Security Architect

A leading Cyber Firm is seeking an experienced Security Architect for a long term contract with a large enterprise customer of theirs.

100% remote.

$1000 to $1,100 per day.

Key Responsibilities

• Define and maintain security architecture principles, standards, and reference architectures.
• Provide security architecture guidance for enterprise, cloud, infrastructure, application, and data initiatives.
• Ensure security requirements are embedded throughout the solution lifecycle using Secure by Design and Security by Default principles.
• Conduct architecture and design reviews, threat modelling, security risk assessments, and control evaluations.
• Partner with project teams, engineers, and stakeholders to design secure solutions that balance risk, usability, and business outcomes.
• Develop and maintain security patterns, guardrails, and security design standards.
• Assess emerging technologies and recommend appropriate security controls.
• Support compliance with relevant regulatory, legal, and industry frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC2, PCI DSS, APRA CPS 234, Essential Eight).
• Contribute to security governance, risk management, and audit activities.
• Provide leadership and mentorship to engineering and architecture teams on security best practices.

Required Skills & Experience

• 8+ years of experience in cybersecurity, with significant experience in security architecture.
• Demonstrated expertise across multiple security domains, including:
  • Cloud Security (Azure, AWS and/or GCP)
  • Identity and Access Management (IAM/PAM)
  • Network and Infrastructure Security
  • Application and API Security
  • Data Protection and Encryption
  • Security Operations and Detection Controls
  • Governance, Risk, Compliance, and Security Assurance
• Strong experience applying Secure by Design, threat modelling, and risk-based security methodologies.
• Experience designing security controls for complex enterprise environments and digital transformation programs.
• Strong understanding of security frameworks and regulatory compliance requirements.
• Exceptional stakeholder engagement, communication, and influencing skills.
• Relevant security certifications such as CISSP, SABSA, TOGAF, CCSP, AZ-500, or equivalent are highly regarded.