IT - Cyber Security Architect - Engineer Senior

Client: Mercedes Benz Financial Services (MBFS)


Location: Onsite - Alliance / Forth Worth, TX (3-4 days onsite (Fridays remote))


Contract: 12 months + (Potential for extension or fulltime conversion)


Position Overview:

This person will be a security architect that will help provide security assessments and threat models for MBFS Applications going to the Azure cloud as well as local data centers.


Key Responsibilities:

Threat Modeling

Risk and vulnerability assessment and remediation


Skills and Qualifications:

CISSP is a MUST

Azure Certifications or working on completing Azure Certification


Position Overview

Mercedes Benz Financial Services (MBFS) is committed to delivering a secure and trusted customer journey. To strengthen our regional cybersecurity posture, MBFS is seeking a Cyber Security Architect to deploy, operationalize, and mature application level security capabilities in alignment with the global Architecture & Engineering (AE) strategy.


This role serves as a senior technical authority responsible for identifying, assessing, and remediating application security risks while partnering closely with development teams, cloud engineers, and business stakeholders to ensure secure, scalable, and compliant solutions.


Key Responsibilities

Application & Cloud Security Engineering

Deploy, operate, and mature application security tools, capabilities, and standardized requirements across the region.

Identify, analyze, and document application level vulnerabilities using structured and repeatable approaches.

Provide hands on support for secure application design, remediation efforts, and secure SDLC practices.

Support the deployment, security, and monitoring of applications hosted in Microsoft Azure.

Secure Azure workloads including App Services, Azure Functions, AKS, and Virtual Machines.

Architect and review secure network configurations, including NSGs, private endpoints, and firewalls.

Implement secrets management using Azure Key Vault.

Leverage Defender for Cloud, Azure Policy, Log Analytics, and Microsoft Sentinel for governance, monitoring, and continuous improvement.


Threat Modeling, Risk Management & Secure Design

Perform secure profiling and threat modeling using STRIDE, C4 modeling, and MITRE methodologies.

Develop data flow diagrams and comprehensive threat models for critical applications.

Translate identified threats into actionable, prioritized security recommendations.

Track, coordinate, and report on remediation activities and overall application risk posture.

Communicate risks, mitigation strategies, and compliance readiness to both technical and non technical stakeholders.


Identity, Access & Security Enablement

Design and guide secure authentication and authorization architectures using:

OAuth 2.0

OpenID Connect (OIDC)

SAML 2.0

Implement and support integrations with Microsoft Entra ID (Azure AD).

Advise teams on JWT validation, managed identities, service to service authentication, RBAC, Conditional Access, and secure API authorization.

Deliver targeted application security training and awareness sessions to development and engineering teams.


EEO Employer

Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at [email protected] or View phone number on click.appcast.io.


Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico. Everforth Apex uses a virtual recruiter as part of the application process. Click here for more details.


Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Everforth Apex team member can provide.