External Perimeter Security Architect

External Perimeter Security Architect

Join a leading organization in a strategic security initiative focused on redesigning and hardening external perimeter defenses across cloud and on-premises environments. This role involves assessing current risks, developing phased remediation plans, and implementing operationally effective security controls to minimize exposure.

Key Responsibilities

• Assess and reengineer the existing external perimeter security architecture for both cloud and on-premises environments.
• Deliver feasibility assessments and phased remediation roadmaps documented in Confluence.
• Conduct connection-by-connection assessments of high-risk network paths, documenting replacement options and breaking findings into milestone-based remediation phases.
• Extend architecture controls across hybrid environments, ensuring security measures are operationally effective and business-friendly.
• Design and implement AWS security controls, including SCPs, Resource Policies, and VPC Endpoints to enforce isolation.
• Harden IAM controls and access patterns through guardrails.
• Configure data flow controls and encryption for data at rest and in transit.
• Manage multiple AWS accounts, prioritizing and scaling remediation efforts.
• Embed AI-augmented tooling into architecture review workflows.
• Evaluate and harden CI/CD pipeline architecture and Infrastructure-as-Code configurations.
• Maintain security correctness throughout change lifecycle, establishing segmentation and zero-trust enclaves.
• Map findings to TTPs to support early detection and remediation.

Required Qualifications

• Deep expertise in network security architecture, external perimeter design, and SD-WAN technologies.
• Strong knowledge of Zero Trust principles and segmentation strategies.
• Hands-on experience securing AWS environments, including Control Tower, Security Hub, Config, Guard Duty, SCPs, Resource Policies, and VPC Endpoints.
• Experience with cloud networking, cross-account security management, and encryption controls for data at rest and in transit.
• Familiarity with CI/CD pipeline security and infrastructure-as-code environments using tools such as Jenkins and Ansible.
• Ability to assess operational risks, develop phased remediation plans, and document architectural recommendations.
• Exposure to AI-assisted development and security tooling, including Claude Code, OpenAI Codex, or Gemini CLI, is highly desirable.

Preferred Qualifications

• Privileged Access Management fundamentals.
• Experience with AI coding agents and security tooling.
• Financial services or regulated environment experience, with a background in designing scalable, secure enterprise architectures.

About Delphi-US Peacemakers in the Talent War Delphi-US is a national IT Services firm based in Newport, Rhode Island. Delphi attracts our nation's best and brightest Technical & Professional Talent and positions our nation's finest employers to further their competitive advantages. Delphi's core technical focus includes Data Intelligence Engineering & Analytics, AI/ML Operational Excellence, Dev Ops & Cloud Computing, Health IT & Life Sciences, and Energy Management/Power Systems;

serving domains from sensitive national energy sectors to critical financial services, biomed, life sciences & pharma, major government & municipal institutions, and much of the USA's Fortune 500 corporations. Delphi Associates are deployed on critical IT Projects where their consultative business acumen, comprehensive technical expertise, and committed service mission drives our client's success. Our proprietary skill-based and cultural matching process results in higher qualified project teams, custom curated for our client's specific technical & functional goals.

We are supremely experienced, friendly, professional, and ready to advocate on your behalf. Delphi has an indelible understanding of employer expectations, a track record of project success and we deliver lasting results.