Security Architect

REV is seeking an experienced Security Architect to provide security, privacy, compliance, and risk-management leadership for a large-scale enterprise technology modernization initiative.

The Security Architect will ensure technology solutions are designed and implemented with appropriate security controls, identity and access management, Zero Trust principles, privacy protections, encryption, and regulatory requirements.

This is a senior-level architecture position requiring strong technical security expertise, experience working across complex enterprise environments, and the ability to communicate security requirements and risks to both technical and executive stakeholders.

Responsibilities

• Integrate security and privacy requirements into enterprise and solution architecture designs.
• Conduct security impact assessments for applications, integrations, infrastructure changes, cloud services, and vendor solutions.
• Define and maintain security architecture standards, secure development practices, and security configuration expectations.
• Lead security architecture reviews and provide recommendations for complex technical solutions.
• Apply Zero Trust principles across applications, infrastructure, data, APIs, and integrations.
• Provide technical leadership for Identity and Access Management (IAM), authentication, authorization, and privileged access considerations.
• Evaluate encryption, key management, network security, application security, and data protection requirements.
• Collaborate with cybersecurity, infrastructure, application, data, and integration teams.
• Support vulnerability remediation, security monitoring, incident response, and risk-management activities.
• Conduct architecture-level risk assessments and recommend mitigation strategies.
• Support security audits, compliance assessments, and regulatory reviews.
• Evaluate vendor security architecture, technical documentation, and proposed solutions.
• Ensure security requirements are incorporated into solution designs before implementation.
• Review and maintain security architecture documentation, diagrams, standards, and decision records.
• Provide guidance on secure APIs, cloud security, microservices, containers, and modern application architectures.
• Support technical troubleshooting and root-cause analysis for complex security-related issues.
• Communicate security risks, recommendations, and decisions clearly to technical and non-technical stakeholders.
• Mentor technical teams on security architecture and secure design practices.

• Bachelor’s degree is required.
• Bachelor’s degree must include at least 12 semester hours or 18 quarter hours of computer science coursework.
• Candidate must be able to provide documentation verifying the degree and specific computer science coursework completed if requested.
• 7+ years of professional IT experience involving information technology analysis, system maintenance, troubleshooting, system design, application development, infrastructure, databases, or related technical disciplines.
• 5+ years of hands-on Security Architecture experience or comparable senior security engineering/architecture leadership.
• Strong understanding of Software Development Lifecycle (SDLC) and Agile/iterative development practices.
• Demonstrated experience designing security architecture for large-scale enterprise applications and infrastructure.
• Strong experience with security architecture principles, Identity and Access Management (IAM), authentication, authorization, and access governance.
• Experience applying Zero Trust principles and enterprise security controls.
• Experience with security frameworks and standards such as NIST, NIST Cybersecurity Framework, NIST 800-series controls, or comparable enterprise security frameworks.
• Experience with encryption standards, data protection, secure communications, and security controls.
• Experience assessing application, infrastructure, cloud, data, and integration security risks.
• Experience with secure API architecture and authentication patterns.
• Experience with cloud security across Azure, AWS, and/or GCP.
• Experience with containerized technologies such as Docker and Kubernetes from a security architecture perspective.
• Experience with SQL and NoSQL environments and associated security considerations.
• Familiarity with microservices, serverless technologies, messaging, APIs, and modern integration patterns.
• Strong analytical and problem-solving skills.
• Excellent communication skills with the ability to explain technical security concepts to non-technical stakeholders.
• Must be comfortable working as an individual 1099 Independent Contractor.
• Must be willing and able to work onsite in Washington State as required.
• Must be able to complete required background screening, security training, confidentiality requirements, and system-access requirements.

Preferred Certifications One or two relevant current certifications are preferred and may be considered when determining compensation within the posted range:

• CISSP
• CISM
• CCSP
• GIAC certification relevant to security architecture
• Microsoft Certified: Cybersecurity Architect Expert
• AWS Certified Security - Specialty

Other current security architecture or cloud security certifications may be considered.

This is a part-time, approximately 20-hour-per-week 1099 Independent Contractor engagement. The engagement is primarily remote; however, the consultant must be willing and able to report onsite in Washington State when required by the client/program.