Senior Security Architect

Requisition ID:  81256 

Florida Power & Light Company is America’s largest electric company, providing clean, affordable, and reliable electricity to more than 12 million people in Florida. We operate one of the cleanest power generation fleets in the U.S. and our reliability is among the best in the nation. Are you interested in becoming a game-changer in the energy industry?  Join our world-class team today! 

Position Specific Description

NextEra Energy seeks an industry-leading Senior Security Architect. This role provides the opportunity for seasoned IT professionals looking to contribute to comprehensive architecture designs, and to provide substantial IT architecture consultation. Embedded within a team that champions leadership, encourages strategic decision making, and nurtures the advancement of cutting-edge technology, this role holds significant opportunities for development.

In this role, consistent learning and adaptation is key. This is a high level Individual Contributor role with no direct reports.  You will be called upon to continually expand and apply your knowledge in several IT disciplines, including, but not limited to:

• Network Security
  • Proficiency in security infrastructure such as firewalls and intrusion detection systems
  • Understanding of networking protocols and components
• Cloud Security 
  • Experience with cloud platforms such as AWS and Azure
  • Knowledge of cloud-native security tool
• Endpoint Security
  • Capabilities in EDR (Endpoint Detection and Response) tools
  • Understanding of anti-malware, antivirus, and encryption
• Application Security
  • Familiarity with secure coding practices
  • Experience in performing security reviews, threat modelling of applications
• Data Security
  • Knowledge of data encryption methods and tools
  • Understanding of Data Loss Prevention (DLP) tools and strategies
• Identity and Access Management (IAM)
  • Familiarity with single sign-on (SSO) and multi-factor authentication (MFA) systems
  • Expertise with Active Directory and Entra ID
  • Understanding of Identity Management, Governance, and Privileged Access Management
• Mobile Security
  • Experience with Mobile Device Management (MDM) solutions
  • Familiarity with mobile platform security features and settings
• Information Risk and Governance
  • Familiarity with cybersecurity frameworks and controls like NIST, CIS, CIP, and SOX.
  • Experience with risk assessment methods and tools
• Operational Technology (OT) Security
  • Knowledge of OT architecture and communication protocols
  • Familiarity with OT-focused attack vectors