Senior Cybersecurity Architect; onsite

Start Date: ASAP
Type: Temporary Project
Estimated Duration: 12+ months with possible extensions
Work Setting: 100% of the time at the Client's site. No telecommuting or remote work. This is a non-negotiable requirement from the client.
Only candidates able to relocate as required should apply to avoid removal from future consideration.
Our client is filling this contract position exclusively through approved staffing partners, so this opportunity is not available by applying directly with the client.

• Availability to work 100% of the time at the Client's site in Juno Beach, FL (required).
• Experience with Cybersecurity architecture, solution security, or technology risk assessments in large and complex enterprise environments.
• Experience with Cybersecurity architecture principles across diverse technology environments.
• Experience with Cloud security architecture including IAM, networking, data protection, workload security, logging/monitoring, encryption, and shared-responsibility models (AWS, Azure, and/or GCP).
• Experience with Network and infrastructure security including segmentation, firewalls, Web Application Firewalls (WAF), proxies, Domain Name System (DNS), load balancers, certificates, encryption, remote access, and secure connectivity.
• Experience with Application security including authentication and authorization, Application Programming Interfaces (API), web application security, secrets management, secure design patterns, Open Worldwide Application Security Project (OWASP) risks, and third-party integrations.
• Experience with Identity and Access Management (IAM) including Single Sign-On (SSO), federation, Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), privileged access, service/workload identities, and least privilege.
• Experience with Data security and privacy architecture including data classification, encryption, key management, tokenization, and Data Loss Prevention (DLP).
• Experience with Threat modeling to identify attack surfaces, trust boundaries, realistic threat scenarios, and potential attack paths.
• Experience with Interpreting vulnerability assessments, penetration-test findings, and vendor-provided security assessment results for architecture risk relevance.
• Experience with Evaluating third-party/vendor technologies and challenging vendor security assertions.
• Experience with Cybersecurity frameworks and standards including NIST CSF, NIST SP 800-53, NERC CIP, and ISO/IEC 27001.
• Experience with Regulatory and compliance considerations.
• Experience with Developing concise and defensible cybersecurity risk statements.

• Experience with Cybersecurity architecture assessments within a Fortune 500 or similarly large, complex enterprise.
• Experience with Multiple cloud environments such as AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Experience with Operational Technology/Industrial Control Systems (OT/ICS) cybersecurity environments.
• Experience with Emerging AI/GenAI security risks and considerations.
• Experience with Contributing to cybersecurity reference architectures, reusable security patterns, technical standards, or architecture guidance.
• Experience with Utility, critical infrastructure, or other highly regulated environment.
• CISSP, CCSP, Comparable cybersecurity/cloud/architecture certifications.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline (equivalent relevant professional experience will be considered).

• Independently lead cybersecurity architecture reviews for complex projects, platforms, applications, infrastructure, cloud services, SaaS platforms, vendor solutions, APIs, and enterprise integrations.
• Analyze solution architectures, network and data flows, trust boundaries, authentication models, integrations, external connectivity, and security controls.
• Perform threat modeling to identify realistic threat scenarios, attack paths, trust-boundary concerns, and potential security weaknesses.
• Identify cybersecurity risks and assign appropriate risk ratings using established enterprise risk methodologies combined with senior-level professional judgment.
• Define required and recommended security controls and practical mitigation strategies based on identified risk.
• Produce concise, defensible risk documentation identifying exposure, potential impact, risk rating, mitigation requirements, and residual risk.
• Assess internet-facing…