Cyber Security Architect

NOW HIRING: CYBER SECURITY ARCHITECT Position: Cyber Security Architect

Client: Altimetrik / S&P Global

Location: Princeton, NJ & NYC, NY Hybrid Salary: $200K USD Overall Experience: 15+ Years REQUIRED Work Authorization: USC / H-4 EAD ONLY Employment Type: Full-Time Position Overview We are seeking a highly experienced Cyber Security Architect to define and maintain enterprise cybersecurity strategy, security architecture, controls, standards, and governance across applications, networks, cloud, APIs, data platforms, and infrastructure.

The ideal candidate will have strong expertise across Cloud Security, IAM, Network Security, Application Security, DevSecOps, Threat Modeling, Security Operations, and Cybersecurity Governance .

Key Responsibilities Define and maintain cybersecurity strategy, principles, standards, and reference architectures

Design secure architectures across enterprise applications, networks, cloud, APIs, data, and infrastructure Conduct threat modeling, attack-surface analysis, risk assessments, and architecture reviews Define defense-in-depth, zero-trust, IAM, network, endpoint, application, data, and cloud security controls

Design and govern SSO, MFA, RBAC, ABAC, PAM, and Zero Trust solutions

Review solution designs, infrastructure-as-code, and implementation plans for security compliance

Guide engineering teams on Secure SDLC, secure coding, DevSecOps, and security testing Define requirements for WAF, VPN, IDS/IPS, SIEM, EDR, DLP, secrets management, and endpoint security Develop security architectures for AWS, Azure, and GCP environments

Establish security logging, monitoring, detection, alerting, and incident-response requirements

Support vulnerability assessments, penetration testing, remediation, and incident response

Evaluate security technologies, products, vendors, and managed security services

Maintain security architecture documentation, standards, diagrams, risk registers, and control mappings

Support ISO 27001, SOC 2, PCI DSS, GDPR, HIPAA , and other compliance initiatives

Required Qualifications 15+ years of overall IT/Cybersecurity experience REQUIRED 3+ years designing and reviewing enterprise security architectures

Strong knowledge of Network Security, Application Security, Cloud Security, IAM, Cryptography, and Security Operations Experience with STRIDE, MITRE ATT&CK , or equivalent threat modeling methodologies

Strong understanding of Zero Trust, Least Privilege, Defense in Depth, Secure-by-Design, and Separation of Duties Experience conducting security risk assessments and developing risk-treatment plans

Hands-on knowledge of vulnerabilities, penetration testing, incident response, and disaster recovery

Experience with security architecture frameworks, policies, controls, and governance

Excellent communication and stakeholder management skills

Preferred Qualifications AWS / Azure / GCP Security

Kubernetes, Docker, containers, service mesh, and serverless

DevSecOps, CI/CD security, SAST, DAST, SCA, IaC scanning SIEM, SOAR, EDR, XDR, WAF, CSPM, CNAPP, DLP

API Security, Microservices, OAuth 2.0, OIDC, SAML, JWT Data classification, encryption, tokenization, key management, and privacy engineering

Security automation using Python, PowerShell, Terraform, or Bash AI/ML Security, LLM Security, Prompt Injection, Data Leakage, and Model Governance NIST, CIS Controls, ISO 27001, SABSA, COBIT, OWASP Certifications: CISSP, CCSP, SABSA, CISM, GIAC, AWS Security Specialty, Azure Security Engineer Technical Skills Cloud Security: AWS, Azure, GCP, IAM, KMS, GuardDuty, Defender

Network Security: Firewalls, WAF, VPN, IDS/IPS, NAC, Segmentation, Zero Trust

Identity Security: SSO, MFA, RBAC, ABAC, PAM, OAuth 2.0, OIDC, SAML

Security Operations: SIEM, SOAR, EDR, XDR, SOC, Incident Response

Application Security: OWASP, API Security, SAST, DAST, SCA, Threat Modeling

DevSecOps: Jenkins, GitHub Actions, GitLab CI, Terraform, Container Security

Infrastructure: Kubernetes, Docker, Linux, Windows, Virtualization, Service Mesh

Data Security: Encryption, DLP, Tokenization, Secrets Management, Key Management

Governance: ISO 27001, NIST, CIS Controls, SOC 2, PCI DSS, GDPR

Automation: Python, PowerShell, Bash, Terraform, Policy-as-Code

SEND RESUME Rachael [email protected] Please Share Updated Resume Work Authorization Current Location Availability Contact Details LinkedIn Profile Follow Sidram Technologies for daily US IT jobs, Full-Time & Contract opportunities, interview tips, and hiring updates.

#Hiring #NowHiring #CyberSecurityArchitect #SecurityArchitect #CyberSecurity #CybersecurityJobs #InformationSecurity #CloudSecurity #ApplicationSecurity #NetworkSecurity #IAM #ZeroTrust #DevSecOps #ThreatModeling #MITREATTACK #OWASP #AWS #Azure #GCP #SIEM #SOAR #EDR #XDR #Kubernetes #Terraform #Python #CISSP #CCSP #NIST #ISO27001 #Altimetrik #S&PGlobal #PrincetonNJ #NYCJobs #NewYorkJobs #NewJerseyJobs #USC #H4EAD #FullTimeJobs #TechJobs #ITJobs