Security Architect

Role Overview

We are seeking a seasoned Security Architect to establish, oversee, and enforce comprehensive enterprise security frameworks across multiple domains including business applications, infrastructure, cloud environments, and technology projects. This role demands embedding security at the core of solution design, conducting architecture assessments, setting security standards, and ensuring alignment of security controls with organizational risk mandates and industry best practices.

Key Duties

• Develop and sustain enterprise security architecture frameworks, principles, and standards using methodologies such as TOGAF and SABSA.
• Critically evaluate and endorse security designs, high- and low-level designs, solution architectures, technical proposals, and related documentation.
• Ensure new technologies integrate security-by-design and security-by-default principles.
• Perform security architecture assessments, threat modeling, risk assessments, and design reviews.
• Advise on upgrades and improvements for platforms, applications, infrastructure, and security measures based on best practices.
• Architect and review security in areas including IAM, network and cloud security, endpoint and email protection, and SIEM/SOAR technologies.
• Assess secure architecture deployments across Microsoft Azure, hybrid, multi-cloud, and VMware environments.
• Detect security vulnerabilities, recommend remediation strategies, and facilitate security enhancement initiatives.
• Support audit activities by maintaining security documentation, controls, and evidence.
• Provide expert guidance to architects, engineers, and stakeholders to promote secure technology choices.

Essential Qualifications & Experience

• Between 10 to 12 years in cybersecurity architecture, enterprise security design, or advisory roles.
• Certification in TOGAF or SABSA.
• In-depth knowledge of enterprise security paradigms including Zero Trust and security-by-design.
• Proficiency with IAM solutions like SailPoint, IBM IAM, Imprivata, single sign-on (SSO), multi-factor authentication (MFA), privilege access management (PAM), and access governance.
• Experience with network security tools including Fortinet, Palo Alto Networks, Cisco ASA, VPN, and network segmentation.
• Administrating cloud security tools such as Microsoft Defender for Cloud, Sentinel, Intune, Purview, and Defender XDR.
• Expertise in endpoint and email security systems like Microsoft Defender for Endpoint, Proofpoint, Trend Micro, and Exchange Online Protection.
• Capability to prepare detailed HLDs, LLDs, security diagrams, technical designs, and security advisory reports.
• Strong background in threat modeling, risk assessment, security controls, and governance.
• Hands-on experience assessing security in hybrid or multi-cloud settings.

Desirable Skills

• Advanced certifications such as CISSP, CCSP, or Azure Security credentials.
• Familiarity with VMware security architecture.
• Knowledge of standards including ISO 27001, NIST, SOC 2, and PCI-DSS.
• Exposure to SIEM/SOAR integration with security operations workflows.
• Awareness of DevSecOps and secure software development life cycle practices.
• Excellent communication, documentation, presentation, and stakeholder engagement abilities.