Senior Security Architect- Remote

The Senior Security Architect will be a key leader in designing, evaluating, and enforcing security controls across our enterprise cloud and network environments. This role will focus on security reviews, network change assessments, cloud security architecture, and policy development, ensuring alignment with industry best practices and regulatory requirements. The ideal candidate will have a passion for technology and security, along with a deep expertise in Azure cloud security, network security technologies, and reviewing cloud-based platforms and integrations.

Key Responsibilities:
Security & Network Change Reviews:
Perform security assessments for network changes, including:
oAzure NSG, Firewall, and micro-segmentation technologies
oCloud resource rewalls (Azure, OCI, etc.)
oSD-WAN and network integrations
oAcquisitions and new site builds
Review and approve security tool con gurations (SIEM, SASE, EDR, CSPM, etc.)
Assess cloud service onboarding (SaaS, IaaS, PaaS) for security risks
Evaluate internal application & cloud deployments for security compliance

Security Architecture & Design:
De ne security requirements for cloud (Azure and M365) and hybrid environments
Design and enforce security controls for applications, data, and infrastructure
Review third-party integrations for security risks
Collaborate with Enterprise Architecture, DevOps, and Engineering teams to embed security into design
Assess security risks in AI/ML models, LLMs, and generative AI deployments.
Implement security controls for Microsoft 365(M365) environments, including:
oMicrosoft Defender, Purview, DLP, Conditional Access
oEmail security, SharePoint, and Teams security con gurations.
Ensure secure integration between services (e.g., Azure OpenAI) and enterprise data.
Review third party integrations (API, data pipelines) for exposure points.
Evaluate container service onboarding for legacy systems migrating to containers, as well as native deployments.
Design compensating controls for legacy systems with unaddressed gaps.
Perform security gap analysis & risk mitigation
oIdentity security vulnerabilities in cloud (Azure), network, AI/ML deployments, M365 environments, and new implementations.
oDevelop actionable recommendations to address gaps.

Policy & Standards Development:
Update and maintain cloud security policies, standards, and baselines
Ensure compliance with industry frameworks (NIST, CIS, ISO 27001, etc.) standards (PCI DSS) and regulations (HIPAA/HITECH, various state regulations, etc.)
Advise Legal, Procurement, and Risk teams on security requirements for vendor contracts

Collaboration & Advisory:
Work with cross-functional teams to align security with business goals
Provide security guidance for all of the technologies
Mentor junior security team members

Required Quali cations:
Bachelor s degree in computer science, Cybersecurity, Information Systems, or equivalent education or work experience
6+ years in security architecture, cloud security, or network security
Deep expertise in Azure cloud security (OCI/Google Cloud Platform is a plus)
Deep understanding of containerization.
Experience with:
oFirewalls, NSGs, SD-WAN, micro-segmentation
oCloud security posture management (CSPM)
oIdentity & Access Management (IAM), Zero Trust
oMicrosoft 365 (M365) security expertise (Defender, Purview, DLP, Conditional Access)
oContainer security and migrations (Kubernetes, runtime security, legacy to cloud-native)
Strong knowledge of security frameworks (NIST, CIS, ISO 27001, etc.), standards (PCI DSS) and regulations (HIPAA/HITECH)
Experience reviewing security tools (SIEM, EDR, DLP, etc.)
Pro cient in at least one programming or scripting language such as Java, Python,
.NET, JavaScript, or C++
Experience in scripting languages such as PowerShell, Python, or Bash

Preferred Quali cations:
AI/ML security experience (securing LLMs, generative AI, model governance)
Databricks security experience (Unity Catalog, access controls, encryption)
Certi cations such as:
oAzure Security Engineer (AZ-500)
oCISSP, CCSP, or SABSA
Experience with DevSecOps & Infrastructure as Code (Terraform, ARM/Bicep) Soft Skills & Work Style:
Strong communication & stakeholder collaboration
Strong documentation skills
Ability to work independently, fast paced, and adhere to documented process and SLA s. Must be able to properly manage time.
Stay current with changing security technologies
Ability to translate technical risks to business leaders
Collaborative mindset works well with engineering, legal, and architecture teams