Security Architect

Kforce has a client that is seeking a Security Architect in Tampa, FL. Summary: We are seeking an experienced Enterprise Security Architect to lead the design, implementation, and governance of cybersecurity controls across enterprise IT, Operational Technology (OT), cloud, and hybrid environments. This role will focus on securing Advanced Distribution Infrastructure (ADI) technologies and ensuring solutions align with established security standards, regulatory requirements, and risk management practices. The Enterprise Security Architect will serve as a trusted advisor to technology teams, business stakeholders, project teams, vendors, and enterprise architects while driving secure architectural decisions across the organization. Primary Responsibilities:

• Design and implement security controls for ADI, enterprise, cloud, and OT environments
• Develop and maintain security architectures, technical standards, reference architectures, and implementation patterns
• Serve as the primary cybersecurity liaison for projects and technology initiatives
• Provide security guidance regarding approved technologies, architectural patterns, and risk mitigation strategies
• Conduct architecture reviews, cybersecurity assessments, technical risk reviews, vulnerability assessments, and compliance evaluations
• Identify security vulnerabilities, architectural deficiencies, and control gaps and recommend remediation actions
• Analyze security findings and determine business impact, risk exposure, and remediation priorities
• Interpret cybersecurity policies, standards, and regulatory requirements and communicate their impact to stakeholders
• Support compliance initiatives related to cybersecurity frameworks and industry regulations
• Research emerging security technologies and recommend improvements to strengthen the organization's overall security posture
• CISSP (Certified Information Systems Security Professional) or equivalent cybersecurity certification
• Additional security certifications such as CEH, GIAC, CSSA, or related vendor certifications are highly desired
• 7+ years of hands-on experience in Information Security, Security Architecture, Security Engineering, or related cybersecurity roles
• Experience implementing and supporting security frameworks including NIST Cybersecurity Framework (NIST CSF) and/or ISO 27000 standards
• Experience performing security assessments, architecture reviews, technical risk assessments, and vulnerability management activities
• Experience designing and implementing security controls within enterprise, OT, cloud, and hybrid environments

• Security architecture and secure systems design
• Enterprise network security and security architecture controls
• Firewalls, IDS/IPS, endpoint security, anti-malware, SIEM, and security monitoring technologies
• Identity and Access Management (IAM) concepts and technologies
• Encryption technologies including PKI, certificates, VPNs, and data encryption
• Cloud security architecture and hybrid cloud security controls
• Vulnerability management, threat assessment, and risk remediation
• Security governance, regulatory compliance, and cybersecurity standards development
• Strong understanding of cybersecurity regulations and compliance frameworks including NIST CSF, NERC CIP, TSA Security Directives, DFARS, SOX, and PCI

• Experience supporting Operational Technology (OT) environments and critical infrastructure
• Experience developing enterprise security standards, reference architectures, and security governance programs
• Strong communication and stakeholder management skills
• Ability to evaluate complex cybersecurity risks and independently recommend secure architectural solutions