Enterprise Cyber Security Solution Architect

Job Description

STRATEGIC STAFFING SOLUTIONS HAS AN OPENING!

\n

This is a Contract Opportunity with our company that MUST be worked on a W2 Only. No C2C eligibility for this position. Visa Sponsorship is Available! The details are below.

\n

“Beware of scams. S3 never asks for money during its onboarding process.”

\n

\n

Job Title: Enterprise Cyber Security Solution Architect

\n

Location: Lutz, FL

\n

Work Schedule: Hybrid – 4 Days Onsite / 1 Day Remote

\n

Contract Length: 24 Months

\n

\n

Position Summary

\n

Seeking an experienced Enterprise Cyber Security Solution Architect responsible for designing, maturing, and governing enterprise-wide cybersecurity solutions that protect critical information assets and infrastructure.

\n

This position serves as a solution architect and technical authority, defining future-state architectures, security standards, and multi-year roadmaps while partnering with engineering teams, system integrators, and Managed Security Services (MSS) for execution and operations.

\n

The role provides architectural leadership across Identity and Access Management (IAM), Identity Governance and Administration (IGA), Privileged Access Management (PAM), Data Loss Prevention (DLP), Application Security, Public Key Infrastructure (PKI), and other cross-functional cybersecurity capabilities.

\n

This position focuses on architecture, integration, and governance , rather than hands-on implementation or day-to-day administration.

\n

Key Responsibilities

\n

Identity Management & Identity Governance (IAM/IGA) – 35%

\n

\n
• Define and maintain IAM and IGA reference architectures, standards, and roadmaps aligned with Zero Trust and least privilege principles.
\n
• Provide solution architecture leadership for Microsoft Entra ID, including passwordless authentication, Conditional Access, advanced SSO, and identity federation.
\n
• Architect and mature Saviynt IGA capabilities, including RBAC models, enterprise role catalogs, entitlement management, and access certifications.
\n
• Design identity controls addressing BYOD exposure through Conditional Access, session controls, and device trust strategies.
\n
• Lead enterprise integrations with CyberArk PAM, ServiceNow, SAP, and other business applications.
\n
• Govern non-human and workload identities in coordination with PAM and IGA platforms.
\n

\n

Privileged Access Management (PAM) – 25%

\n

\n
• Serve as the enterprise PAM solution architect and design authority.
\n
• Define and lead the PAM maturity roadmap, including pilot deployments, enterprise rollout, and transition to Managed Security Services operations.
\n
• Architect advanced CyberArk capabilities, including privileged session recording, Secure Credential Access (SCA), Secure Web Access (SWA), Just-in-Time (JIT) provisioning, access decoupling, and excessive privilege reduction.
\n
• Establish PAM reference architectures and standards across on-premises, cloud, hybrid, and operational technology environments.
\n
• Provide architectural oversight and governance to system integrators.
\n

\n

Data Loss Prevention (DLP) – 15%

\n

\n
• Serve as the solution architect for enterprise DLP capabilities, including Microsoft Purview.
\n
• Define architectural patterns for data classification, labeling, and protection across email, endpoints, cloud services, and data at rest.
\n
• Align DLP designs with IAM, Conditional Access, and data governance requirements.
\n
• Partner with Legal, Compliance, and Risk teams to address regulatory and privacy requirements.
\n

\n

Application Security Architecture – 15%

\n

\n
• Define secure application reference architectures, design patterns, and secure coding standards.
\n
• Partner with development and DevOps teams to integrate security into the Software Development Lifecycle (SDLC).
\n
• Provide architectural guidance for authentication, authorization, and secure data handling aligned with IAM, PAM, and DLP strategies.
\n
• Support application security risk assessments and security architecture reviews for business-critical systems.
\n

\n

PKI & Certificate Management – 5%

\n

\n
• Provide architectural leadership and governance for enterprise PKI and certificate lifecycle management.
\n
• Define standards for certificate issuance, renewal, revocation, and automation.
\n
• Support certificate-based authentication strategies, including passwordless initiatives.
\n

\n

Cyber Defense & Security Governance – 5%

\n

\n
• Contribute to architecture and governance of cyber defense and detection capabilities.
\n
• Participate in developing enterprise security standards, policies, and control frameworks.
\n
• Serve as a trusted advisor during security architecture reviews and enterprise risk discussions.
\n

\n

Required Qualifications

\n

\n
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or equivalent experience.
\n
• 8+ years of related cybersecurity or IT experience, including Information Systems Audit, Information Security, systems management, systems administration, information systems security, system certification, or risk analysis, with a focus on DLP and/or File Integrity Monitoring (FIM) solutions and security controls.
\n
• Strong enterprise architecture experience.
\n
• Demonstrated expertise across IAM/IGA, PAM, DLP, Application Security, and PKI.
\n
• Expert-level cybersecurity knowledge and high competency in architecture methodologies and best practices for IAM, data protection, application security, and infrastructure security.
\n
• Significant high-level systems/security engineering experience across multiple technologies.
\n
• Knowledge of systems security engineering principles and secure software deployment practices.
\n
• Knowledge of data classification tools and techniques.
\n
• Knowledge of enterprise architecture reference models, frameworks, principles, and practices.
\n
• Knowledge of the Open Systems Interconnection (OSI) reference model.
\n
• Knowledge of configuration management tools and techniques.
\n
• Knowledge of Confidentiality, Integrity, Availability, Authenticity, and Non-repudiation (CIAAN) principles.
\n
• Familiarity with NIST SP 800-53, ISO 27001, and other relevant security standards.
\n
• Knowledge of applicable information security, privacy, and data protection regulations.
\n
• Understanding of IT systems, network architecture, and security control implementation.
\n
• Knowledge of access controls, encryption, incident response, SIEM, IDS/IPS, endpoint protection, and threat intelligence solutions.
\n
• Ability to conduct comprehensive risk assessments, security control assessments, and vulnerability assessments.
\n
• Strong analytical, critical thinking, problem-solving, communication, documentation, and strategic planning skills.
\n
• Ability to communicate technical findings and recommendations to technical and non-technical stakeholders.
\n
• Ability to collaborate with system owners, security teams, management, and other stakeholders.
\n
• Ability to adapt to evolving cybersecurity threats, technologies, and regulatory requirements.
\n
• Commitment to ethical standards, professionalism, and continuous learning.
\n
• Two related Information Security professional certifications from recognized certification vendors, such as (ISC)², GIAC, ISACA, CompTIA, or EC-Council, or the ability to obtain them through self-study within one year of hire.
\n

\n

Preferred Qualifications

\n

\n
• ITIL v3 certification.
\n
• Three or more Information Security professional certifications, including or similar to ACE, CCE, CEH, CISA, CISM, CISSP, CRISC, EnCE, GCCC, GCDA, GCED, GCFA, GCFE, GCIA, GCIH, GCWN, GICSP, GMON, GNFA, GPEN, GPPA, GREM, GWAPT, GXPN, OSCP, or SSCP.
\n

\n

Working Conditions

\n

\n
• Hybrid schedule requiring four days onsite per week in Lutz, FL.
\n
• Occasional weekend and overtime requirements, including rotational on-call support.
\n
• Normal office workplace environment.
\n

\n