Cybersecurity Architect
Posted Updated
Description
You will translate cybersecurity strategy into practical architectures, standards, patterns, and implementation roadmaps. You will review systems and vendors, design controls across identity, cloud, applications, data, and operational technology, document decisions, support risk management, and mentor technical stakeholders.
Responsibilities
- Lead security architecture principles, reference architectures, technical standards, and security-by-default patterns
- Translate cybersecurity strategy and risk priorities into architecture decisions and implementation roadmaps
- Review security architecture for platforms, applications, integrations, cloud services, infrastructure, AI workloads, and operational technology
- Design defense-in-depth controls across identity, networks, endpoints, cloud, SaaS, applications, data, APIs, CI/CD, and industrial environments
- Define security requirements for authentication, authorization, encryption, logging, monitoring, resiliency, secrets, vulnerabilities, and incident readiness
- Develop reusable security patterns and guardrails
- Evaluate technology risks, alternatives, vendors, and managed services
- Support threat modeling, risk assessments, incident preparedness, and remediation
- Maintain architecture documentation, standards, decision records, and procedures
- Mentor cybersecurity engineers and technical stakeholders
Requirements
- 5+ years of progressive cybersecurity, information security, security architecture, security engineering, or comparable technical experience
- Knowledge of security architecture across identity, network, endpoint, cloud, SaaS, application, data, and infrastructure environments
- Experience designing security controls for cloud platforms, enterprise applications, APIs, CI/CD pipelines, production systems, and data environments
- Familiarity with operational technology or industrial control environments
- Experience with threat modeling, risk assessments, zero trust, defense-in-depth, and secure systems development
- Knowledge of NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, SOX ITGC, PCI, or comparable standards
- Technical writing and communication skills
- Experience working with security vendors, MSSPs, auditors, and third parties
