Security Architect Job Description
We are seeking an experienced Security Architect with 8 to 12 years of experience in producing security architecture within enterprise environments, focusing on information security and cybersecurity.
- Proficient in security architecture frameworks such as TOGAF, SABSA, and OSA.
- Experience in developing security architectural principles, cybersecurity kill chain, Zero Trust patterns, and best practices for enterprise solutions.
- Hands-on experience defining security architectures for hybrid solutions across enterprise datacenters, private clouds, SaaS, IaaS, and PaaS environments.
- Knowledge of DevSecOps practices and pipeline integration.
- Experience in identifying security risks and mapping them to industry-standard frameworks within enterprise settings.
- Ability to recommend comprehensive security controls to mitigate potential risks.
- Track record of collaborating with enterprise architects and solution designers to incorporate security architecture into solutions.
- Experience in developing security architectures addressing zero trust, authentication, authorization, key management, cryptography, API management, CI/CD pipelines, container and cloud security, microservice security, etc.
- Proficiency with enterprise architecture tools such as ArchiMate and Lucidchart.
- Skills to identify optimal points for security solution implementation considering wider impacts such as risk, cost, customer impact, and timelines.
- Ability to guide security solutions based on overall architecture without dictating detailed design.
- Experience working in technology roles interfacing with internal and external stakeholders.
- Relevant industry certifications such as CISSP, CISA, or Sherwood Applied Business Security Architecture.