Enterprise Security Architect | Zero Trust, IAM & Cloud Security

International Business Machines Corporation; Brasília; On-site; BRL 300,000 - 600,000; Full time

Job summary

IBM, a global technology leader, is seeking an experienced Senior Enterprise Security Architect to define and drive the security architecture strategy across cloud, on‑prem, and hybrid environments. You will shape reference architectures, lead risk assessments, and mentor security teams.

You will collaborate with business and IT stakeholders to embed security into SDLC, implement IAM, Zero Trust, encryption, SIEM, and ensure compliance with LGPD, GDPR, PCI DSS, SOX, and HIPAA as applicable.

Qualifications

• Experience designing enterprise security architecture and reference architectures.
• Proven ability to lead security assessments and threat modeling.
• Experience with IAM, network security, data protection and secure SDLC.
• Familiarity with regulatory frameworks (LGPD, GDPR, PCI DSS, SOX, HIPAA).

Responsibilities

• Define and maintain enterprise security architecture strategy and standards.
• Design secure architectures for cloud, hybrid and on-prem environments.
• Lead security assessments, architecture reviews and threat modeling.
• Govern security controls across IAM, network security, data protection, and application security.
• Ensure security is integrated throughout SDLC and Agile delivery.
• Collaborate with multiple teams to embed security in solutions.
• Guide implementation of security technologies (SIEM, IAM, Zero Trust, encryption, PAM).
• Support GRC initiatives and regulatory compliance.
• Lead security architecture reviews for major projects and cloud migrations.
• Evaluate emerging threats and security trends to improve posture.
• Provide security leadership and mentorship to architects and engineers.
• Communicate risks and decisions to executives and stakeholders.

Skills

Enterprise Security Architecture

Zero Trust Architecture

Identity & Access Management

Cloud Security (AWS, Azure, GCP)

Security Frameworks (NIST, ISO 27001,

Tools

SIEM

SOAR

EDR/XDR

Job description

• Define and maintain the enterprise security architecture strategy, roadmap, standards, and reference architectures.
• Design secure architectures for cloud, hybrid, and on-premises environments.
• Lead security assessments, architecture reviews, and threat modeling activities for new and existing solutions.
• Establish and govern security controls across Identity and Access Management (IAM), network security, data protection, application security, and infrastructure security.
• Ensure security requirements are integrated throughout the system development lifecycle (SDLC) and Agile delivery processes.
• Develop and enforce security policies, standards, frameworks, and best practices aligned with industry standards.
• Collaborate with business, application, infrastructure, and cloud teams to ensure security is embedded in technology solutions from design through implementation.
• Conduct risk assessments and recommend mitigation strategies for security vulnerabilities and business risks.
• Guide the implementation of security technologies such as SIEM, IAM, Zero Trust, encryption, endpoint protection, PAM, and cloud security platforms.
• Support Governance, Risk, and Compliance (GRC) initiatives and ensure compliance with regulatory and industry requirements.
• Lead security architecture reviews for major projects, digital transformation initiatives, and cloud migrations.
• Evaluate emerging threats, technologies, and security trends to continuously improve the organization's security posture.
• Partner with incident response and security operations teams to strengthen threat detection, response, and recovery capabilities.
• Provide security leadership, mentoring, and technical guidance to architects, engineers, and project teams.
• Communicate security risks, architecture decisions, and recommendations to technical teams, executives, and stakeholders.

Business Impact

• Strengthens the organization's cybersecurity posture and resilience.
• Reduces security risks and regulatory exposure.
• Enables secure digital transformation and cloud adoption.
• Protects critical business assets, data, and customer trust.
• Supports business growth by ensuring security measures align with enterprise objectives.

Required Professional and Technical Expertise

• Enterprise Security Architecture
• Zero Trust Architecture
• Identity & Access Management (IAM)
• Cloud Security (AWS, Azure, GCP)
• Security Frameworks: NIST, ISO 27001, SABSA, TOGAF
• Governance, Risk & Compliance (GRC)
• Network Security and Micro-Segmentation
• Data Security and Encryption Technologies
• Application Security and Secure SDLC
• Threat Modeling and Risk Assessment
• Vulnerability Management
• SIEM, SOAR, EDR/XDR Solutions
• Security Operations and Incident Response
• Security Automation and DevSecOps
• Regulatory Compliance (LGPD, GDPR, PCI DSS, SOX, HIPAA as applicable)
• Strong stakeholder management, communication, and leadership skills

References

Visible links 1. https://ibm-my.sharepoint.com/personal/vbgomes_br_ibm_com/Documents/Archive/CVs%20CS&I/Marlon%20Costa.pdf?web=1