Info Security Architect

Position Overview

We are seeking an experienced Information Security Architect to help design, implement, and enhance security solutions across a complex enterprise technology environment. This individual will play a critical role in ensuring that cloud platforms, infrastructure, applications, identity systems, and emerging technologies are built with security at their foundation.

The ideal candidate brings a strong combination of enterprise security architecture expertise and hands-on technical experience. This position requires someone who can assess complex environments, identify security risks, develop practical architectural solutions, and collaborate with engineering teams to implement effective security controls.

The role will support a variety of technology initiatives, including cloud modernization, Zero Trust adoption, application security improvements, and the secure integration of artificial intelligence technologies.

Key Responsibilities

Enterprise Security Architecture

• Design and maintain security architectures, technical standards, and reusable security patterns across enterprise technology platforms.
• Review proposed technology solutions, infrastructure designs, and application architectures to identify security vulnerabilities and recommend improvements.
• Conduct threat modeling, architectural risk assessments, and technical security evaluations.
• Develop secure configuration standards and implementation guidelines for enterprise systems and services.
• Collaborate with engineering and technology teams to ensure security requirements are incorporated into solution designs.

Cloud & Infrastructure Security

• Design security solutions for AWS, Azure, hybrid cloud, and traditional infrastructure environments.
• Establish cloud security controls related to identity, network connectivity, workload protection, monitoring, and configuration management.
• Partner with infrastructure and cloud engineering teams to implement secure cloud environments and services.
• Support security architecture for containerized applications, Kubernetes, and Infrastructure-as-Code deployments.
• Evaluate and integrate cloud security technologies, including CSPM, CWPP, secrets management, and workload protection solutions.

Network, Endpoint & Zero Trust Security

• Develop network security architectures incorporating Zero Trust principles, microsegmentation, and secure access technologies.
• Design security controls for enterprise connectivity, remote access, network segmentation, and traffic inspection.
• Collaborate with infrastructure teams to strengthen network security and reduce exposure across distributed environments.
• Support endpoint security initiatives involving EDR/XDR, device hardening, and enterprise security monitoring.
• Assess emerging network and endpoint security technologies and recommend appropriate architectural improvements.

Identity & Access Management

• Design and evaluate authentication, authorization, and access management solutions across enterprise applications and platforms.
• Support identity security capabilities involving SSO, MFA, federation, privileged access management, and role-based access controls.
• Incorporate least-privilege access principles and identity-based security controls into enterprise architectures.
• Work with technical teams to strengthen identity governance and access security across cloud and on-premises systems.

Application Security & Secure AI Adoption

• Partner with application development and DevOps teams to integrate security throughout the software development lifecycle.
• Conduct application security architecture reviews, threat modeling, and API