Highmark Health
Information Security Architect – Data Engineering & Security

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Company: enGen
Job Description:
JOB SUMMARY
CANDIDATE MUST BE US Citizen (due to contractual/access requirements)
Design, architect, and engineer secure data solutions that protect enterprise information across cloud, hybrid, and on-premises environments while ensuring compliance with enterprise security standards and regulatory requirements. Partner with security, data engineering, cloud, and application teams to develop scalable data platforms, data pipelines, analytics solutions, and data protection capabilities that enable secure and responsible use of enterprise data. Produce security architecture assessments and gap analyses to identify risks, define mitigation strategies, and recommend technical solutions that strengthen the organization's security posture while supporting business and data initiatives. Advise stakeholders on the design, implementation, and operation of modern data and security technologies, including cloud native services, data governance platforms, encryption, and access management solutions. Responsibilities include architecting and engineering solutions for data discovery, classification, governance, monitoring, identity and access management, application security, cloud security, and secure data exchange across the enterprise.
ESSENTIAL RESPONSIBILITIES
- Enhance security team accomplishments and competence by planning delivery of solutions; answering technical and procedural questions for less experienced team members; teaching improved processes; mentoring team members.
- Determine security requirements by evaluating business strategies and requirements; conducting system security and vulnerability analyses and risk assessments; identifying integration issues; preparing cost estimates.
- Plan security systems by evaluating network and security technologies.
- Implement security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures.
- Enhance department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments.
- May begin to provide leadership and mentoring in the areas of expertise and architecture to peers, developers, management and business users including technical expertise, coaching, and ad-hoc training.
- Support assurance compliance to required standards, procedures, guidelines and processes.
- Other duties as assigned or requested.
REQUIRED EDUCATION
Bachelor’s degree in Information Systems, Computer Science, Information Security, or Engineering, or relevant experience and/or education as determined by the company in lieu of bachelor's degree
PREFERRED EDUCATION
Master’s degree in Computer Science, Information Security or related field
EXPERIENCE
Minimum:
- 5 - 7 years' experience architecting solutions
- 5 - 7 years' experience in Information Security
- Experience communicating with business partners
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Preferred:
- 7 - 10 years' experience architecting solutions
- Experience designing or supporting cloud data platforms, data lakes, data warehouses, or large scale data processing environments.
- Experience with data engineering technologies such as BigQuery, Snowflake, Databricks, Kafka, Spark, Hadoop, or similar platforms.
- Experience securing cloud platforms in GCP, Azure, or AWS.
- Experience implementing encryption, tokenization, data masking, data governance, or data protection solutions.
- Experience designing secure API, ETL, ELT, and data integration architectures.
SKILLS
- Business communication skills, both written and verbal and able to solve unconventional problems
- Understanding of the TCP/IP protocol stack, application protocols such as SNMP, SMTP, DNS, and DHCP; IPSec and SSL VPNs; SSL/TLS protocol knowledge
- Understanding of the information technology and information security industries, their current developments, trends, issues, and fundamental concepts
- In-depth expertise in analyzing a wide spectrum of technical systems and services robustness and needs, and making practical recommendations to address them
- Detailed knowledge of web, mobile, and client application security vulnerabilities, attack methods, and countermeasures
- Experience with common information security management frameworks, such as HITRUST, ISO 27001, CobiT, ITIL
- Knowledge of ubiquitous encryption technologies (PGP, SSH, SSL, etc.) and common protocols (RADIUS, LDAP, KERBEROS, SAML, etc.)
- Participate in evaluations and recommend solutions to support enterprises security controls including: networking, firewalls, IDS/IPS, data loss prevention, application security, infrastructure security, and data security
REQUIRED LICENSURE
None
PREFERRED LICENSURE
Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Security Auditor (CISA), etc.
TRAVEL REQUIREMENT:
0%- 25%
LANGUAGE REQUIREMENT (other than English)?
None
PHYSICAL, MENTAL DEMANDS AND WORKING CONDITIONS
(The physical, mental demands and working conditions described here are representative of those that must be met by an employee to successfully perform the essential function of their job. Reasonable accommodations will be made when necessary to enable individuals with disabilities to perform the essential duties of the position, to the extent that they do not cause undue hardship.)
Position Type:
Office-Based
Office-Based Positions
An employee in this position works in an office environment. The position frequently requires the employee to communicate effectively with others both inside and outside the workplace (e.g., in person, via telephone, via email). The employee must be able to understand, interpret and analyze data, solve problems, concentrate, and research, use available technological resources and systems (e.g., computers and computer programs), multi-task, prioritize, and meet multiple deadlines to complete essential tasks. The employee generally works in a fast-paced and frequently stressful environment, must attend work on a regular and reliable basis as well as adhere to all workplace policies, and may be called upon to work outside regular business hours.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Teaches/Trains others regularly
- Occasionally
- Travels regularly from the office to various work sites or from site-to-site
- Occasionally
- Works primarily out-of-the office selling products/services (Sales employees)
- Never
- Physical Work Site Required
- Yes
ADDITIONAL INFORMATION
Changes Approved By:
Kathleen Thompson
Disclaimer:
The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.
Compliance Requirement:
This position adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies
As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy. Furthermore, it is every employee’s responsibility to comply with the company’s Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.
Pay Range Minimum:
$102,700.00
Pay Range Maximum:
$164,600.00
Base pay is determined by a variety of factors including a candidate’s qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at HRServices@highmarkhealth.org
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location