Senior Cybersecurity Architect

Senior Cybersecurity Architect

Introduction

We are seeking an experienced Senior Cybersecurity Architect to support enterprise cybersecurity architecture reviews and technology risk assessments. This role evaluates cybersecurity risks associated with new technology implementations across cloud platforms, SaaS, enterprise applications, infrastructure, networks, identity and access management, APIs, AI/GenAI, OT/ICS, and third-party solutions. The ideal candidate combines strong technical architecture expertise with the ability to identify security vulnerabilities, assess risk, recommend practical mitigations, and communicate findings to technical and business stakeholders.

Responsibilities

• Independently lead cybersecurity architecture reviews for complex enterprise projects, applications, infrastructure, cloud services, SaaS platforms, vendor solutions, APIs, and integrations.
• Analyze solution architecture, network and data flows, trust boundaries, authentication models, external connectivity, and security controls.
• Conduct threat modeling to identify attack surfaces, realistic threat scenarios, attack paths, and potential security weaknesses.
• Assess cybersecurity risks, assign appropriate risk ratings, and communicate technical and business impacts.
• Define practical security controls, mitigation strategies, and remediation requirements.
• Prepare clear, defensible risk assessments documenting exposures, potential impacts, risk ratings, required mitigations, and residual risks.
• Evaluate internet-facing technologies, including web applications, APIs, exposed services, WAFs, DDoS protection, DNS, certificates, ingress architecture, and external connectivity.
• Assess cloud security architecture, including IAM, networking, workload security, encryption, logging, monitoring, data protection, and shared-responsibility models.
• Review application security architecture, authentication and authorization, API security, OWASP risks, secrets management, secure design patterns, and third-party integrations.
• Evaluate identity and access management solutions, including SSO, federation, MFA, RBAC, privileged access, workload identities, and least-privilege principles.
• Assess data security and privacy across the data lifecycle, including classification, collection, storage, processing, transmission, retention, encryption, and access controls.
• Evaluate cybersecurity resilience, backup and recovery dependencies, ransomware resilience, single points of failure, and operational impacts of security controls.
• Critically review vendor security architectures, penetration-test reports, vulnerability assessments, security documentation, and supporting technical evidence.
• Identify relevant regulatory and compliance considerations, including NERC CIP, and coordinate with specialized subject-matter experts when required.
• Develop reusable security architecture patterns, reference architectures, standards, and implementation guidance.
• Facilitate architecture review meetings and collaborate with project teams, application owners, technical stakeholders, and vendors.
• Support migration and modernization initiatives and guide teams toward secure implementation decisions.
• Mentor cybersecurity professionals and improve assessment methodologies, templates, and architecture review practices.
• Monitor emerging cybersecurity threats and technology trends and incorporate relevant improvements into security architecture guidance.
• Manage multiple concurrent assessments while maintaining quality and meeting established timelines.

Requirements

• Demonstrated senior-level experience in cybersecurity architecture, solution security, or technology risk assessments within large and complex enterprise environments.
• Strong understanding of cybersecurity architecture principles and their application across diverse technology environments.
• Hands-on knowledge of cloud security architecture across AWS, Microsoft Azure, and/or Google Cloud Platform.
• Strong understanding of network and infrastructure security, including segmentation, firewalls, WAFs, proxies, DNS, load balancers, certificates, encryption, remote access, and secure connectivity.
• Strong knowledge of application security, including authentication, authorization, APIs, web application security, secrets management, OWASP risks, and third-party integrations.
• Experience with identity and access management, including SSO, federation, MFA, RBAC, privileged access, workload identities, and least privilege.
• Knowledge of data security and privacy architecture, including data classification, encryption, key management, tokenization, and data loss prevention (DLP).
• Proven ability to perform threat modeling and identify attack surfaces, trust boundaries, threat scenarios, and potential attack paths.
• Ability to interpret vulnerability assessments, penetration-test findings, and third-party security assessments to determine architecture risk.
• Experience evaluating vendor technologies and challenging security claims when sufficient technical evidence is unavailable.
• Working knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST SP 800-53, NERC CIP, and ISO/IEC 27001.
• Ability to identify regulatory, privacy, and compliance concerns and engage relevant specialists when necessary.
• Strong technical leadership, analytical thinking, critical reasoning, and problem-solving skills.
• Excellent written and verbal communication, including the ability to translate technical risks into clear business implications and practical mitigation requirements.
• Ability to independently lead architecture reviews, manage multiple assessments, identify missing information, and drive reviews through completion.
• Strong stakeholder management skills and the ability to build productive relationships with technical teams, vendors, and business leaders.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field; equivalent professional experience is acceptable.
• Certifications such as CISSP, CCSP, or comparable cybersecurity, cloud security, or architecture credentials.
• Experience conducting architecture assessments in a Fortune 500 or similarly complex enterprise.
• Experience working across multiple cloud environments, including AWS, Azure, and Google Cloud Platform.
• Familiarity with OT/ICS security and critical infrastructure requirements, including safety, availability, reliability, and regulatory constraints.
• Awareness of AI/GenAI cybersecurity risks.
• Experience developing cybersecurity reference architectures, reusable security patterns, standards, and technical guidance.
• Experience in utilities, critical infrastructure, or other highly regulated industries.

Success Criteria

• Deliver high-quality cybersecurity architecture assessments within established timelines.
• Identify material security risks and assign consistent, defensible risk ratings.
• Recommend practical, proportionate security controls and mitigations.
• Produce clear risk documentation that supports informed business decisions.
• Manage a high volume of concurrent assessments without compromising quality.
• Maintain effective working relationships with technical teams, vendors, and business stakeholders.
• Enable secure technology implementation while balancing cybersecurity requirements with business objectives.