Security Architect

Duration: 6+ Months

Location: DE-Wilmington, 100% Remote

Overview: Every Turnberry consultant belongs to a practice, an internal group of consultants and leaders with shared experience and expertise. Each of these practices aligns to one of the core services Turnberry offers to clients. As a Security Architect, you will join Turnberry's Digital Modernization practice, where technology and strategy combine to deliver exceptional digital experiences, empowering organizations to thrive in today's digital market.

We're hiring a hands-on Security Architect to lead critical remediation and security initiatives across our global enterprise environment. This role demands deep experience with cloud security (Azure preferred), Active Directory hardening, network segmentation, and endpoint security - but most importantly, must have proven experience integrating secrets detection into CI/CD pipelines and securing code repositories. You will own remediation efforts, drive Zero Trust strategies, deploy preventative controls, and collaborate directly with cybersecurity leadership. Certifications like CISSP, CCSP, Azure Security Engineer are a plus. No theory-only architects - we need real-world execution and technical leadership.

Responsibilities:

Remediate security vulnerabilities across Active Directory, Azure cloud, networks, endpoints, and applications based on penetration tests and security assessments

Deploy and operationalize secret detection capabilities across CI/CD pipelines and code repositories, proactively identify and remediate exposed secrets

Lead cloud security architecture initiatives with an emphasis on Azure security hardening, DevSecOps integration, and multi-cloud governance alignment

Architect and implement Zero Trust and microsegmentation strategies across cloud and on-premises environments

Design, document, and maintain security blueprints, control frameworks, and governance artifacts aligned with NIST and industry best practices

Guide technology teams across global sites to ensure consistent deployment of preventative security controls

Take full ownership of security findings and remediation efforts, ensuring timely closure and compliance readiness

Serve as a trusted technical advisor to cybersecurity leadership, engineering teams, and audit stakeholders

Qualifications:

8+ years of progressive cybersecurity experience, with 3+ years in a hands-on security architecture role

Hands-on remediation experience across at least three domains:

Active Directory and Azure AD hardening (service accounts, jump posts, group policies)

Cloud security engineering (Azure mandatory; AWS/Google Cloud Platform a plus)

Network segmentation, firewall configuration, and VPN hardening (Cisco, Fortinet)

Endpoint protection strategy and deployment (EDR, MDM)

Secrets Detection Integration (Mandatory):

Proven experience deploying secrets detection tools (e.g., GitGuardian, GitHub Advanced Security, Azure DevOps scanning, custom scripts) into CI/CD pipelines

Experience remediating findings from secrets scanning tools and securing code repositories

Expertise in Identity and Access Management (IAM), privileged access management (CyberArk, SailPoint, Azure AD)

Deep familiarity with compliance frameworks: NIST 800-53, FedRAMP, HIPAA, PCI DSS

Strong understanding of Zero Trust Architecture and microsegmentation practices

Ability to produce detailed security architecture artifacts and lead global deployment work packages

Excellent problem-solving skills, with the ability to drive technical initiatives independently

Preferred Qualifications:

Certifications: CISSP, CCSP, CSSLP, Azure Security Engineer, AWS Certified Security, CEH

Experience working in highly regulated industries (pharma, finance, healthcare, manufacturing)

Familiarity with endpoint protection suites (CrowdStrike, JAMF Pro, Intune)

Previous experience working across globally distributed teams

The salary range for this role is $140,000 to $205,000 or the hourly equivalent. Pay is based on several factors including but not limited to education, work experience, certifications, etc. In addition to your salary, Turnberry Solutions offers benefits such as a comprehensive healthcare package (medical, dental, vision), disability and group term life insurance, health and flexible spending accounts, a utilization bonus, 401(k) with match, flexible time off for salaried employees, parental leave for salaried employees, and flexible work arrangements (all benefits are subject to eligibility requirements). No matter where or when you begin a career with Turnberry, you'll find a far-reaching choice of benefits and incentives.

At Turnberry, inclusion is one of our core values. We are committed to creating a positive and connected work environment for all and are fully invested in and focused on hiring and growing a diverse team of high performers. We believe that uniqueness in ideas, experiences, and backgrounds make us a better Turnberry: Turnberry is an Equal Employment Opportunity employer, and recruits, employs, trains, compensates, and promotes regardless of age, ancestry, family medical or genetic information, gender identity and expression, marital, military, or veteran status; national and ethnic origin; physical or mental disability; political affiliation; pregnancy; race; religion; sex; sexual orientation; and any other protected characteristics.

Americans with Disabilities Act (ADA)

Turnberry will provide reasonable accommodation with our application process upon request as required to comply with applicable laws. If you have a disability and require accommodation assistance in this application process, please send an email to our Human Resources department at