Senior Security Architect

The Senior Security Architect is responsible for conducting security architecture assessments and consultations to ensure compliance with organizational policies and standards prior to project go-live. This role supports multiple projects by developing and maintaining security reference architectures, analyzing proposed solutions for vulnerabilities, and advising on cloud security technologies to mitigate risks and enhance enterprise security posture. Responsibilities:

• Develop and maintain security reference architectures, network diagrams, and guidelines aligned with policies and standards.
• Define security requirements and advise on cloud technologies throughout the project lifecycle.
• Ensure optimal placement and adequacy of security technologies based on cloud service models.
• Analyze solution architectures and IT processes to identify threats, vulnerabilities, and recommend security enhancements.
• Serve as a subject matter expert on complex security architecture issues and collaborate with internal partners.
• Manage multiple security-related projects simultaneously and provide updates to senior management.
• Integrate and propose best practices in business, policy, information, application, and technical security architecture.
• Identify and escalate issues to ensure adherence to application management and quality standards.

• 10+ years of experience in IT security principles, practices, technologies, programs, and procedures.
• Strong knowledge of cloud architecture and security controls.
• Certifications such as CISSP-ISSAP, CCSP, or GDSA in cybersecurity and cloud security architecture.
• Hands-on experience (5-7 years) with threat modeling techniques like STRIDE, PASTA, and MITRE ATT&CK.
• Extensive experience with cloud and on-premises security controls and architecture.
• Strong understanding of information security frameworks such as ISO 27001/2 and NIST.
• Proven ability to identify security gaps and propose architecture enhancements.
• Excellent verbal and written communication skills for technical and non-technical audiences.

• Certifications in ArchiMate, TOGAF, SABSA, or Zachman frameworks.
• Deep understanding of security threats, vulnerabilities, and safeguards relevant to application development, test, QA environments, and IT operations.
• Knowledge of a wide range of security technologies including OS security, LAN/WAN, firewalls, IDS/IPS, PKI, identity and access management, and malware defense.
• Experience authoring technical and executive-level reports and delivering presentations to senior leadership.
• Ability to build sustainable relationships with stakeholders and colleagues.
• Demonstrated strong collaboration and team player skills.

• Must perform security architecture assessments timely to not delay project go-live dates.
• High level of autonomy expected in setting objectives based on management direction.
• Ability to manage multiple projects and escalate issues appropriately.
• Flexible work location.

• Work schedule and shifts are flexible; no specific shift pattern indicated.