Description

Define enterprise security architecture standards, create security patterns, and establish security controls by tier to enable secure-by-design solutions across the organization.

This role is hybrid.

Responsibilities

• Define security architecture reference architectures, including zero-trust and defense-in-depth models.
• Create a comprehensive security patterns library covering authentication, API security, data protection, and network security.
• Establish tiered security controls (Tier 0-3) and document IAM, encryption, and secrets management standards.
• Build secure design templates and develop threat modeling frameworks using STRIDE and PASTA.
• Conduct security architecture reviews and ensure compliance with SOC 2, ISO 27001, GDPR, and HIPAA.

Required Skills

• 7+ years in security architecture, enterprise architecture, or cybersecurity.
• 5+ years creating enterprise security standards, patterns, and controls.
• Expert proficiency in zero-trust architecture and secure design patterns.
• Strong experience with cloud security on AWS, Azure, and Google Cloud Platform.
• Proven ability to translate InfoSec policies into practical architectural patterns.
• CISSP certification required.

Preferred Skills

• TOGAF, SABSA, CISM, or CISA certifications.
• Cloud security certifications (AWS Security Specialty, Azure Security Engineer, Google Cloud Security Engineer).

Key Skills

Education

Any Graduate