Information Security Architect

Information Security Architect, Washington, DC

We have an opening for an Information Security Architect to join the organization. The Information Security Architect will directly report to the CISO and will play a pivotal role in shaping the firm's security architecture as we transition from traditional on-premises environments to a cloud-first model centered on Microsoft 365. This position requires a deep understanding of cloud security, enterprise-scale cyber technologies, and strong collaboration with cross-functional teams. We are ideally seeking candidates with strong cloud experience coupled with a strong general cyber architecture background and experience with cyber controls and network. Candidates must have cloud experience. This position is 100% Onsite and not open for Remote.

Information Security Architect Responsibilities:

• Design and oversee the firm's information security architecture, focusing on cloud-first solutions (e.g., Microsoft 365, Azure, etc.) while ensuring seamless integration with on-premises environments.
• Evaluate, recommend, and implement cutting-edge tools to enhance the firm's cyber defense capabilities, including areas such as CSPM (Cloud Security Posture Management) and SSPM (SaaS Security Posture Management).
• Architect and design solutions that align with the principles of Zero Trust including SASE (secure access service edge) and ZTNA (zero trust network access).
• Collaborate closely with the Cyber Engineering and Operations teams to ensure the architecture supports operational needs and aligns with security objectives.
• Conduct security assessments of existing and proposed systems, identifying gaps and recommending solutions that meet compliance, legal, and risk management requirements.
• Develop and maintain comprehensive documentation of security architecture, design principles, and system configurations.
• Act as the subject matter expert on cloud security, network, endpoint, mobile, and data security by providing guidance and mentorship to teams across the organization.
• Stay current with emerging security threats, trends, and technologies, ensuring the firm's architecture remains robust and adaptive to evolving risks.
• Engage with stakeholders, including IT, legal, and compliance teams, to align security objectives with broader organizational goals.

Information Security Architect Qualifications:

• Bachelor's degree in computer science, Information Security or a related field is preferred; master's degree is preferred.
• 10+ years of progressive experience in information security, with at least 5 years in a senior architect or equivalent role is required.
• Must have cloud experience.
• Need strong general cyber architecture background and experience with cyber controls and network.
• Strong knowledge of modern cyber technologies and tools, including but not limited to CSPM, SSPM, EDR, SIEM, and CASB.
• Familiarity with security frameworks such as NIST CSF, ISO 27001, and CIS Critical Security Controls.
• Proven expertise in designing and implementing cloud security controls, particularly within Microsoft 365 and Azure environments.
• Hands-on experience with threat modeling, risk assessments, and vulnerability management in hybrid IT environments.
• Exceptional communication and collaboration skills, with the ability to engage effectively with both technical and non-technical stakeholders.
• Strong analytical and problem-solving abilities.
• A proactive mindset with a focus on driving security innovation and operational excellence.
• Self-starter with the ability to work independently and lead strategic initiatives.
• Detail-oriented with a commitment to delivering high-quality results.
• Adaptability to a fast-paced and dynamic work environment.
• Relevant certifications such as CISSP, CISM, CCSP, or Azure Security Engineer are strongly preferred.
• Experience in legal or other highly regulated industries is a plus but not required.

Benefits include Medical, Dental, Vision, Life/AD&D, Long Term Care, and Short- and Long-Term Disability, Flexible Spending Account, Health Savings Account, Lifestyle Spending Account, Voluntary 401(k) Plan, Profit Sharing, etc.