Medical Device IoT Security Architect

2 days ago

Apply Now

Receive Emails with Similar Jobs

Maveris

WebsiteLinkedInAll Job Openings

Expert IT Consulting. Connect Fearlessly.

51 - 200

Description

•Support the Department of Veterans Affairs •Lead the delivery of a Federal Agency’s Enterprise Security Architecture and Strategy •Provide thought leadership for new techniques and design patterns related to Enterprise Security Architecture within the domain of Automation and DevSecOps. •Ensure that the Enterprise Security Architecture, framework, and strategy across the enterprise remains consistent with and supports the NIST Cybersecurity Framework and other federal mandates. •Design security patterns and reference architectures that ensure the confidentiality, integrity, and availability of sensitive medical data, safeguarding patient safety, and comply with regulatory standards such as HIPAA. •Conduct risk assessments, threat modeling, and aid in vulnerability testing for IoT and medical devices, identifying potential security risks and recommending mitigations. •Architect secure communication protocols (e.g., TLS, HTTPS, MQTT) and encryption methods to protect data in transit and at rest between IoT devices, medical systems, and cloud platforms. •Collaborate with medical device manufacturers, healthcare providers, and IT teams to embed security controls within device firmware, software, and hardware, including encryption, access control, and secure boot. •Collaborate with cross-functional teams to embed security across the lifecycle of connected devices, from design and deployment to ongoing monitoring and incident response.

Requirements

•Bachelor’s degree •7 years of relevant experience •Hands-on experience securing connected medical devices and IoT environments in healthcare or other highly regulated industries •Experience working with healthcare standards, such as HIPAA, FDA guidelines, and IEC 80001, for medical devices •Experience with security frameworks and methodologies (NIST Cybersecurity Framework, ISO 27001) •Knowledge of network security, wireless protocols, and data encryption specific to IoT environments •Experience with cybersecurity tools such as vulnerability scanners, SIEM, and threat detection systems •Hands-on experience with Zero Trust security models

Benefits

•401(k) with company match •Dental Insurance •Health Insurance •Vision Insurance •Life Insurance •Paid Time Off