Enterprise Security Architect in NYC(Hybrid)

Amtex Systems Inc is an information technology and talent solutions company offering talent and BI consulting to the companies in US for over 25 years.

Our solutions are designed to fill resource gaps, by providing the right candidates who deliver value to the organization. Our propensity to nurture and build strong relationships with our clients helps us better understand their business demands and gives us the ability to provide services that are on time and rise above the rest.

Hi

 

We have an urgent role of Enterprise Security Architect.

 

6 month contract with extensions hybrid to the NYC office

Google Cloud expertise strongly preferred

 

We are seeking a Contract Enterprise Security Architect to join our cyber Security team. This role serves as the lead technical reviewer for the Enterprise IT Intake Process—the gateway through which all new products, software, and systems undergo cybersecurity and Enterprise Architecture (EA) review.

 

The successful candidate will evaluate proposed business solutions, vendor platforms (SaaS/IaaS), and custom systems against NIST frameworks and company Cyber Security Standards. Acting as a high-trust technical advisor, you will conduct threat modeling and controls validation, ultimately providing structured control evaluations and recommendations to the engineering team for final approval.

 

Required Qualifications

• 7+ years in Cybersecurity, Security Architecture, or Enterprise Security consulting.
• Strong expertise in Standards & Frameworks: Deep practical knowledge of NIST SP 800-53, NIST CSF, OWASP, and SOC 2.
• Identity & Access Depth: Hands-on experience evaluating enterprise Identity and Access Management (IAM), federation protocols, and modern passwordless/MFA models (FIDO/Yubikeys).
• Cloud Competency: Proven experience reviewing security controls, native services, and network security policies within Google Cloud Platform and Azure environments.
• Excellent Risk Communication: Ability to translate complex technical vulnerabilities and architectural weaknesses into clear, business-risk-focused recommendations for both technical teams and senior management.
• Regulated Industry Experience: Prior experience delivering security reviews or compliance consulting within highly regulated environments, ensuring designs conform to strict regulatory and protection network controls.

 

Preferred Qualifications

• Regulated Utility Sector Experience: Direct experience working with cybersecurity standards and compliance frameworks within a heavily regulated utility or critical infrastructure environment.
• OT/IT Integration: Understanding of Operational Technology (OT) security concepts and secure boundaries between IT and operational environments.
• Certifications: CISSP, CISM, SABSA, or cloud-specific security certifications (Google Professional Cloud Security Engineer, Microsoft Certified: Azure Security Engineer).