Part time - Hybrid - Security Architect with 15 years - San Francisco, CA

A Security Architect is responsible for designing, implementing, and maintaining an organization’s overall security architecture to protect its systems, networks, applications, cloud infrastructure, and sensitive data. The role involves defining security standards, assessing risks, implementing security controls, and ensuring compliance with applicable security policies and regulatory requirements., Security Architecture & Design: Design and maintain enterprise security architecture, security frameworks, and technical security standards. Cloud Security: Develop security solutions for Microsoft Azure, AWS, and other cloud platforms, including identity protection, network security, and data protection. Identity & Access Management (IAM): Implement and manage Microsoft Entra ID, Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, Privileged Identity Management (PIM), and Role-Based Access Control (RBAC). Network Security: Design secure network architectures, including firewalls, VPNs, network segmentation, Zero Trust, and secure remote access. Endpoint Security: Develop endpoint security strategies using Microsoft Intune, Microsoft Defender for Endpoint, device compliance policies, and endpoint detection and response (EDR). Security Risk Assessment: Conduct security assessments, threat modeling, vulnerability assessments, and risk analysis to identify and mitigate security gaps. Data Protection: Implement data classification, encryption, Data Loss Prevention (DLP), and information protection controls. Security Operations: Collaborate with SOC teams to improve threat detection, incident response, security monitoring, and remediation processes. Compliance & Governance: Ensure alignment with security frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, SOC 2, and applicable regulatory requirements. Security Documentation: Develop security architecture diagrams, policies, standards, procedures, and technical implementation guidelines. Stakeholder Collaboration: Work with IT infrastructure, cloud engineering, networking, application development, compliance, and executive teams to integrate security into business initiatives.

We currently have an opening for the position of Security Architect. Candidates must have strong experience working with government agencies., Enterprise security architecture and Zero Trust principles. Microsoft security ecosystem, including Microsoft Entra ID, Microsoft Defender, Microsoft Intune, and Microsoft Purview. Cloud security architecture across Azure, AWS, or Google Cloud. Network security technologies, including firewalls, VPNs, IDS/IPS, and network segmentation. Identity governance, privileged access management, and authentication protocols. Security information and event management (SIEM), such as Microsoft Sentinel or Splunk. Vulnerability management, penetration testing concepts, and threat modeling. Encryption, key management, data protection, and security incident response. Knowledge of security frameworks such as NIST, ISO 27001, CIS Controls, and MITRE ATT&CK., Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience. Typically 5-10+ years of experience in IT infrastructure, cybersecurity, or information security, depending on the seniority of the role. Experience designing and implementing enterprise security solutions. Strong analytical, problem-solving, communication, and stakeholder management skills.

Preferred Certifications CISSP - Certified Information Systems Security Professional CCSP - Certified Cloud Security Professional SABSA certifications TOGAF certification Microsoft Certified: Cybersecurity Architect Expert AWS Certified Security - Specialty Certified Information Security Manager (CISM)