Senior Security Architect – ZTNA, IAM & AI Security

Confidential; Ciudad de México; On-site; MXN 1,200,000 - 2,100,000; Full time

Job summary

Confidential seeks a senior Information Security Architect to lead architecture and delivery of secure infrastructure across the organisation. You will guide design for ZTNA, PAM, passwordless auth, network segmentation, DLP, CASB, and AI security, while ensuring ISMS and SOC controls align with ISO 27001:2022 and SOC 2 Type 2.

You will produce ADRs and align projects with risk appetite and business goals. Strong communication to both technical and non-technical stakeholders is required, with 5+

Qualifications

• Proven experience delivering complex security infrastructure projects.
• Deep technical depth across two or more security domains listed above.
• Ability to communicate security concepts to diverse audiences.

Responsibilities

• Lead security architecture and solution design for strategic projects (ZTNA, PAM, Passwordless, CASB).
• Define governance controls for cloud, data, and AI platforms with CSPM/DSPM scope.
• Ensure logging into SIEM and SOC-aligned telemetry.
• Design Microsoft Defender/XDR and Entra ID security controls.
• Architect security across AWS and Google Workspace platforms.
• Produce architecture documentation including ADRs and standards.
• Collaborate with IT, infra, and engineering to translate requirements into deliverables.
• Provide ISR style reviews for IT projects and risk-based recommendations.

Skills

ZTNA

PIM/PAM

Passwordless Authentication

Network Segmentation

DLP

CASB

ISO 27001

SOC 2

CISSP/CISM/SABSA/TOGAF

Microsoft Entra ID / Defender

Cloud Security (CSPM/DSPM)

AI Security & Governance

Security Risk Assessments

Architecture Documentation (ADRs)

ISR Reviews

Education

CISSP or equivalent

TOGAF certification

Microsoft Security certifications (e.g. SC-100)

Job description

Confidential seeks a senior Information Security Architect to lead architecture and delivery of secure infrastructure across the organisation. You will guide design for ZTNA, PAM, passwordless auth, network segmentation, DLP, CASB, and AI security, while ensuring ISMS and SOC controls align with ISO 27001:2022 and SOC 2 Type 2.

You will produce ADRs and align projects with risk appetite and business goals. Strong communication to both technical and non-technical stakeholders is required, with 5+