> Markdown version of [/jobs/ext/4613458-cyber-security-architect](https://www.wearedevelopers.com/jobs/ext/4613458-cyber-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Architect

- **Company:** Sidram Technologies
- **Location:** New York, NY, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Microsoft Windows, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Continuous Integration, Information Leak Prevention, Data Security, Linux, Disaster Recovery, Github, Identity and Access Management, Intrusion Detection Systems, Virtual Private Networks (VPN), Information Systems Security Architecture Professional, Python (Programming Language), Key Management, Network Security, OAuth, OpenID, Open Web Application Security, PCI Data Security Standards, Windows PowerShell, Systems Development Life Cycle, Role-Based Access Control, Zero Trust Network Access, JSON Web Token, Sherwood Applied Business Security Architecture, Security Assertion Markup Language (SAML), Secure Coding, Security Information and Event Management, Tokenization, Virtualization Technology, Privacy Controls, Policy as Code, Data Logging, Google Cloud, Enterprise Software Applications, Data Classification, In-Plane Switching (IPS), Istio, Large Language Models, Software Security, Mitre Att&ck, Firewalls (Computer Science), Gitlab-ci, Kubernetes, Data Management, Prompt Injection, CIS Benchmarks, Terraform, Devsecops, Serverless Computing, Docker, Security Orchestration, Automation & Response, Jenkins, Static Application Security Testing, Vulnerability Analysis, Microservices, Dynamic Application Security Testing
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/28_25303_d42b14b9ee77e311f4128c556b2bd313

## About the Role

The ideal candidate will have strong expertise across Cloud Security, IAM, Network Security, Application Security, DevSecOps, Threat Modeling, Security Operations, and Cybersecurity Governance., * 15+ years of overall IT/Cybersecurity experience REQUIRED

 * 3+ years designing and reviewing enterprise security architectures
 * Strong knowledge of Network Security, Application Security, Cloud Security, IAM, Cryptography, and Security Operations
 * Experience with STRIDE, MITRE ATT&CK, or equivalent threat modeling methodologies
 * Strong understanding of Zero Trust, Least Privilege, Defense in Depth, Secure-by-Design, and Separation of Duties
 * Experience conducting security risk assessments and developing risk-treatment plans
 * Hands-on knowledge of vulnerabilities, penetration testing, incident response, and disaster recovery
 * Experience with security architecture frameworks, policies, controls, and governance
 * Excellent communication and stakeholder management skills, * AWS / Azure / GCP Security
 * Kubernetes, Docker, containers, service mesh, and serverless
 * DevSecOps, CI/CD security, SAST, DAST, SCA, IaC scanning
 * SIEM, SOAR, EDR, XDR, WAF, CSPM, CNAPP, DLP
 * API Security, Microservices, OAuth 2.0, OIDC, SAML, JWT
 * Data classification, encryption, tokenization, key management, and privacy engineering
 * Security automation using Python, PowerShell, Terraform, or Bash
 * AI/ML Security, LLM Security, Prompt Injection, Data Leakage, and Model Governance
 * NIST, CIS Controls, ISO 27001, SABSA, COBIT, OWASP
 * Certifications: CISSP, CCSP, SABSA, CISM, GIAC, AWS Security Specialty, Azure Security Engineer

Technical Skills

 * Cloud Security: AWS, Azure, GCP, IAM, KMS, GuardDuty, Defender
 * Network Security: Firewalls, WAF, VPN, IDS/IPS, NAC, Segmentation, Zero Trust
 * Identity Security: SSO, MFA, RBAC, ABAC, PAM, OAuth 2.0, OIDC, SAML
 * Security Operations: SIEM, SOAR, EDR, XDR, SOC, Incident Response
 * Application Security: OWASP, API Security, SAST, DAST, SCA, Threat Modeling
 * DevSecOps: Jenkins, GitHub Actions, GitLab CI, Terraform, Container Security
 * Infrastructure: Kubernetes, Docker, Linux, Windows, Virtualization, Service Mesh
 * Data Security: Encryption, DLP, Tokenization, Secrets Management, Key Management
 * Governance: ISO 27001, NIST, CIS Controls, SOC 2, PCI DSS, GDPR
 * Automation: Python, PowerShell, Bash, Terraform, Policy-as-Code

## Description

We are seeking a highly experienced Cyber Security Architect to define and maintain enterprise cybersecurity strategy, security architecture, controls, standards, and governance across applications, networks, cloud, APIs, data platforms, and infrastructure., * Define and maintain cybersecurity strategy, principles, standards, and reference architectures

 * Design secure architectures across enterprise applications, networks, cloud, APIs, data, and infrastructure
 * Conduct threat modeling, attack-surface analysis, risk assessments, and architecture reviews
 * Define defense-in-depth, zero-trust, IAM, network, endpoint, application, data, and cloud security controls
 * Design and govern SSO, MFA, RBAC, ABAC, PAM, and Zero Trust solutions
 * Review solution designs, infrastructure-as-code, and implementation plans for security compliance
 * Guide engineering teams on Secure SDLC, secure coding, DevSecOps, and security testing
 * Define requirements for WAF, VPN, IDS/IPS, SIEM, EDR, DLP, secrets management, and endpoint security
 * Develop security architectures for AWS, Azure, and GCP environments
 * Establish security logging, monitoring, detection, alerting, and incident-response requirements
 * Support vulnerability assessments, penetration testing, remediation, and incident response
 * Evaluate security technologies, products, vendors, and managed security services
 * Maintain security architecture documentation, standards, diagrams, risk registers, and control mappings
 * Support ISO 27001, SOC 2, PCI DSS, GDPR, HIPAA, and other compliance initiatives