Security Architect; IAM + network security ) C2c Boston, MA

Position:

Senior Security Architect

Location:

Boston, MA (Onsite)

Contract:

6-12+ Months

We are seeking an experienced Security Architect to design, implement, and manage enterprise security solutions across network, cloud, application, and infrastructure environments. The ideal candidate will possess deep expertise in Identity and Access Management (IAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), network security, DMZ architecture, and cybersecurity standards. The role requires collaboration with application, network, cloud, and infrastructure teams to ensure security best practices are embedded throughout the technology lifecycle.

• Design and implement enterprise IAM solutions, including SSO, federation, and MFA.
• Integrate applications with SAML, OAuth 2.0, OpenID Connect, and LDAP/Active Directory.
• Manage role-based access control (RBAC) and privileged access management.
• Ensure compliance with enterprise IAM and authentication standards.

• Design secure network architectures, including DMZ, internal, external, and cloud security zones.
• Implement network segmentation, firewall policies, and Zero Trust security controls.
• Review and approve network connectivity requirements across trust boundaries.
• Work with networking teams to secure internet-facing applications and services.

• Define and enforce security standards, policies, and technical controls.
• Ensure compliance with industry frameworks such as NIST, CIS, ISO 27001, and enterprise cybersecurity standards.
• Conduct security design reviews and threat modeling exercises.
• Develop secure architecture patterns for cloud and on-premises platforms

• Integrate security controls into the SDLC and Dev Sec Ops  pipelines.
• Implement secure authentication and authorization mechanisms.
• Review application architectures for vulnerabilities and security risks.
• Support cloud security initiatives across AWS, Azure, and hybrid environments.

• Collaborate with SOC and cybersecurity teams on security monitoring and incident response.
• Define logging, monitoring, and alerting requirements.
• Support vulnerability management, penetration testing, and remediation programs.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 8+ years of experience in cybersecurity, network security, or security architecture.
• Strong experience with:
• SSO (SAML, OAuth, OpenID Connect)
• MFA solutions
• Active Directory / LDAP
• Firewall technologies
• DMZ architecture
• Network segmentation
• VPNs and secure remote access
• TCP/IP, DNS, Routing and Switching
• Cloud Security (AWS/Azure)