecture, and will be based in Tampa, FL, at Amgen's new Capability Center. At Amgen, our mission is simple: to serve patients. Our new Tampa Capability Center provides essential services that enable us to better pursue this mission. This state-of-the art center serves as a base for finance, information systems, and human resources professionals to make a meaningful impact at one of the world's leading biotechnology companies.
The Application Security Architect will play a meaningful role in Information Security for Amgen. The individual will lead and support assigned capabilities within Information Security with the focus on developing, optimizing and maturing our global application security capability and our Secure Software Development Lifecycle (SDLC) processes. The Information Security Architect will work with various partners at Amgen in a manner aligned to Amgen's values to define and implement Information Security Services strategies, standards, tools and processes.
This role is based at Amgen's Capability Center in Tampa, Florida.
The role will be part of the GIP Identity, Engineering and Architecture (IEA) Team responsible for delivering security services across Amgen globally. Areas of responsibility include:
• Develops strategy, direction and guidance for GIP’s Security Architecture Program, Security Reference Architecture and Neighborhood Plan in alignment with Enterprise City Planning strategy
• Steward of the Enterprise Architecture standards and practices across the GIP organization
• Maintain Security Architecture Program alignment with GIP’s adopted security control framework
• Ensure defensible security control validation process is intrinsically integrated into GIP Security Risk Assessments and SDLC
• Establish and maintain approved security patterns, methods and reusable components to expedite solutions approval through SDLC
• Establish secure design patterns for Application Security service
• Work with Security Domain Architects to develop proposals for review by the Enterprise Architecture Review Board
• Partner with the Enterprise Architecture team to refine and develop the Amgen IS City Plan, ensuring security requirements, priorities and business needs are considered
• Develop a deep understanding of GIP’s business needs, processes, and environment
• Develop a deep understanding of GIP deployed system landscape
• Comprehensive experience with Amazon AWS and/or Microsoft Azure as well as understanding of Identity and Access Management, Data Protection, Secure DevOps, Security Operations, and other security domains for Cloud.
• Monitor and manage IS control exceptions that require architectural redesign of underlying architectural layers
• Maintain cooperative partnership with Governance, Risk and Compliance (GRC) Team to establish a service risk posture qualitative/quantitative reporting for GIP services
• Develop and maintain all supporting activities and elements of GIP Security Architecture framework and operating model
• Develop and maintain accuracy of service capabilities to security control mapping
• Provide quarterly Application Security Architectural program review via GIP’s Quarterly Defense Review (QDR) process
• Manage and mature Domain Reference Architectural characterization
• Provide security control posture reports to help derive strategic decisions and financial investments that trace directly mitigate control gaps
• Work closely with respective security service leads to develop, maintain and publish technical development plan for each GIP Service domains
• Develop and maintain secure configuration specifications for Amgen infrastructure (IoT, mobile, cloud…) on premise and in the cloud
• Mature and maintain appropriate security architect service metrics, key performance indicators, Key Risk Indicators and Service Level Agreements
• Provide mentorship and training on areas of expertise to Information Security and Amgen teams
• Support audit activities impacting information security services and technologies
• Travel: Domestic and International travel up to 10% may be required
Win What we expect of you
We are all different, yet we all use our unique contributions to serve patients. The security professional we seek is a collaborator with these qualifications.
Doctorate degree and 2 years of Information Security experience
Or Master’s degree and 6 years of Information Security experience
Or Bachelor’s degree and 8 years of Information Security experience
Or Associate’s degree and 10 years of Information Security experience
Or High school diploma / GED and 12 years of Information Security experience
Thrive What you can expect of us
As we work to develop treatments that take care of others, so we work to care for our teammates’ professional and personal growth and well-being.
• Vast opportunities to learn and move up and across our global organization
• Diverse and inclusive community of belonging, where teammates are empowered to bring ideas to the table and act
• Generous Total Rewards Plan comprising health, finance and wealth, work/life balance, and career benefits
Apply now for a career that defies imagination
In our quest to serve patients above all else, Amgen is the first to imagine, and the last to doubt. Join us.
careers.amgen.com
Equal Opportunity Statement Amgen is an Equal Opportunity employer and will consider you without regard to your race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.
We will ensure that individuals with disabilities are provided a reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request an accommodation.
.
Job Type: Full time