Enterprise Security Architect

6 month contract with extensions hybrid to the NYC office Google Cloud expertise strongly preferred We are seeking a Contract Enterprise Security Architect to join our cybersecurity team. This role serves as the lead technical reviewer for the Enterprise IT Intake Process—the gateway through which all new products, software, and systems undergo cybersecurity and Enterprise Architecture (EA) review. The successful candidate will evaluate proposed business solutions, vendor platforms (SaaS/IaaS), and custom systems against NIST frameworks and company Cyber Security Standards. Acting as a high-trust technical advisor, you will conduct threat modeling and controls validation, ultimately providing structured control evaluations and recommendations to the engineering team for final approval. Key Responsibilities Lead Enterprise IT Intake Reviews: Serve as the lead reviewer coordinating cybersecurity and EA assessments for new projects, vendor products, and software intake. Serve as point of escalation to junior approvers Standards Evaluation: Review and evaluate proposed system architectures against NIST SP 800-53 frameworks and internal Cyber Security Standards prior to deployment. Technical Risk Advisory: Partner with business sponsors, project managers, and vendor teams to identify security gaps early in the project lifecycle and recommend remediation designs. Authentication & Identity Validation: Assess authentication and access control mechanisms (SSO, MFA, OAuth, SAML, and passwordless FIDO/Yubikey federation) for adequacy and compliance with internal standards. Cloud & Infrastructure Assessment: Conduct architecture and design reviews for deployments across a multi-cloud environment—specifically GCP and Azure—as well as Oracle-based systems. Resiliency & Data Protection: Validate encryption implementations (data at rest/in transit) and assess backup, disaster recovery, and data protection designs. Process Evolution: Maintain and update security review checklists, intake documentation, and technical alignment guidelines to keep pace with changing threats. Required Qualifications 7+ years in Cybersecurity, Security Architecture, or Enterprise Security consulting. Strong expertise in Standards & Frameworks: Deep practical knowledge of NIST SP 800-53, NIST CSF, OWASP, and SOC 2. Identity & Access Depth: Hands-on experience evaluating enterprise Identity and Access Management (IAM), federation protocols, and modern passwordless/MFA models (FIDO/Yubikeys). Cloud Competency: Proven experience reviewing security controls, native services, and network security policies within GCP and Azure environments. Excellent Risk Communication: Ability to translate complex technical vulnerabilities and architectural weaknesses into clear, business-risk-focused recommendations for both technical teams and senior management. Regulated Industry Experience: Prior experience delivering security reviews or compliance consulting within highly regulated environments, ensuring designs conform to strict regulatory and protection network controls. Preferred Qualifications Regulated Utility Sector Experience: Direct experience working with cybersecurity standards and compliance frameworks within a heavily regulated utility or critical infrastructure environment. OT/IT Integration: Understanding of Operational Technology (OT) security concepts and secure boundaries between IT and operational environments. Certifications: CISSP, CISM, SABSA, or cloud-specific security certifications (Google Professional Cloud Security Engineer, Microsoft Certified: Azure Security Engineer). Vertex Solutions Inc. is an Equal Opportunity Employer and does not discriminate on the basis of race, color, creed, national origin, ancestry, religion, age, citizenship, sex, marital or veteran status, disability or handicap, sexual orientation or any other basis prohibited by applicable law. #J-18808-Ljbffr