Senior Cybersecurity Architect - #26-26555

• This senior-level role assesses cybersecurity risks for new technologies and enterprise solutions across cloud, SaaS, applications, infrastructure, networks, identity, APIs, AI/GenAI, OT/ICS, and third-party platforms. The architect reviews solutions from design through implementation and pre-production validation.
• The architect identifies risks, recommends practical security controls, and partners with project teams and vendors to enable secure business outcomes. Any unmitigated residual risk must be clearly documented for business leadership to accept., * Lead cybersecurity architecture reviews for enterprise projects, applications, cloud services, infrastructure, APIs, and vendor solutions.
• Analyze architecture diagrams, network/data flows, trust boundaries, authentication, integrations, and security controls; perform threat modeling.
• Identify and rate cybersecurity risks, explain business impact, and document mitigation requirements and residual risks.
• Assess cloud, application, network, IAM, data protection, and internet-facing security, including encryption, access controls, APIs, WAFs, and external connectivity.
• Review vendor security evidence, vulnerability scans, and penetration-test results; consider regulatory requirements including NERC CIP.
• Recommend practical controls and reusable security patterns; lead review meetings and manage multiple assessments through completion.

• Senior-level experience in cybersecurity architecture, solution security, or technology risk assessments in large enterprise environments.
• Strong cloud security knowledge across AWS, Azure, and/or GCP, including IAM, networking, encryption, logging, and workload security.
• Strong network and application security knowledge, including firewalls/WAFs, segmentation, APIs, authentication, OWASP risks, and secure integrations.
• Experience with IAM (SSO, MFA, RBAC, privileged access), data security/privacy, and least-privilege principles.
• Ability to perform threat modeling and interpret vulnerability scans, penetration tests, vendor security assessments, and attack-surface risks.
• Working knowledge of NIST CSF, NIST SP 800-53, NERC CIP, and/or ISO 27001; strong risk documentation, communication, and stakeholder skills.

Skills:

• Cybersecurity Architecture & Risk Assessment
• Cloud Security
• Threat Modelling & Vulnerability Assessment
• Application & Network Security
• Identity & Access Management (IAM)

Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline. Equivalent relevant professional experience will be considered.