Senior Security Architect

Role Summary Client seeking an experienced Senior Security Architect for a staff augmentation engagement within its Enterprise Architecture organization. This role is central to shaping and implementing client's enterprise security architecture strategy across cloud platforms, enterprise systems, and hybrid environments. The Senior Security Architect will partner with executive stakeholders, technology leaders, and cross-functional teams to design and implement security frameworks, establish governance, and drive enterprise-wide standards that protect the company’s data, systems, and applications. The ideal candidate brings deep technical expertise, a track record of executive-level engagement, and the ability to operate with autonomy from day one. Key Responsibilities Security Strategy & Advisory Define and lead the enterprise security architecture strategy, ensuring alignment with business objectives and the current threat landscape. Serve as a strategic advisor to technology and business leadership, identifying risks, recommending mitigation strategies, and presenting solution options at the C-level. Provide architecture guidance on data protection, applying best practices such as least privilege, data classification, and privacy controls to safeguard sensitive information. Governance & Standards Champion security governance by establishing and maintaining robust standards, policies, and reference architectures for enterprise-wide adoption. Design, validate, and implement security frameworks for multi-cloud environments, including automated guardrails and compliance controls. Ensure ongoing adherence to applicable regulatory and compliance standards (e.g., PCI-DSS, GDPR, ISO 27001). Design and deliver scalable, secure architectures for enterprise applications, infrastructure, and integration platforms. Develop and maintain security blueprints covering both portfolio-level and information security domains. Embed security into technology roadmaps by partnering with solution architects, platform teams, and business stakeholders. Provide subject-matter expertise in identifying, analyzing, and addressing security incidents, vulnerabilities, and emerging risks. Contribute to business continuity and disaster recovery planning from an architecture perspective. Stay ahead of emerging security technologies, frameworks, and threat vectors — applying innovative approaches to strengthen the organization’s security posture. Mentor and guide team members and partners, fostering a culture of continuous learning and security excellence. Qualifications Required Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent professional experience. 10+ years of experience in IT security, architecture, or related disciplines, with demonstrated leadership in enterprise security strategy. 5–7 years of hands-on expertise in cloud security (Azure, AWS), hybrid platform architectures, and DevSecOps practices. 10+ years of experience across the following areas: Designing and delivering security roadmaps aligned to business objectives Designing or implementing security architecture frameworks (e.g., Zero Trust, Defense in Depth) Defining security standards, controls, and best practices at the enterprise level Data privacy, data classification, and supporting standards and controls Regulatory and compliance adherence: PCI-DSS, GDPR, ISO 27001 Security technologies including IAM, encryption, intrusion detection, endpoint security, and SIEM Governance, Risk, and Compliance (GRC) capabilities Designing scalable, secure architectures for enterprise applications and infrastructure Demonstrated ability to engage with and influence business and technology stakeholders up to C-suite level. Preferred Active certifications: CISSP, CISM, CISA, or equivalent. Familiarity with security frameworks such as NIST CSF, MITRE ATT&CK, or SABSA. Experience with AI/ML-driven security models, threat analytics, or AI governance considerations in enterprise environments. Experience with enterprise wide Zero Trust Architecture aligned with NIST principles, integrating identity, network, application, endpoint, and data security controls. Experience with network segmentation and micro-segmentation strategies across on-premises, cloud, and hybrid environments to reduce attack surface, prevent lateral movement, and contain cyber threats. Background in physical and enterprise security capabilities (e.g., facilities access platforms, security operations) as a complement to cybersecurity expertise. #J-18808-Ljbffr