Security Engineer/Architect

• Design and implement robust security architectures across enterprise networks, cloud platforms, and IT infrastructure to ensure optimal protection against cyber threats.
• Conduct thorough security risk assessments and investigations to identify vulnerabilities within network protocols, systems, and applications.
• Develop and enforce security policies aligned with standards like ISO 27000 series, NIST frameworks, and PCI compliance requirements.
• Manage and optimize security systems including firewalls (Cisco ASA), intrusion detection systems (IDS), SIEM solutions (Splunk, New Relic), and endpoint security tools.
• Architect identity and access management (IAM) solutions utilizing technologies such as LDAP, SSO, RBAC, and IAM architecture design principles to control user access effectively.
• Collaborate with DevSecOps teams to integrate security practices into the software development lifecycle (SDLC), ensuring secure deployment through automation tools like Ansible and Terraform.
• Lead incident response efforts by analyzing security alerts from SIEMs, conducting vulnerability assessments with tools like Nmap or Burp Suite, and coordinating incident recovery procedures following established protocols.
• Stay current with emerging cybersecurity trends such as cloud security (AWS, Azure), encryption standards, VPNs (IPsec), and IoT security to enhance our defenses continually.

• Proven experience in security engineering or architecture within complex IT environments involving computer networking concepts like LAN/WAN, routing protocols (OSPF, BGP), TCP/IP stack, DHCP/DNS services.
• Strong knowledge of network security devices including Cisco routers/switches, Cisco ISE for network access control, Cisco ASA firewalls, IDS/IPS systems.
• Hands-on expertise with cloud infrastructure security on platforms such as AWS or Azure; familiarity with PaaS/IaaS models is highly desirable.
• Deep understanding of information security standards including ISO 27001/27002 frameworks, NIST standards (SP 800 series), FISMA compliance requirements.
• Skilled in scripting languages such as Python or Bash for automation of security tasks; experience with DevOps practices like CI/CD pipelines is advantageous.
• Ability to perform comprehensive vulnerability assessments using tools like Nmap or Fiddler; experience with system administration on Linux (Ubuntu, CentOS) or Windows environments.
• Excellent analytical skills for conducting risk management framework assessments and developing system security plans aligned with organizational policies.

Join us if you’re passionate about advancing cybersecurity defenses through innovative architecture design and strategic risk management! We’re dedicated to fostering an inclusive environment where your expertise can thrive while protecting vital digital assets across diverse platforms-empowering organizations to operate confidently in an interconnected world.