Security Career...

[SV Rao]

Hi,

I have completed SCEA and working as a Solution Architect and have a limited experience in Enterprise Architecture using TOGAF. Currently I am pursuing IBM SOA Certifications. I was wondering whether to become a complete Architect whether knowledge of Security is needed even though I have done a project in J2EE Security? Will Associate CISSP certificate help? Can it help in going ahead for an Architect role with SOA + Security knowledge. Please advice.

S V Rao

[SV Rao]

May I add CISM to it too as an option...

[Ulf Dittmer]

I'm no expert on security certifications, but security is something that doesn't exist outside of an architecture - it needs to be considered for every part of it. Having done a single project involving security is thus not sufficient - security has way too many facets that one can't possibly have learned enough about in just one project.

The GSSP is another option.