Internal Perimeter Security Architect

Job Title:

Internal Perimeter Security Architect (Contract )

Location:

Chicago, IL (hybrid) (finding out about Dallas or REMOTE)

6-9+ months.

Overview:
Our client is seeking an Internal Perimeter Security Architect to perform Security Architecture to review/redesign/reengineer existing internal perimeter architecture. This is to shift security architecture from a periodic gate to a continuous engineering function that keeps pace with AI-accelerated threats.
The work maps to three core outcomes: maintaining architectural correctness throughout the change lifecycle, establishing segmentation and enclave boundaries that contain blast radius, and reducing the window between flaw discovery and remediation through detection engineering and TTP mapping.

Responsibilities:
Domain Architecture Review & Redesign

• Assess, redesign, and reengineer existing internal network architecture across distinct security domains. Deliver a structured feasibility assessment with a milestone-based remediation plan that enables informed reclassification decisions and measurably reduces network-related security risk exposure.

Internal Segmentation & Zero Trust

• Design and implement segmentation strategies; micro-segmentation, zero trust principles, and enclave hardening to limit lateral movement and contain the blast radius of potential incidents.

Current-State Network Analysis

• Conduct a connection-by-connection assessment of high-risk internal network paths, document replacement and remediation options, and break findings into milestone-based phases with feasibility timing — all documented in Confluence.

CI/CD & Infrastructure-as-Code Security

• Evaluate and harden CI/CD pipelines and IaC configurations to ensure security controls are built into delivery workflows, not bolted on after.

Continuous Architecture Ownership

• Own architectural correctness throughout the change lifecycle
• Map findings to Mythos-specific TTPs to provide early warning across every domain
• Embed AI-augmented tooling into review workflows to accelerate flaw detection
• Identify and prioritize operational risks surfaced during the engagement

Qualifications:

Required Qualifications:

Core Expertise

• Deep experience with internal network architecture and segmentation design
• Zero trust methodology - applied, not theoretical
• Strong understanding of domain-based security boundaries and lateral movement controls
• Ability to assess high-risk network connections and produce actionable, prioritized remediation options

Additional Experience

• CI/CD pipeline and IaC security practices
• Familiarity with structured documentation and milestone-based planning (Confluence or equivalent)
• Hands-on experience with AI coding agents (e.g., Claude Code, OpenAI Codex, Gemini CLI)