Senior Cybersecurity Architect

# Senior Cybersecurity Architect Apply
** Job#: 3055013
***
* Job Description:

** Senior Cybersecurity Architect
*
* Location:

** Juno Beach, Florida (Onsite)

Position Overview An opportunity is available for a Senior Cybersecurity Architect to support the assessment of cybersecurity risk associated with new technology implementations across a large, complex enterprise. This is a senior-level, technical architecture and risk assessment position. The architect will evaluate proposed technologies and solutions across cloud, SaaS, enterprise applications, infrastructure, networks, identity, APIs, AI/GenAI, OT/ICS, third-party solutions, and other emerging technologies.

The role spans the full technology lifecycle, from planning and solution design through architecture review, implementation support, and pre-production validation. This role operates with a business-enablement mindset, identifying and communicating risk, defining controls, and collaborating with project teams to find practical solutions.

Key Responsibilities
* Independently lead cybersecurity architecture reviews for projects, platforms, applications, infrastructure, cloud services, SaaS platforms, vendor solutions, APIs, and enterprise integrations.
* Analyze solution architectures, network and data flows, trust boundaries, authentication models, integrations, external connectivity, and security controls.
* Perform threat modeling to identify threat scenarios, attack paths, trust-boundary concerns, and potential security weaknesses.
* Identify cybersecurity risks and assign risk ratings using established enterprise risk methodologies.
* Articulate the technical and business implications of identified cybersecurity risks.
* Define required and recommended security controls and practical mitigation strategies based on identified risk.
* Produce concise, defensible risk documentation identifying the exposure, potential impact, risk rating, mitigation requirements, and residual risk.
* Assess internet-facing technologies and external attack surfaces, including web applications, APIs, exposed services, authentication mechanisms, and external connectivity.
* Assess cloud architectures with consideration for identity and access management, networking, workload security, logging and monitoring, data protection, and encryption.
* Evaluate application security architecture, including authentication and authorization, APIs, web application security, secrets management, and secure architecture patterns.
* Evaluate identity and access management architectures, including SSO, federation, MFA, RBAC, and privileged access.
* Evaluate data security and privacy considerations, including data classification, collection, storage, processing, transmission, and encryption.
* Assess cybersecurity resiliency, including single points of failure, backup and recovery dependencies, and ransomware resilience.
* Review and evaluate vendor security architectures and supporting technical evidence.
* Recognize regulatory, privacy, and compliance implications associated with proposed solutions, including NERC CIP.
* Develop reusable cybersecurity architecture patterns, reference architectures, and standards.
* Facilitate architecture review sessions with application teams, project teams, technical stakeholders, and third-party vendors.
* Mentor other cybersecurity professionals and share technical knowledge.
* Monitor industry threats and technology trends to incorporate improvements into architecture standards.
* Independently manage a high volume of concurrent cybersecurity architecture assessments.

Required Qualifications
* Demonstrated senior-level experience performing cybersecurity architecture, solution security, or technology risk assessments in large and complex enterprise environments.
* Strong understanding of cybersecurity architecture principles and their application across diverse technology environments.
* Working knowledge of cloud security architecture, including IAM, networking, data protection, and workload security (AWS, Azure, and/or GCP).
* Working knowledge of network and infrastructure security, including segmentation, firewalls, WAFs, proxies, DNS, and encryption.
* Working knowledge of application security, including authentication, APIs, web application security, and secure design patterns.
* Working knowledge of identity and access management, including SSO, federation, MFA, and RBAC.
* Knowledge of data security and privacy architecture, including protection of sensitive and regulated…