Security Architect - IAM

Senior Security Architect

Position Summary

We are seeking an experienced Security Architect to design, implement, and manage enterprise security solutions across network, cloud, application, and infrastructure environments. The ideal candidate will possess deep expertise in Identity and Access Management (IAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), network security, DMZ architecture, and cybersecurity standards. The role requires collaboration with application, network, cloud, and infrastructure teams to ensure security best practices are embedded throughout the technology lifecycle.

Key Responsibilities

Identity & Access Management

• Design and implement enterprise IAM solutions, including SSO, federation, and MFA.
• Integrate applications with SAML, OAuth 2.0, OpenID Connect, and LDAP/Active Directory.
• Manage role-based access control (RBAC) and privileged access management.
• Ensure compliance with enterprise IAM and authentication standards.

Network & DMZ Security

• Design secure network architectures, including DMZ, internal, external, and cloud security zones.
• Implement network segmentation, firewall policies, and Zero Trust security controls.
• Review and approve network connectivity requirements across trust boundaries.
• Work with networking teams to secure internet-facing applications and services.

Security Architecture & Standards

• Define and enforce security standards, policies, and technical controls.
• Ensure compliance with industry frameworks such as NIST, CIS, ISO 27001, and enterprise cybersecurity standards.
• Conduct security design reviews and threat modeling exercises.
• Develop secure architecture patterns for cloud and on-premises platforms

Application & Cloud Security

• Integrate security controls into the SDLC and DevSecOps pipelines.
• Implement secure authentication and authorization mechanisms.
• Review application architectures for vulnerabilities and security risks.
• Support cloud security initiatives across AWS, Azure, and hybrid environments.

Security Monitoring & Incident Response

• Collaborate with SOC and cybersecurity teams on security monitoring and incident response.
• Define logging, monitoring, and alerting requirements.
• Support vulnerability management, penetration testing, and remediation programs.

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 8+ years of experience in cybersecurity, network security, or security architecture.
• Strong experience with:
  • SSO (SAML, OAuth, OpenID Connect)
  • MFA solutions
  • Active Directory / LDAP
  • Firewall technologies
  • DMZ architecture
  • Network segmentation
  • VPNs and secure remote access
  • TCP/IP, DNS, Routing and Switching
  • Cloud Security (AWS/Azure)

Work Location

• Onsite at the Boston US client location (No remote work).
• Willingness to work from the client's office and support business hours as required.