IT Security Architect

Salary: $130,000 - 160,000 per year Requirements:

• We bring 10+ years of experience in enterprise security or infrastructure architecture.
• We have deep expertise in identity architecture, including Active Directory, Microsoft Entra ID, and privileged access models.
• We have strong experience designing security models for hybrid enterprise environments.
• We have experience defining enterprise technology architecture standards and security guardrails.
• We are familiar with NIST CSF and enterprise regulatory frameworks.
• CISSP certification is preferred.
• Azure security or architecture certifications, such as AZ-500 or AZ-305, are preferred.
• Experience supporting large-scale domain, identity, or tenant consolidation initiatives is preferred.

• We design, maintain, and execute security architecture frameworks and roadmaps across on-premises, hybrid, and cloud environments, aligned with regulatory and industry standards such as NIST, ISO 27001, SOC 2, and NYDFS.
• We define enterprise identity and authentication architecture across Active Directory and Microsoft Entra ID, including Tier-0 protections, privileged access models, authentication standards, and cross-tenant integration patterns.
• We lead security architecture for domain, forest, and tenant consolidation efforts, ensuring hardened trust models and secure hybrid identity boundaries.
• We establish security architecture standards for infrastructure and technology platforms, including datacenter environments, server platforms, hybrid connectivity, and administrative privilege boundaries.
• We define cloud security architecture standards across enterprise cloud platforms, including Azure baselines, RBAC models, policy enforcement, workload identity controls, and secure multi-tenant integration patterns.
• We define cloud, container, and DevSecOps security standards, including image governance, runtime protection, and controls built into infrastructure as code and CI/CD pipelines.
• We establish data protection and cryptographic architecture standards covering data classification, encryption, key management, PKI, DLP patterns, and data residency.
• We define network and hybrid connectivity security architecture, including segmentation strategies, private connectivity models, micro-segmentation, and blast-radius containment patterns.
• We define security telemetry, logging, and audit architecture standards to support control enforcement, SIEM/XDR integration, and incident readiness.
• We lead security architecture reviews, threat modeling, and risk assessments for major initiatives and emerging technologies, identifying control gaps and mitigation patterns while defining measurable security architecture KPIs.

• Active Directory
• Azure
• CI/CD
• Cloud
• DevSecOps
• Support
• Network
• RBAC
• Security
• Architect
• Embedded
• OAuth
• SAML

More:

We are building an architecture function to define enterprise technology standards across identity, infrastructure, cloud, and security platforms. In this role, we shape how our enterprise technology is designed across on-site, hybrid, and cloud environments by setting technical standards, reference architectures, and security guardrails for engineering and modernization efforts. We offer remote working flexibility, comprehensive health and welfare benefits from day one, retirement savings support, employee discounts, paid training, paid time off, and a culture that values diversity, inclusion, and individual contribution. We also provide career growth opportunities within a global organization, with an estimated salary range of $130K to $160K annually, plus potential bonus or incentive eligibility depending on business need.

last updated 33 week of 2026