Senior Security Architect

Job Summary

Security Architecture

• Develop and maintain the enterprise cybersecurity architecture strategy, principles, standards, and reference architectures.
• Define security architecture requirements for infrastructure, applications, cloud services, and business solutions.
• Ensure security is integrated into all phases of the solution lifecycle using Security-by-Design principles.
• Develop architecture patterns, technical standards, and security baselines.
• Evaluate emerging technologies and recommend secure architectural approaches.
• Provide technical leadership on enterprise security transformation initiatives.

Secure Design Reviews

• Lead security architecture reviews for infrastructure, cloud, network, and application projects.
• Conduct secure design assessments and identify architectural risks.
• Perform threat modeling and recommend appropriate security controls.
• Review solution designs for compliance with enterprise security standards and regulatory requirements.
• Provide technical recommendations to project teams to address identified security gaps.
• Review and approve security exceptions with appropriate compensating controls.
• Participate in architecture review boards and technical governance committees.

Zero Trust Architecture

• Lead the development and implementation of the organization's Zero Trust Architecture strategy.
• Design identity-centric security models based on continuous verification and least privilege.
• Define Zero Trust principles for users, workloads, devices, applications, and data.
• Collaborate with IAM, Network, Endpoint, and Cloud teams to implement Zero Trust controls.
• Assess existing environments and develop Zero Trust transformation roadmaps.
• Ensure alignment with NIST SP 800-207 and industry best practices.

Network Segmentation

• Design enterprise network segmentation and micro-segmentation strategies.
• Define trust zones and security boundaries across corporate, cloud, OT, and DMZ environments.
• Review firewall architectures and segmentation policies.
• Support implementation of Software-Defined Perimeter (SDP) and Software-Defined Networking (SDN) security controls.
• Recommend improvements to reduce attack surface and limit lateral movement.
• Validate segmentation effectiveness through architecture reviews and security assessments.

Cloud & Infrastructure Security

• Design secure cloud architectures across AWS, Azure, Google Cloud, and Oracle Cloud Infrastructure (OCI).
• Define secure hybrid-cloud and multi-cloud architectures.
• Develop standards for container, Kubernetes, API, and serverless security.
• Review infrastructure-as-code (IaC) security controls.
• Support DevSecOps initiatives by embedding security into CI/CD pipelines.

Risk & Governance

• Translate business and regulatory requirements into technical security architecture requirements.
• Support enterprise risk assessments from an architectural perspective.
• Develop and maintain security architecture standards, technical policies, and implementation guidelines.
• Provide technical support during security audits and compliance assessments.
• Review technology risks and recommend mitigation strategies.

Technical Leadership

• Provide expert guidance to engineering and project teams on secure architecture practices.
• Mentor security engineers and junior architects.
• Represent cybersecurity within enterprise architecture forums.
• Participate in technology evaluations and security due diligence.
• Promote architecture consistency across business units and technology domains.

Continuous Improvement

• Monitor emerging cybersecurity threats, technologies, and industry trends.
• Continuously improve enterprise security architecture frameworks and standards.
• Support cybersecurity maturity initiatives.
• Identify opportunities to automate security controls and architecture governance.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline.
• 8+ years of experience in cybersecurity, including at least 5 years in security architecture or solution architecture.
• Proven experience designing secure enterprise, cloud, and hybrid environments.
• Strong experience leading architecture reviews and enterprise security initiatives.
• Experience working within large-scale enterprise environments.

• Enterprise Security Architecture

• Security-by-Design

• Secure Solution Architecture

• Threat Modeling

• Security Architecture Frameworks

• Identity and Access Management (IAM)

• Privileged Access Management (PAM)

• API Security

• Zero Trust Architecture (NIST SP 800-207)

• Network Segmentation
• Micro-Segmentation

• Software-Defined Networking (SDN)

• Next-Generation Firewalls

• Network Access Control (NAC)

• DNS Security

Cloud Security

• Microsoft Azure

• Google Cloud Platform (GCP)

• Kubernetes Security
• Container Security
• Infrastructure as Code (Terraform, ARM, CloudFormation)
• DevSecOps
• CI/CD Security

Security Technologies

• SIEM
• EDR/XDR
• Identity Providers (Microsoft Entra ID, Okta, Ping Identity)
• Secrets Management
• Vulnerability Management

• Data Loss Prevention (DLP)

• PKI and Certificate Management

• NIST SP 800-207 (Zero Trust Architecture)

• ISO/IEC 27001 and ISO/IEC 27002

• OWASP Top 10

• OWASP ASVS

• Secure Software Development Lifecycle (SSDLC)

• Cloud Security Alliance (CSA) Cloud Controls Matrix
• Enterprise Architecture methodologies (TOGAF preferred)

Preferred Certifications

• CISSP (Required or strongly preferred)
• CCSP
• SABSA Foundation or Practitioner
• TOGAF

• GIAC Defensible Security Architecture (GDSA)

• Microsoft AZ-500
• AWS Certified Security – Specialty

• OCI Security Professional

• CRISC (Preferred)