Cybersecurity Architect

NRS is a leading provider of transportation & supply chain solutions. As a family-owned and operated company, NRS has delivered smart logistics solutions to numerous Fortune 500 companies spanning over 70 years.

Whether it’s NRT, Keystone, Keystone Fresh, or Keystone Capacity, our innovative energy drives us towards new and valuable solutions for our clients, even as we continuously grow and strengthen our network. We are dedicated to creating a culture that empowers the individual and offers our associates the opportunity to apply their unique skill to the challenges facing our clients. In the office, the warehouse, or on the road, it is this commitment to our innovative spirit that unites us in common mission to push boundaries in the logistics industry.

The Cybersecurity Architect is responsible for designing, implementing, monitoring, and maintaining the organization’s security infrastructure to protect systems, networks, applications, and data from cyber threats. This role works closely with IT, infrastructure, cloud, and business teams to identify risks, implement security controls, investigate security incidents, and ensure compliance with security policies and regulatory requirements.

Duties and responsibilities:

Dev Sec Ops  Integration

• Embed security tools and practices into CI/CD pipelines
• Champion “shift-left” security practices, including automated code scanning and testing
• Oversee secure coding standards and developer training programs
• Implement infrastructure-as-code (IaC) security controls and compliance checks
• Establish policies, SOPs, RACI, process maps, SLAs/OLAs, and controls.
• Define and managethe KPIs and OKRs process; publish dashboards and monthly service reviews.
• Maintain evidence and controls for process compliance and platform access governance.

Security Architecture & Strategy

• Develop and maintain enterprise security architecture standards and roadmaps.
• Define target-state security architectures for cloud, network, application, endpoint, and identity platforms.
• Evaluate and approve security designs for new initiatives and major technology changes.
• Lead Zero Trust architecture initiatives.
• Align security architecture with business objectives and regulatory requirements.
• Design and secure Azure, AWS, Microsoft 365, and SaaS environments.
• Implement cloud security best practices, governance controls, and monitoring.
• Review cloud configurations, permissions, and security posture.
• Partner with cloud teams to secure modern architecture and microservices environments.

Security Operations & Risk Management

• Oversee threat detection, incident response, threat hunting, and vulnerability management programs.
• Support security investigations and post-incident reviews.
• Conduct risk assessments and drive remediation efforts.
• Lead tabletop exercises and incident response planning.
• Evaluate emerging threats and recommend mitigation strategies.

Identity & Access Management

• Design and implement identity security strategies.
• Support governance of Entra , privileged access management (PAM), and authentication controls.
• Implement Multi-Factor Authentication (MFA), Conditional Access, and identity governance programs.
• Monitor privileged account activity and authentication risks.

Security Engineering

• Design and maintain:
  • Microsoft Defender XDR
  • MDR
  • Microsoft Sentinel
  • Firewalls
  • IDS/IPS technologies
  • Email security platforms
  • Endpoint security controls
  • DLP technologies
  • Zero trust technologies
• Lead security tool evaluations, integrations, and optimization activities.

Dev Sec Ops  Integration

• Integrate security into CI/CD pipelines.
• Implement automated security testing and code scanning.
• Establish secure coding standards and developer enablement programs.
• Implement Infrastructure-as-Code (IaC) security controls.
• Promote “shift-left” security practices across engineering teams.
• Develop and maintain cybersecurity policies, standards, and procedures.
• Ensure alignment with NIST, ISO 27001, SOC 2, and applicable regulatory requirements.
• Support audits, assessments, and third-party risk management.
• Present risk findings and security initiatives to executive leadership

• Bachelor’s degree in Computer Science, Cybersecurity, or…