Job Title: Enterprise Security Architect (IAM, Network Security, SOC, GRC & AI Security)
Location: Seatle, WA (Hybrid Onsite)
Type: Contract/ Fulltime
Duration: Long Term
Job Description:
We are seeking an experienced **Enterprise Security Architect** to design, govern, and evolve holistic cybersecurity architecture across our entire telecommunications enterprise spanning network infrastructure, IT systems, applications, data, cloud, identity, and endpoints. This is a broad, cross-domain security architecture role, not limited to network security: the successful candidate will own the security design of business applications, OSS/BSS/CRM platforms, customer data environments, cloud workloads, third-party integrations, and corporate IT, in addition to the carrier-grade network (RAN, Core, Transport, 5G).
The ideal candidate brings a full-spectrum cybersecurity architecture background - application security, data protection, identity and access management, cloud security, and security operations. Combined with an understanding of telecom-specific risk, so that security is designed consistently across every layer of the business, not just the network.
Technical Skills:
- Strong understanding of telecom platforms: OSS/BSS, 5G Core, RAN, IMS, VoLTE/VoNR, and signalling protocols.
- Expertise in IAM platforms (Okta, Azure AD, CyberArk, SailPoint, Ping).
- Knowledge of network security technologies (firewalls, IDS/IPS, NAC, micro segmentation, SD WAN).
- Familiarity with SOC operations (SIEM, SOAR, EDR/XDR, threat intelligence).
- Understanding of AI/ML systems and AI security governance.
- Experience with cloud environments (AWS, Azure, Google Cloud Platform) and Zero Trust frameworks.
Certifications (any one certification is required):
- CISSP, CISM, or CCSP.
- CIAM or equivalent IAM certifications.
- Telecom specific or network security certifications (e.g., CCNP Security, PCNSE, Juniper, Nokia, or GSMA programs).
- AI Security or AI Governance certifications (ISC2 AI+, NIST AI RMF programs).
- CRISC, CISA, or ISO 27001 Lead Implementer/Auditor
Key Responsibilities:
- Enterprise Security Architecture & Strategy
- Own and evolve the enterprise cybersecurity architecture framework, covering applications, data, identity, endpoints, cloud, network, and OT/IoT ensuring no domain is treated in isolation.
- Develop security reference architectures, patterns, and standards used across the enterprise, including for corporate IT, digital/customer-facing platforms, OSS/BSS, and telecom network functions.
- Partner with enterprise architecture, application development, network engineering, and product teams to embed security-by-design and secure-by-default principles into all new initiatives.
- Lead architecture review boards, providing security sign-off on major technology, product, and infrastructure investments.
- Build and maintain a multi-year security architecture roadmap aligned to business strategy, risk appetite, and regulatory obligations.
- Application, Data & Identity Security
- Architect security controls for enterprise applications, APIs, microservices, and customer-facing digital channels (web, mobile, IVR, self-service portals).
- Define data security and data protection architecture: classification, encryption (at rest/in transit), tokenization, DLP, and key management across structured and unstructured data.
- Design enterprise Identity and Access Management (IAM), Privileged Access Management (PAM), and Zero Trust architecture spanning employees, contractors, customers, and machine identities.
- Guide secure software development lifecycle (SSDLC) and DevSecOps integration - threat modeling, secure code review gates, and automated security testing in CI/CD pipelines.
- Cloud & Infrastructure Security
- Architect security for hybrid and multi-cloud environments (AWS, Azure, Google Cloud Platform), including workload protection, container/Kubernetes security, CSPM, and cloud-native security tooling.
- Evaluate and architect security controls for virtualized and cloud-native network functions (NFV/VNFs/CNFs) alongside traditional IT infrastructure.
- Design security architecture for data centers, endpoints, email, and collaboration platforms as part of the broader enterprise estate.
- Telecom Network & Emerging Technology Security
- Extend enterprise security architecture principles into telecom-specific domains: RAN, Core Network (4G/5G), Transport, IMS, and OSS/BSS.
- Address telecom-specific attack surfaces (SS7/Diameter/GTP exploitation, SIM swapping, network slicing abuse, O-RAN interfaces) within the broader enterprise risk model.
- Provide security architecture guidance for IoT, edge computing, 5G network slicing, and MEC deployments as extensions of enterprise risk, not standalone concerns.
- Risk, Governance & Operations Alignment
- Conduct enterprise-wide threat modeling and architecture risk assessments (STRIDE, PASTA) across applications, infrastructure, and business processes.
- Collaborate with GRC teams to ensure architecture aligns with regulatory and industry frameworks (GDPR, NIST CSF, ISO 27001, PCI-DSS, CPNI, and telecom-specific requirements).
- Assess security architecture risk in third-party, vendor, and supply chain relationships, including MSPs and cloud providers.
- Work closely with Security Operations (SOC), Incident Response, and Threat Intelligence teams to ensure architectural designs support detection, response, and forensic requirements.
- Present architecture strategy, risk posture, and roadmaps to senior leadership, business stakeholders, and audit/regulatory bodies.
- Mentor and provide technical leadership to security engineers, analysts, and other architects across the security organization.
- AI Security
- Oversee governance for secure adoption of AI/ML systems in telecom analytics, fraud detection, and customer platforms.
- Implement controls for AI model governance, ensuring integrity, explainability, and regulatory compliance.
- Guide teams on securing AI pipelines, preventing model manipulation or data poisoning.
- Assess risks associated with AI-based network optimization and automation systems.
Qualifications:
- Bachelor s or Master s degree in Cybersecurity, Computer Science, Information Systems, or related field.
- 12+ years of cybersecurity experience, with 5+ years in a Security Architect role.
- Experience in Telecom cybersecurity, including network security, customer data protection, and regulatory compliance.
Thanks & Regards,
Ravi Gupta
+1 Ext 413
Lead Recruitment
Email id:
Never miss an opportunity! Create an alert based on the job you applied for.
