Security Architect

KEY RESPONSIBILITIES AND DUTIES:

• Partner with project and engineering teams to design secure, scalable, and compliant technology solutions.

• Conduct security architecture and solution design reviews across cloud, applications, infrastructure, networks, and enterprise platforms.

• Define security requirements, controls, and architecture standards for projects, applications, and third-party vendors.

• Perform threat modeling, security risk assessments, and design-level security analysis for new and existing solutions.

• Provide security guidance for cloud, application, infrastructure, and technology transformation initiatives.

• Collaborate with engineering and infrastructure teams to implement and validate security controls.

• Review vendor and third-party security architectures, designs, and proposed solutions.

• Identify security risks early in the project lifecycle and recommend practical mitigation strategies.

• Evaluate architectural designs against enterprise security policies, standards, frameworks, and best practices.

• Support project teams in resolving security findings, design gaps, and architecture-related risks before production deployment.

• Communicate security risks, recommendations, and trade-offs clearly to technical and business stakeholders.

• Balance security requirements with business objectives, technical constraints, project timelines, and delivery requirements.

MUST HAVE SPECIFIC KNOWLEDGE AND SKILLS:

• 5–10 years of experience in cybersecurity, information security, security engineering, or security architecture.

• Strong understanding of cloud security, network security, infrastructure security, and application security.

• Proven experience in security architecture and solution design for enterprise technology initiatives.

• Strong knowledge of security architecture principles, controls, standards, frameworks, and industry best practices.

• Hands-on experience conducting threat modeling, risk assessments, architecture reviews, and security design reviews.

• Experience developing security requirements and controls for applications, infrastructure, cloud environments, and third-party solutions.

• Strong understanding of identity and access management, network controls, application security, data protection, and cloud security concepts.

• Experience working with engineering, infrastructure, DevOps, application development, and project teams.

• Ability to assess vendor security architectures and identify security gaps and risks.

• Strong understanding of balancing security risks with business requirements, delivery timelines, and technical constraints.

ADDITIONAL SKILLS AND OTHER REQUIREMENTS:

• Experience supporting AWS, Azure, or other enterprise cloud initiatives.

• Experience with security frameworks and best practices such as NIST, ISO 27001, CIS, or equivalent frameworks.

• Ability to provide timely, practical, and actionable security guidance to project teams.

• Strong problem-solving and analytical skills with the ability to identify risks before production deployment.

• Experience working collaboratively with engineering and infrastructure teams to implement security controls.

• Strong stakeholder communication and documentation skills.

• Ability to explain complex security risks and recommendations to both technical and non-technical stakeholders.

• Strong understanding of Secure by Design principles and integrating security throughout the project lifecycle.