Cyber Security Architect

We are looking for an experienced Cybersecurity Architect to design, implement, and govern secure enterprise architectures across applications, infrastructure, networks, cloud platforms, data, and identity systems. The successful candidate will align cybersecurity strategy with business objectives, identify security risks, define appropriate controls, and guide engineering teams in building secure and resilient technology solutions.

• Define and maintain the organization’s cybersecurity strategy, principles, standards, and reference architectures.
• Design secure architectures for enterprise applications, networks, cloud platforms, APIs, data platforms, and infrastructure.
• Translate business, regulatory, and technical requirements into security controls and architecture patterns.
• Conduct threat modelling, attack-surface analysis, security risk assessments, and architecture reviews.
• Identify vulnerabilities, design gaps, single points of failure, and risks introduced by new technologies or system integrations.
• Define security controls for confidentiality, integrity, availability, authentication, authorization, monitoring, and data protection.
• Establish defense-in-depth strategies covering identity, network, endpoint, application, data, and cloud security.
• Review solution designs, technical specifications, infrastructure-as-code, and implementation plans for security compliance.
• Guide development and engineering teams in secure design, secure coding, Dev Sec Ops , and security testing practices.
• Design and govern identity and access management solutions, including SSO, MFA, RBAC, ABAC, PAM, and zero-trust controls.
• Define security requirements for firewalls, WAF, VPN, IDS/IPS, SIEM, EDR, DLP, secrets management, and endpoint protection.
• Develop cloud-security architectures for AWS, Azure, or Google Cloud environments.
• Establish security logging, monitoring, alerting, detection, and incident-response requirements.
• Support vulnerability assessments, penetration testing, configuration reviews, and remediation planning.
• Assist incident-response and business-continuity teams during major security events.
• Evaluate security products, technologies, vendors, and managed security services.
• Maintain security architecture documentation, standards, diagrams, risk registers, and control mappings.
• Support audits and compliance initiatives involving ISO 27001, SOC 2, PCI DSS, GDPR, HIPAA, or applicable regulatory frameworks.
• Track changes in the threat landscape and update security controls and architecture accordingly.

• 8–12 years of experience in cybersecurity, information security, infrastructure security, cloud security, or security architecture.
• 3+ years of experience designing and reviewing enterprise security architectures.
• Strong knowledge of network security, application security, cloud security, IAM, cryptography, and security operations.
• Experience with threat modelling frameworks such as STRIDE, MITRE ATT&CK, or equivalent methodologies.
• Strong understanding of security principles including least privilege, zero trust, defense in depth, secure-by-design, and separation of duties.
• Experience conducting security risk assessments and developing risk-treatment plans.
• Hands-on knowledge of security controls, vulnerabilities, penetration testing, incident response, and disaster recovery.
• Experience working with architecture frameworks, security policies, control standards, and governance processes.
• Strong communication skills, with the ability to explain complex security risks to technical and business stakeholders.
• Demonstrated ability to influence engineering teams and drive security improvements across projects.

• Experience securing AWS, Azure, or Google…