Engineering Manager – Security Architecture

First American (India) is a GCC (Global Capability Center) of the First American Financial Corporation (NYSE: FAF) family of companies, a proud member of the FORTUNE 500 companies and was named one of FORTUNE’s 100 Best Companies to Work For® in 2024. First American Financial Corporation provides comprehensive title insurance, closing/settlement, property data and technology solutions. First American (India) creates quality solutions for its customers by combining software, back office and knowledge processing operations to fulfill First American's business requirements. Our priorities are our employees, customers, and shareholders - in that order. FAI has been certified a Great Place to work by Great Place to work Institute®, is a certified Best Workplaces for Women and Workplace with Inclusive Practices.

Job Summary

The Engineering Manager (Security Architecture) will lead a team of skilled Security Architects responsible for designing and implementing secure architectures that protect First American’s technology ecosystem and data assets. The team defines and governs enterprise security standards, ensuring that security is integrated into all technology platforms — including on-premises infrastructure and cloud environments (Azure, AWS, GCP, and OCI). This role oversees architectural assessments, security solution design, and alignment with business and regulatory requirements. The manager will provide technical leadership, manage projects and resources, and ensure the delivery of scalable, resilient, and secure technology solutions across the organization.

Essential Functions

• Manages a group of technical security Architects in the Security Architecture team.
• Contributes to reviews and provide guidance on best practices in Security Architecture.
• Stay up to date with the latest cloud security trends, tools, and services applying them to our cloud security strategy.
• Actively participate in Technology Governance Board to evaluate new technologies, access their security risks, and provide recommendations for adoption to meet First American’s security policies and compliance requirements.
• Participate in CAB reviews for waivers and exceptions
• Collaborate with stakeholders on Security Architecture programs
• Maintain expertise in security regulations and frameworks (e.g., NIST, ISO 27001, PCI DSS) to design systems and processes that protect data and demonstrate adherence to industry standards.
• Interfaces with management inside and outside of the company to provide input to operational decisions and to clarify or modify project plans, and/ or schedule requirements.
• Assess security risks in existing and planned systems, establishing technical security standards and governance processes.
• Writes and conducts employee performance reviews and provides ongoing performance feedback. Makes hiring recommendations. May get input from senior management in these areas.
• Mentor and establish career roadmap for employees reporting to him/her
• Prepares and maintains job descriptions for positions that report to him/her.
• Regularly interacts with senior management and peers in other departments for purposes of gaining cooperation, exchanging technical information, and presenting project plans and reports.
• Required to perform duties outside of normal work hours based on business needs.

Job Complexities

• Works on a diverse range of problems of moderate scope where analysis of situations or data requires evaluation of a variety of factors and an understanding of current business and technological trends.
• Exercises judgment within defined procedures and practices to determine appropriate action.
• Initiates corrective action needed to resolve complex, critical issues.
• Provides input to and may develop operational plans and works with senior management to ensure that plans are integrated with broader strategies.

Supervision Received or Extended

• Receives assignments in the form of objectives and determines how to use resources to meet schedules and goals.
• Provides direction to employees within the boundaries of established policies.
• Enlists expertise of peers in other departments and a wide range of additional resources to explore new methods and approaches and to solve problems.
• Work is reviewed in terms of meeting product, project, or operational objectives, quality, schedules, and budgets.

Impact

• Provides input to department strategic plan and budget.
• Recommends changes to process, SLA’s, department policies, procedures, metrics, and standards.
• Influences senior management on decisions related to department priorities, schedules, plans and cost controls.
• Achieves objectives for multiple and varied projects.
• Regularly makes decisions necessary to resolve critical issues related to department operations.

Knowledge and Skills/Technology Used

• Must have knowledge in one or more areas of: Cloud (AWS, Azure & GCP), Microsoft Entra ID, IAM, Kubernetes/Docker, GenAI, LLM, WAF, Network Segmentation, IDS/IPS, NAC, Endpoint Protection, DDoS Mitigation
• Must have knowledge/expertise in security standards such as NIST, OWASP, ISO 27001, PCI-DSS and similar
• Successful track record of designing, developing, and managing the execution of projects in the security architecture space.
• Must have knowledge on DevSecOps and PenTesting (including SAST, DAST and SCA)
• Good knowledge in DevOps, GitHub and other related technologies
• Ability to develop and implement processes to ensure compliance and quality.
• Ability to establish and maintain effective working relationships within and between departments.
• Ability to communicate the function’s vision and the department’s direction and set aligned goals for team. Provides resources and implements systems to measure results.
• Ability to select, coach and develop talent and hold employees accountable for results. Supports change and fosters collaboration.
• Deals with others in an honest manner, assures adherence to company policies, addresses questionable business practices.
• Provides others with reliable information, creates, and delivers accurate reports and presentations. Uses good listening skills. Negotiates effectively.

Education

• Minimum of 15 years of formal education - Graduate / Postgraduate in Computer Science / Information Technology or equivalent experience is required.
• Training courses, seminars, certifications, or other security related education experience preferred.

Preferred Experience

• 2 to 5 years of supervisory or management experience in progressively responsible roles in a demanding environment.

License or Certification

• CISSP (Certified Information Systems Security Certified Professional), CISA (Certified Information Systems Auditor), CISM (Certified Information Security Management) or equivalent is preferred.