Cybersecurity Architect

Century Pacific Food, Inc.; Metro Manila; Presencial; PHP 1.800.000 - 3.600.000; Jornada completa

Descripción de la vacante

Century Pacific Food, Inc. seeks a Cybersecurity Architect to serve as the enterprise security design authority for Identity & Access Management (IAM) and Zero Trust Architecture (ZTA).

The role bridges architecture, SOC collaboration, and administration to ensure security designs are enforceable in production environments. The position leads IAM reference architectures, SSO/MFA patterns, PAM, and identity analytics while aligning with industry standards such as NIST CSF and ISO 27001.

Formación

• Bachelor’s degree in CS/IT/Engineering or related field.
• Strong background in security engineering, SOC, or infrastructure security.
• Experience deploying or designing IAM/IGA/PAM with conditional access.
• Experience with incident response workflows and threat remediation alignment.
• Preferred CISSP, CCSP, SABSA, TOGAF, CISM or vendor IAM certs.

Responsabilidades

• Define enterprise IAM and Zero Trust reference architectures and guardrails.
• Lead architecture design for identity governance, SSO/MFA, federation, PAM.
• Build target-state roadmaps, maturity plans, and integration blueprints.
• Support SOC engagement including incident analysis, threat hunting, detection engineering.
• Provide hands-on guidance during rollout of IAM and Zero Trust controls.
• Mentor engineers on identity-centric design and Zero Trust adoption.

Conocimientos

Security engineering

SOC operations

Infrastructure security

IAM / IGA / PAM

Zero Trust

Threat detection

Incident response

Change management

Educación

Bachelor's degree in CS/IT/Engineering

Descripción del empleo

Job Summary

The Cybersecurity Architect acts as the enterprise security design authority for Identity & Access Management (IAM) and Zero Trust Architecture (ZTA), while remaining technically engaged across Security Operations, Infrastructure Security, and Administrative implementation to ensure that security designs are operationally enforceable and measurable in production environments.

The role spans the following capability clusters and bridges:

• Architecture, integration, consulting, and vendor management

• IAM & infrastructure security

• Security Operations Center (SOC) collaboration

• Administration / implementation alignment

Key Responsibilities:

1) Architecture & Program Ownership

• Define enterprise IAM & Zero Trust reference architectures, patterns, and guardrails.

• Lead architecture design for: o Identity governance & lifecycle automation

  • SSO/MFA, federation, conditional access

  • Privileged Access Management (PAM)

  • Identity analytics, risk signals, and telemetry

• Build target-state roadmaps, maturity plans, and integration blueprints.

• Ensure alignment with NIST CSF, ISO 27001, NIST 800-207, and Zero Trust principles.

2) Hands-On SOC Engagement

• Support incident analysis, threat hunting, and detection engineering to validate design assumptions.

• Translate SOC findings into architecture hardening patterns.

• Participate in:

  • Vulnerability assessment remediation design

  • Exposure reduction initiatives

  • Red/blue team architecture learning cycles

• Ensure SOC controls map to IAM & ZTA enforcement points.

3) Security Implementation & Administration Support

• Provide hands-on technical guidance during rollout of IAM and Zero Trust controls.

• Support:

  • Secure configuration baselines

  • Platform & infrastructure hardening

  • Change and provisioning models

• Validate implementation fidelity vs. architecture decisions.

• Assist engineering teams during:

  • Proof-of-concepts (POCs)

  • Production deployment blueprints

  • Integration troubleshooting

4) Engineering & Platform Integration

• Ensure IAM, SOC tooling, and infrastructure controls interoperate.

• Review solution designs and engineering runbooks.

• Provide technical leadership in:

  • Cloud IAM & workload identity models

  • Micro-segmentation and policy-based access

  • Data security alignment (classification → access → monitoring)

5) Governance, Consulting & Leadership

• Participate in security steering, design review boards, and architecture forums.

• Act as consultative partner to:

  • Platform teams

  • Application owners

  • Business units (BISO / LISO representatives)

• Mentor engineers on identity-centric design and Zero Trust adoption.

Qualifications:

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or a related field.

• Strong background in security engineering, SOC operations, or infrastructure security.

• Direct experience deploying or designing:

  • IAM / IGA / PAM platforms o Conditional access, MFA, federation

  • Log- and telemetry-driven identity controls

• Prior work with:

  • Incident response workflows

  • Threat detection & remediation alignment

  • Change & provisioning processes at scale

• Preferred Certifications: CISSP, CCSP, SABSA, TOGAF, CISM, vendor IAM certifications.