Cybersecurity Architect

Job Summary

The Cybersecurity Architect acts as the enterprise security design authority for Identity & Access Management (IAM) and Zero Trust Architecture (ZTA), while remaining technically engaged across Security Operations, Infrastructure Security, and Administrative implementation to ensure that security designs are operationally enforceable and measurable in production environments.

The role spans the following capability clusters and bridges:

• Architecture, integration, consulting, and vendor management
• IAM & infrastructure security
• Security Operations Center (SOC) collaboration
• Administration / implementation alignment

Key Responsibilities:

1. Architecture & Program Ownership

• Define enterprise IAM & Zero Trust reference architectures, patterns, and guardrails.

• Lead architecture design for: o Identity governance & lifecycle automation

  • SSO/MFA, federation, conditional access
  • Privileged Access Management (PAM)
  • Identity analytics, risk signals, and telemetry

• Build target-state roadmaps, maturity plans, and integration blueprints.

• Ensure alignment with NIST CSF, ISO 27001, NIST 800-207, and Zero Trust principles.

2. Hands-On SOC Engagement

• Support incident analysis, threat hunting, and detection engineering to validate design assumptions.

• Translate SOC findings into architecture hardening patterns.

• Participate in:

  • Vulnerability assessment remediation design
  • Exposure reduction initiatives
  • Red/blue team architecture learning cycles

• Ensure SOC controls map to IAM & ZTA enforcement points.

3. Security Implementation & Administration Support

• Provide hands-on technical guidance during rollout of IAM and Zero Trust controls.

• Support:

  • Secure configuration baselines
  • Platform & infrastructure hardening
  • Change and provisioning models

• Validate implementation fidelity vs. architecture decisions.

• Assist engineering teams during:

  • Proof-of-concepts (POCs)
  • Production deployment blueprints
  • Integration troubleshooting

4. Engineering & Platform Integration

• Ensure IAM, SOC tooling, and infrastructure controls interoperate.

• Review solution designs and engineering runbooks.

• Provide technical leadership in:

  • Cloud IAM & workload identity models
  • Micro-segmentation and policy-based access
  • Data security alignment (classification → access → monitoring)

5. Governance, Consulting & Leadership

• Participate in security steering, design review boards, and architecture forums.

• Act as consultative partner to:

  • Platform teams
  • Application owners
  • Business units (BISO / LISO representatives)

• Mentor engineers on identity-centric design and Zero Trust adoption.

Qualifications:

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or a related field.

• Strong background in security engineering, SOC operations, or infrastructure security.

• Direct experience deploying or designing:

  • IAM / IGA / PAM platforms o Conditional access, MFA, federation
  • Log- and telemetry-driven identity controls

• Prior work with:

  • Incident response workflows
  • Threat detection & remediation alignment
  • Change & provisioning processes at scale

• Preferred Certifications: CISSP, CCSP, SABSA, TOGAF, CISM, vendor IAM certifications.