Security Architect

Role & responsibilities

• Design and define enterprise security architecture strategies aligned with business objectives, regulatory requirements, and industry best practices.
• Develop secure architecture frameworks, security standards, policies, and governance models across enterprise environments.
• Lead security architecture design for cloud, hybrid, on-premises, applications, networks, and infrastructure platforms.
• Perform security assessments, threat modeling, risk analysis, and architecture reviews for new and existing solutions.
• Design and implement security controls for identity management, access control, encryption, network security, application security, and data protection.
• Architect cloud security solutions across AWS, Microsoft Azure, and Google Cloud environments.
• Define Zero Trust security models, IAM strategies, privileged access management (PAM), and identity governance solutions.
• Collaborate with infrastructure, cloud, DevOps, application development, and compliance teams to embed security into technology solutions.
• Drive DevSecOps adoption by integrating security practices into CI/CD pipelines and software development lifecycles.
• Evaluate security technologies, conduct proof of concepts (PoCs), and recommend solutions to improve security posture.
• Support vulnerability management, penetration testing, security monitoring, incident response, and threat mitigation initiatives.
• Design security solutions involving SIEM, SOAR, EDR, WAF, firewalls, IDS/IPS, DLP, and network security platforms.
• Ensure compliance with security frameworks and regulations including ISO 27001, NIST, CIS Controls, PCI DSS, and GDPR.
• Provide security architecture guidance during cloud migrations, digital transformation projects, and enterprise technology initiatives.
• Develop security architecture documentation, standards, risk reports, and technical design documents.
• Mentor security engineers and provide technical leadership across security initiatives.

Preferred candidate profile

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related technical discipline.
• 8 to 13 years of experience in Cybersecurity, Information Security, Security Engineering, or Security Architecture roles.
• Proven experience designing and implementing enterprise security architectures across cloud, hybrid, and on-premises environments.
• Strong knowledge of cloud security architecture across AWS, Microsoft Azure, and/or Google Cloud Platform.
• Hands-on experience with IAM, PAM, SSO, MFA, Zero Trust Architecture, encryption, PKI, and identity governance.
• Strong understanding of network security concepts including firewalls, WAF, VPN, IDS/IPS, segmentation, NAC, and secure connectivity.
• Experience with application security, secure SDLC, OWASP Top 10, API security, DevSecOps, and vulnerability management.
• Strong experience with security tools such as SIEM, SOAR, EDR, DLP, CSPM, vulnerability scanners, and security monitoring platforms.
• Experience with security technologies including Splunk, Microsoft Sentinel, IBM QRadar, CrowdStrike, Palo Alto Networks, Fortinet, and Check Point.
• Strong understanding of cybersecurity frameworks including NIST, ISO 27001, CIS Controls, PCI DSS, GDPR, and security risk management.
• Experience conducting threat modeling, security assessments, architecture reviews, and risk analysis.
• Knowledge of Kubernetes security, container security, Terraform security, cloud governance, and infrastructure security.
• Strong analytical, problem-solving, communication, stakeholder management, and leadership skills.
• Experience working with global teams, auditors, vendors, and business stakeholders.

Preferred certifications

• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Professional)
• CISM (Certified Information Security Manager)
• CISA
• SABSA Security Architect Certification
• TOGAF Certified
• AWS Certified Security Specialty
• Microsoft Certified: Cybersecurity Architect Expert
• Azure Security Engineer Associate
• Google Professional Cloud Security Engineer
• ISO 27001 Lead Implementer / Lead Auditor