> Markdown version of [/jobs/ext/2117053-security-architect](https://www.wearedevelopers.com/jobs/ext/2117053-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Architect - **Company:** The Zero Trust - **Location:** Charlotte, NC, United States (Remote available) - **Experience:** Expert - **Salary:** $135,200.0 - $156,000.0 - **Contract:** Temporary to permanent - **Skills:** Microsoft Access, Application Programming Interfaces (APIs), Amazon Web Services, Data Analysis, Application Layers, Architectural Patterns, User Authentication, Microsoft Azure, Software as a Service, Cloud Computing, Cyber Security, Continuous Integration, Data Governance, Information Leak Prevention, Data Security, Decision Support Systems, Distributed Systems, Identity and Access Management, Information Systems Security Architecture Professional, Network Security, PCI Data Security Standards, Systems Development Life Cycle, Role-Based Access Control, Zero Trust Network Access, EndPointSecurity, Data Classification, Large Language Models, Software Security, HybridCloud, Data Layers, Information Technology, Api Gateway, Microservices - **Published:** August 19, 2026 - **Apply:** https://www.dice.com/job-detail/2064a9c9-c052-43a9-b142-faac21702568 ## About the Role * 7+ years of relevant experience * Bachelor's Degree in Computer Science, Information Security, or related field of study or equivalent, * Master's in Computer Science, Information Security, or related field. * 5+ years designing or implementing Zero Trust Architecture or similar enterprise security transformation initiatives * Deep understanding of Zero Trust principles and frameworks (NIST SP 800-207, CISA Zero Trust Maturity Model) * Strong experience in IAM, authentication/authorization, and policy-based access control models * Experience with network security, segmentation, ZTNA, and modern connectivity architectures * Experience with endpoint/device security and integration of device posture into access decisions * Experience designing secure architectures across hybrid cloud (AWS/Azure), SaaS, and on-prem environments * Proven experience integrating multiple security domains into cohesive architecture patterns * Hands-on or architectural experience with technologies such as identity platforms, ZTNA solutions, API gateways, and microsegmentation tools * Strong experience with threat modeling, architecture reviews, and security risk assessments * Familiarity with regulatory frameworks (FFIEC, PCI DSS, SOX) and security frameworks (NIST, CIS) * Demonstrated ability to influence cross-functional teams and drive enterprise adoption of security patterns * Strong communication and executive presentation skills ## Description Architecture & Strategy * Define and maintain the enterprise Zero Trust Architecture (ZTA) reference model, aligned to industry frameworks (NIST SP 800-207, CISA ZTMM) and business priorities. * Establish target-state architectures and transition roadmaps for Zero Trust adoption across hybrid cloud, SaaS, and on-prem environments. * Define policy-driven access models leveraging identity, device posture, behavior, and environmental risk signals. * Align Zero Trust architecture with enterprise security strategy, cloud adoption, and digital transformation initiatives. Architecture & Governance * Lead end-to-end architecture reviews ensuring solutions align with Zero Trust principles, including least privilege, continuous verification, and explicit trust evaluation. * Define and enforce architectural guardrails and secure patterns across identity, network, endpoint, application, and data layers. * Establish policy decision and enforcement models (PDP/PEP) across enterprise control points (identity providers, gateways, endpoints, network controls). * Provide governance and oversight for Zero Trust capabilities across business units, platforms, and shared services. Cross-Domain Integration * Design integration patterns that unify IAM, endpoint security, network controls, application access, and data protection into a cohesive Zero Trust model. * Define how identity, device posture, and risk signals drive dynamic access decisions across APIs, applications, and infrastructure. * Collaborate with domain architects (IAM, Network, Cloud, Endpoint, Data) to ensure consistent enforcement of Zero Trust controls and patterns. * Enable secure service-to-service and user-to-resource access patterns across distributed architectures (microservices, APIs, SaaS). Policy, Access & Control Enforcement * Define enterprise access control strategies including adaptive authentication, conditional access, and fine-grained authorization. * Establish policy models for user, service, and machine identity access, incorporating RBAC, ABAC, and policy-based access control. * Define enforcement patterns across gateways, proxies, API layers, and endpoint controls to ensure consistent access decisions. * Integrate continuous monitoring and feedback loops to adjust access decisions based on real-time risk and context. Threat Modeling, Risk & Assurance * Lead threat modeling initiatives focused on lateral movement, identity compromise, session hijacking, and trust boundary violations. * Define security controls to mitigate Zero Trust-specific attack vectors (credential abuse, privilege escalation, bypass of enforcement points). * Ensure Zero Trust architecture aligns with regulatory requirements and supports continuous risk reduction and measurable security outcomes. * Establish metrics and maturity indicators for Zero Trust adoption and effectiveness across the enterprise. Engineering Enablement & Adoption * Drive adoption of Zero Trust patterns through reusable architectures, reference implementations, and engineering guidance. * Partner with engineering, platform, and security teams to embed Zero Trust controls into SDLC, CI/CD, and platform engineering workflows. * Evaluate and recommend technologies supporting Zero Trust capabilities (identity platforms, ZTNA, microsegmentation, API gateways, endpoint posture). * Communicate architecture strategy, tradeoffs, and risk posture clearly to engineering, product, and executive stakeholders. Core Security Domains Identity & Access Management Authentication, federation, adaptive MFA, conditional access, service-to-service identity, least privilege, and identity governance. Device & Endpoint Security Device posture, endpoint detection and response (EDR), mobile/device trust, health validation, and enforcement of device-based access conditions. Network Security & Segmentation Microsegmentation, software-defined perimeters, ingress/egress controls, secure connectivity, and enforcement of network-level policy decisions. Application & API Security Application access control, API authentication/authorization, secure service communication, token-based access, and policy enforcement at application layers. Data Security Data classification, encryption, data minimization, access controls aligned to sensitivity, and protection of data across states (in transit, at rest, in use). Visibility, Analytics & Automation Centralized telemetry, continuous monitoring, behavioral analytics, policy decision support, and automated response and enforcement. GenAI Security * Define secure GenAI patterns (LLM access controls, prompt/response handling, RAG security, agent/tooling boundaries). * Threat model GenAI use cases (prompt injection, data leakage, model extraction/poisoning, unsafe output handling) and define mitigations/testing. * Set GenAI data governance requirements (sensitive data use, retention, auditability) and vendor/model assurance expectations. ## Related Videos - [Trust Issues: Because Zero-Trust Isn’t Optional Anymore](https://www.wearedevelopers.com/videos/100089-trust-issues-because-zero-trust-isn-t-optional-anymore) - [Why Your AI Agent Keeps Hallucinating Your Data: Building Deterministic Context Layers](https://www.wearedevelopers.com/videos/2055-why-your-ai-agent-keeps-hallucinating-your-data-building-deterministic-context-layers) - [20 billion requests a week: Upgrading Twilio's API gateway at scale](https://www.wearedevelopers.com/videos/100234-20-billion-requests-a-week-upgrading-twilio-s-api-gateway-at-scale) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Trustworthy AI Starts at Deployment: 5 Checks Before You Ship](https://www.wearedevelopers.com/magazine/753-trustworthy-ai-starts-at-deployment-5-checks-before-you-ship) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)