Cyber Security Architect

Requirement/Must Have:

• Strong knowledge of network security protocols, endpoint security, and data security architectures.
• Hands-on experience with Proofpoint, Imperva WAF, Zscaler, Cisco ISE, PKI, DLP, and CASB solutions.
• Experience managing endpoint security platforms such as CrowdStrike and Trellix.
• Experience with incident response and forensic analysis.
• Strong communication and leadership skills.
• Ability to stay current with emerging security threats and technologies.

Experience:

• 15+ years of experience in cybersecurity and network security.

Responsibilities:

• Manage and support Proofpoint email security solutions, including POD, TRAP, and TAP.
• Configure, monitor, and troubleshoot Imperva WAF.
• Implement and manage the Zscaler cloud security platform.
• Maintain and optimize Cisco ISE for network access control.
• Lead incident response efforts related to network security threats.
• Conduct security assessments, audits, and compliance checks.
• Develop and enforce security policies and procedures.
• Mentor junior staff and lead security projects.
• Collaborate with vendors and cross-functional teams to ensure effective security measures.
• Administer and troubleshoot enterprise PKI infrastructure, including Microsoft ADCS.
• Manage certificate lifecycle, including issuance, renewal, and revocation.
• Integrate certificate automation solutions across hybrid and multi-cloud environments.
• Manage external SSL/TLS certificates and validation processes.
• Perform PKI health checks and vulnerability remediation.
• Define and implement certificate governance and key management practices.
• Deploy and manage cloud application security tools for SaaS discovery and governance.
• Implement CASB solutions for inline and API-based enforcement.
• Design and implement DLP policies across endpoint, email, and cloud environments.
• Monitor and tune DLP systems to reduce false positives.
• Deploy and maintain endpoint security solutions, including EDR and antivirus tools.
• Monitor endpoint alerts and respond to security incidents.
• Perform patch management and system health checks.
• Conduct endpoint security assessments and vulnerability scans.
• Ensure endpoint compliance with security standards.
• Investigate and analyze endpoint-related security incidents.
• Provide training and support on endpoint security best practices.
• Stay updated on evolving endpoint security technologies.
• Document procedures, incident reports, and configurations.

Skills:

• Network Security.
• Endpoint Security.
• Data Security.
• PKI Management.
• Cloud Security Platforms.
• CASB and DLP Technologies.
• Incident Response and Forensics.
• Security Policy Development.

Qualification and Education:

• CISSP certification preferred.
• CCNA Security preferred.
• CCNP Security preferred.
• Proofpoint certification preferred.
• Imperva certification preferred.
• Cisco ISE certification preferred.
• Zscaler certification preferred.
• MCSE or SC-200 preferred.
• Trellix certification preferred.
• Netskope certification preferred.
• CompTIA Security+ or CySA+ preferred.
• CrowdStrike Falcon certification preferred.
• Endpoint Security certifications preferred.