Information Security Architect

Job Description
We are seeking an experienced Information PrincipalSecurity Engineer/Security Architect with a broad skill set encompassing Security Architecture/engineering, identity services, cloud security, and application security. In this role, you will be responsible for designing, evangelizing, and maintaining robust security architecture solutions to protect our organization's information assets across various platforms and environments. You will collaborate with cross-functional teams to ensure the confidentiality, integrity, and availability of our systems and data.
Primary Responsibilities and Duties – This role will be focused on these key functions:
Security Architecture Design:
Develop and implement comprehensive security architectures that address security engineering, identity management, cloud infrastructure/security, and application security requirements. Design scalable and resilient security solutions that align with business goals and regulatory compliance.
Develop security architecture strategies, standards, and guidelines focusing on application security, network/cloud security, and identity/access management.
Security Engineering:
Architect and assist with the implementation of security controls, tools, and technologies to protect information assets from internal and external threats. Collaborate with engineering teams to integrate security into the development and deployment processes.
Identity and Access Management (IAM):
Architecture of the future for Identity. Design and implement strategies for IAM solutions to manage user identities, access rights, and privileges across on-premises and cloud environments. Establish authentication, authorization, and access control mechanisms to enforce security policies effectively. Zero Trust architecture.
Cloud Security:
Architect and implement security controls and best practices (SASE) for cloud infrastructure (e.G., AWS, Azure, Google Cloud) to protect data and workloads in cloud environments. Evaluate and recommend security services and technologies to enhance cloud security posture.
Application Security:
Collaborate with development teams to integrate security into the software development lifecycle (SDLC) and ensure secure coding practices are followed. Conduct security assessments, code reviews, and penetration testing to identify and remediate application security vulnerabilities.
Security Standards and Compliance:
Ensure compliance with industry standards, frameworks, and regulations related to information security (e.G., NIST, ISO/IEC 27001, PCI DSS). Develop and maintain security policies, standards, and procedures to align with regulatory requirements.