Cyber Security Architect

Century Pacific Food, Inc.; Pasig; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

Century Pacific Food, Inc. seeks a Cybersecurity Architect to serve as the enterprise security design authority for IAM and Zero Trust Architecture, while remaining hands-on across SOC, infrastructure security, and admin implementation to ensure security designs are enforceable in production environments.

The role spans architecture, IAM/infrastructure security, SOC collaboration, and admin alignment, with hands-on guidance in deployment and controls mapping across cloud and on-premise

Qualifications

• Bachelor's degree required in CS/IT/engineering.
• Strong background in security engineering, SOC operations, or infrastructure security.
• Experience deploying or designing IAM/IGA/PAM, conditional access, MFA, federation, and telemetry‑driven identity controls.
• Familiar with incident response, threat detection, and provisioning at scale.
• Certifications such as CISSP, CCSP, SABSA, TOGAF, CISM or vendor IAM cert are preferred.

Responsibilities

• Define enterprise IAM and Zero Trust reference architectures and guardrails.
• Lead design for identity governance, SSO/MFA, federation, PAM, analytics, and telemetry.
• Build target-state roadmaps, maturity plans, and integration blueprints.
• Ensure alignment with NIST CSF, ISO 27001, NIST 800-207, and ZTA principles.
• Provide hands-on SOC engagement: threat hunting, incident analysis, and detection engineering.
• Assist engineering teams during POCs, deployments, and integration troubleshooting.
• Mentor engineers on identity-centric design and Zero Trust adoption.

Skills

Security engineering

SOC operations

Infrastructure security

IAM / IGA / PAM

MFA / conditional access

Federation / identity controls

Threat detection & remediation

Change & provisioning at scale

Cloud IAM

Leadership / mentoring

Education

Bachelor's Degree in Computer Science / IT / Engineering

Tools

IAM platforms tooling

PAM platforms

Identity governance tools

Job description

The Cybersecurity Architect acts as the enterprise security design authority for Identity & Access Management (IAM) and Zero Trust Architecture (ZTA), while remaining technically engaged across Security Operations, Infrastructure Security, and Administrative implementation to ensure that security designs are operationally enforceable and measurable in production environments.

The role spans the following capability clusters and bridges:

• Architecture, integration, consulting, and vendor management
• IAM & infrastructure security
• Security Operations Center (SOC) collaboration
• Administration / implementation alignment

Key Responsibilities:

• Define enterprise IAM & Zero Trust reference architectures, patterns, and guardrails.
• Lead architecture design for: Identity governance & lifecycle automation, SSO/MFA, federation, conditional access, Privileged Access Management (PAM), Identity analytics, risk signals, and telemetry
• Build target-state roadmaps, maturity plans, and integration blueprints.
• Ensure alignment with NIST CSF, ISO 27001, NIST 800-207, and Zero Trust principles.

2) Hands-On SOC Engagement

• Support incident analysis, threat hunting, and detection engineering to validate design assumptions.
• Translate SOC findings into architecture hardening patterns.
• Participate in: Vulnerability assessment remediation design, Exposure reduction initiatives, Red/blue team architecture learning cycles
• Ensure SOC controls map to IAM & ZTA enforcement points.

3) Security Implementation & Administration Support

• Provide hands-on technical guidance during rollout of IAM and Zero Trust controls.
• Support: Secure configuration baselines, Platform & infrastructure hardening, Change and provisioning models, Validate implementation fidelity vs. architecture decisions.
• Assist engineering teams during:, Proof-of-concepts (POCs), Production deployment blueprints, Integration troubleshooting
• Ensure IAM, SOC tooling, and infrastructure controls interoperate.
• Review solution designs and engineering runbooks.
• Provide technical leadership in: Cloud IAM & workload identity models, Micro-segmentation and policy-based access, Data security alignment (classification access monitoring)
• Participate in security steering, design review boards, and architecture forums.
• Act as consultative partner to: Platform teams, Application owners, Business units (BISO / LISO representatives)
• Mentor engineers on identity-centric design and Zero Trust adoption.

Qualifications:

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or a related field.
• Strong background in security engineering, SOC operations, or infrastructure security.
• Direct experience deploying or designing: IAM / IGA / PAM platforms o Conditional access, MFA, federation, Log- and telemetry-driven identity controls
• Prior work with: Incident response workflows, Threat detection & remediation alignment, Change & provisioning processes at scale
• Preferred Certifications: CISSP, CCSP, SABSA, TOGAF, CISM, vendor IAM certifications.