Sr. Staff Cyber Security Architect

Job Description Summary
This position will work on highly complex projects that require in-depth domain knowledge in two or more specialized areas. They are responsible for driving the design and implementation efforts related to architecture, scalability, availability and performance alignment w/ the product roadmap with a focus on application development & automation. They may interact w/ functional leaders to support these technical initiatives.
Job Description
Roles and Responsibilities
In This Role, You Will
Drive significant endpoint security technology initiatives across multiple layers of architecture, including Linux, Kubernetes, Application, and Cloud platforms.
Partner with product management, product owners and architects to identify & prioritize security features across the system.
Work to design implement projects to transform products within the portfolio through automation orchestration opportunities.
A focus on automation & orchestration and furthering the integration of Cyber Security & Risk management into the native development workflow.
Contribute to the development of infrastructure platforms that are service-oriented with reusable components that can be orchestrated together into different methods for different businesses
Participate in the research and evaluation of emerging technology, industry and market trends to assist in project development and/or operational support actives.
Technical Qualification
Deep experience in Linux and Kubernetes security, including OS hardening, container security, RBAC, workload isolation, secure boot and runtime protection.
Strong expertise in Identity, PKI and Zero Trust, including OAuth2/OIDC, certificates, TLS/mTLS, key management, workload identity and technologies such as Keycloak/OpenPKI/Vault.
Strong knowledge of software supply-chain security, including SBOM, CVE/VEX management, SAST/SCA, container scanning, artifact signing, software provenance and tools such as Trivy, Black Duck, Cosign/Sigstore and GitLab security tooling.
Experience designing DevSecOps and Security-as-Code, integrating automated security controls into CI/CD using tools such as GitLab CI, OPA/Rego, Kyverno, Helm and infrastructure-as-code.
Strong security architecture and threat-modeling capability using techniques such as STRIDE, attack-surface analysis, trust-boundary analysis and secure-design patterns.
Experience with network, API and communication security, including network segmentation, API gateways, secure remote connectivity, TLS/mTLS and Zero Trust networking.
Experience with runtime security, audit logging and security monitoring, preferably across Kubernetes and distributed edge systems.
Ability to architect security across edge, customer datacenter and cloud deployments.
Strong understanding of medical-device cybersecurity and secure product development, including FDA cybersecurity expectations, IEC 81001-5-1, IEC 62304, NIST SSDF and related risk-management practices.
Education Qualification
Bachelor's Degree in Computer Science or “STEM” Majors (Science, Technology, Engineering and Math) with significant experience in Cybersecurity domain with a minimum of 14 years of experience.
Desired Characteristics
Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.
Strong interpersonal skills, with an emphasis on the ability to effectively influence others
A team-focused mentality with the proven ability to work effectively with diverse stakeholders.
An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily-understood, authoritative, and actionable manner.
Hands-on architecture mindset, capable of building reusable security capabilities into the Compute Platform rather than relying only on governance, reviews and compliance processes.
Inclusion and Diversity
GE HealthCare is an Equal Opportunity Employer where inclusion matters. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law. Behaviors We expect all employees to live and breathe our behaviors: to act with humility and build trust; lead with transparency; deliver with focus; and drive ownership, always with unyielding integrity.
Additional Information
Relocation Assistance Provided: No

Work arrangement
No