Sr Cybersecurity Specialist / Cybersecurity Architect

Job Description

Job Description

Cybersecurity Specialist / Cybersecurity Architect
Location: Santa Ana, CA
Duration: 12+ Months

Position Summary:
We are seeking an experienced Cybersecurity Specialist / Cybersecurity Architect to lead the design, implementation, and governance of secure, resilient, and highly available enterprise technology environments. This role is responsible for developing cybersecurity architectures, assessing security risks, implementing security controls, and ensuring compliance with industry standards and organizational security policies across complex IT and operational technology (OT) environments.
The ideal candidate will have experience protecting mission-critical infrastructure, designing secure network architectures, implementing identity and access management solutions, and supporting enterprise-wide cybersecurity initiatives.
Key Responsibilities

• Design and implement enterprise cybersecurity architectures aligned with business and regulatory requirements.
• Conduct cybersecurity risk assessments, threat modeling, and security gap analyses for enterprise IT and OT environments.
• Develop and maintain security standards, policies, and architectural frameworks.
• Design and implement Identity and Access Management (IAM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA), and Zero Trust security principles.
• Configure and support network security technologies including firewalls, IDS/IPS, VPNs, Web Application Firewalls (WAF), Network Access Control (NAC), and secure remote access solutions.
• Perform vulnerability assessments, coordinate remediation activities, and support penetration testing and security validation exercises.
• Collaborate with infrastructure, networking, cloud, and application teams to integrate security into system design and deployment.
• Support cloud security initiatives across Azure, AWS, and/or Google Cloud environments, including workload protection and cloud security best practices.
• Develop recommendations for incident response, disaster recovery, business continuity, and cyber resilience.
• Monitor evolving cybersecurity threats and recommend proactive mitigation strategies.
• Ensure compliance with applicable cybersecurity frameworks, standards, and regulatory requirements.
• Review technical designs, system implementations, and infrastructure changes to ensure adherence to security best practices.
• Support the security integration of enterprise physical security technologies, intelligent monitoring systems, and other critical operational platforms.
• Prepare technical documentation, security architecture diagrams, risk assessments, and executive-level reports.

Required Qualifications

• Bachelor’s degree in computer science, Information Security, Information Technology, Cybersecurity, Engineering, or a related discipline.
• Minimum 8+ years of experience in cybersecurity architecture, cybersecurity engineering, or enterprise security consulting.
• Strong knowledge of:
  • Enterprise network security architecture
  • Identity and Access Management (IAM)
  • Privileged Access Management (PAM)
  • Firewalls, IDS/IPS, VPN, NAC, WAF
  • Endpoint Detection & Response (EDR/XDR)
  • Security Information and Event Management (SIEM)
  • Cloud security (Azure, AWS, and/or Google Cloud)
  • Vulnerability Management and Risk Assessment
  • Security Operations and Incident Response
  • Operational Technology (OT) and Industrial Control System (ICS) security principles
• Experience implementing cybersecurity controls for highly available, mission-critical environments.
• Familiarity with Zero Trust Architecture, NIST Cybersecurity Framework, CIS Controls, ISO 27001, and applicable regulatory/compliance standards.
• Experience conducting security architecture reviews, security assessments, and technical design reviews.
• Excellent analytical, communication, documentation, and stakeholder management skills.

Preferred Qualifications

• Professional certifications such as CISSP, CISM, CCSP, GSEC, GIAC, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent.
• Experience securing converged IT/OT environments and critical infrastructure systems.
• Knowledge of physical security system integration, including intelligent surveillance, electronic access control, IoT-connected devices, and other operational technologies.
• Experience working in highly regulated or 24x7 operational environments where system availability, resilience, and cybersecurity are critical.