Security Architecture Analyst

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Job Title:
Security Architecture Analyst

Location:
Remote, RI

Duration: 13 months

Bill Rate: $78/hour (C2C)

Job Type: W-2, 1099, C2C

Client:
To Be Discussed Later

Work Authorization: US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other

Role purpose:
Operationalize the enterprise security architecture strategy by performing risk-based architecture reviews, maintaining reusable guidance, supporting architects and delivery teams, and turning recurring findings and emerging risks into actionable security intelligence.

The Security Architecture Analyst supports the execution and continuous improvement of the enterprise security architecture program. The role applies established security frameworks, patterns, guardrails, and review processes to assess solution designs, document security considerations, maintain reusable guidance, research technology risks, and help stakeholders understand security architecture requirements. The analyst also captures recurring themes from reviews and consultations to improve knowledge resources, review practices, and security architecture intelligence.

• Perform architecture and security reviews using established review frameworks, standards, control requirements, patterns, and guardrails.
• Analyze solution designs, data flows, trust boundaries, identity and access models, integrations, hosting models, and security-relevant dependencies.
• Identify gaps, document risk considerations, and provide clear recommendations aligned to approved security guidance.
• Support Architecture Review Board and related governance processes by preparing review notes, tracking decisions, and escalating unresolved or material risks.
• Distinguish confirmed facts, open questions, assumptions, and recommendations in review outputs.

• Serve as a point of contact for routine security architecture questions from Enterprise Architects, engineering teams, product teams, and other stakeholders.
• Help teams interpret and apply established security patterns, guardrails, standards, and review expectations.
• Provide practical, risk-informed guidance that supports secure design without assuming ownership of the solution.
• Escalate requests that involve novel technology, material risk, exceptions, policy interpretation, or final approval authority.

• Create maintain, and improve knowledge base articles, review playbooks, checklists, decision records, frequently asked questions, and reusable guidance.
• Document recurring review findings, common implementation challenges, and lessons learned.
• Contribute evidence and recommendations for updates to security architecture patterns and guardrails.
• Promote consistent use of current guidance and retire or flag outdated content.

• Research emerging technologies, architecture trends, threat developments, and new security considerations relevant to the enterprise.
• Produce concise risk summaries, decision-support material, and recommended areas for deeper review.
• Assess whether existing patterns and guardrails adequately address new use cases and identify potential gaps for lead review.
• Support early security engagement for technologies such as cloud services, SaaS platforms, APIs, artificial intelligence, automation, and agentic solutions.

• Analyze recurring themes across reviews, consultations, and governance decisions.
• Identify opportunities to improve patterns, review criteria, enablement material, or process efficiency.
• Feed actionable insights back to Security Architecture leads and Enterprise Architects.
• Contribute to metrics and reporting that demonstrate review demand, recurring risks, pattern adoption, and program improvement.

• Strong written communication, research, organization, and attention to detail.
• Interest in developing skills in security architecture, enterprise architecture, or technology risk.

• Focuses attention on material design risk and clearly separates facts, assumptions, findings, and recommendations.
• Technical judgment
• Applies established guidance consistently and recognizes when escalation or deeper expertise is required.
• Communication
• Translates technical and security concepts into concise, actionable guidance for varied audiences.
• Builds effective working relationships…