NextEra Energy

Requisition ID: 88493

Florida Power & Light Company is the largest electric utility in the U.S., delivering clean, affordable, and reliable electricity to approximately 12 million Floridians. With one of the nation’s cleanest power generation fleets and top-tier reliability, we are setting new standards in the energy industry. Ready to make an impact? Join our exceptional team today and help shape the future of energy!

Position Specific Description

As a Senior Architect specializing in cybersecurity, you'll strengthen NextEra's cybersecurity posture, make strategic decisions regarding emerging technologies, and solve complex problems through innovative solutions. The role calls for key technology domain experts capable of influencing the design and roadmap of our technology areas, leading and mentoring teams to drive compliance and effectiveness of NextEra Energy's technology architectures.

In this role, consistent learning and adaptation is key. You will be called upon to continually expand and apply your knowledge in several IT disciplines, including, but not limited to:

Network Security

• Proficiency in security infrastructure such as firewalls and intrusion detection systems
• Understanding of networking protocols and components

Cloud Security

• Experience with cloud platforms such as AWS and Azure
• Knowledge of cloud-native security tools

Endpoint Security

• Capabilities in EDR (Endpoint Detection and Response) tools
• Understanding of anti-malware, antivirus, and encryption tools

Application Security

• Familiarity with secure coding practices
• Experience in performing security reviews, threat modelling of applications

Data Security

• Knowledge of data encryption methods and tools
• Understanding of Data Loss Prevention (DLP) tools and strategies

Identity and Access Management (IAM)

• Familiarity with single sign-on (SSO) and multi-factor authentication (MFA) systems
• Expertise in IAM directories like Active Directory or Entra ID
• Understanding of Identity Management, Role Modeling, and Privilege Access Management

Mobile Security

• Experience with Mobile Device Management (MDM) solutions
• Familiarity with mobile platform security features and settings

Information Risk and Governance

• Familiarity with cybersecurity frameworks and controls like NIST, CIS, CIP, ISO, and SOX.
• Experience with risk assessment methods and tools

Operational Technology (OT) Security

• Knowledge of OT architecture and communication protocols
• Familiarity with OT-focused attack vectors