Cyber Security Architect - Remote - 6+ Month Contract

Saragossa; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Saragossa is hiring a Cybersecurity Architect for a fully remote role within a regulated wealth management/services company. You will work with Enterprise Platform Architects, engineering teams, data leaders and business stakeholders to ensure secure enterprise platforms from design to production readiness.

The role spans security across Microsoft Azure, enterprise apps, APIs, and data platforms, focusing on identity, networking, encryption, secrets, logging, resilience, and Zero Trust.

Qualifications

• Deep Azure security architecture experience.
• Authorized to work in the United States without sponsorship.
• Experience with risk assessments and threat modeling.

Responsibilities

• Define secure patterns for identity, networking, encryption and logging.
• Lead architecture review forums and threat modeling sessions.
• Produce reusable blueprints, policy-as-code and IaC modules for engineering adoption.
• Collaborate with engineers, data leaders and business stakeholders to ensure secure production readiness.

Skills

Security architecture

Risk communication

Leadership

Tools

Azure

Entra ID

OAuth/OIDC

Conditional access

Privileged access

Purview

Sentinel

Defender for Cloud

Azure OpenAI

Job description

We are hiring a Cybersecurity Architect for a fully remote role within a regulated wealth management/services company. You will work alongside Enterprise Platform Architects, engineering teams, data leaders and business stakeholders to make sure enterprise platforms are designed and implemented securely, from early design review through to production readiness.

The role covers security architecture across Microsoft Azure, enterprise applications, APIs, integration services and data platforms. Day to day, that includes defining secure patterns for identity, networking, encryption, secrets, logging and resilience, applying Zero Trust principles across workforce and workload access, and leading threat modeling and architecture risk assessments. You will also produce reusable blueprints, policy-as-code, IaC modules and implementation guidance that engineering teams can adopt consistently, and take part in architecture review forums.

A significant part of the role is establishing guardrails for generative AI, agents and models. This includes AI gateways, model access controls, prompt and output protections, RAG and vector store security, tool invocation, MCP-based connectivity, non-human identities, human-in-the-loop controls and monitoring.

The ideal candidate has cybersecurity experience, with significant responsibility for enterprise, cloud or platform security architecture. Deep Azure experience is required, along with strong knowledge of Entra ID, OAuth/OIDC, conditional access and privileged access. You should be hands-on enough to review configurations and technical artifacts, and able to communicate risk clearly to engineers, executives and control functions. Experience in wealth management, asset management, or professional services is preferred, as is familiarity with Purview, Sentinel, Defender for Cloud, Azure OpenAI or similar AI platforms, and frameworks such as NIST CSF, NIST AI RMF and ISO 27001. Certifications like CISSP, CCSP or Azure Security Engineer are a plus.

This is a fully remote role, but you must live in the United States.

They'll need someone who's fully authorized to work in the US without any sponsorship / visa (cannot support H-1B visa).