Security Architect

Arctiq; Las Vegas (NV); On-site; USD 150,000 - 190,000; Full time

Job summary

Arctiq is seeking a seasoned Security Architect to design, implement, and maintain security architectures across networks, cloud environments, applications, and data. You will translate business and compliance requirements into scalable solutions, partnering with engineering and IT teams to embed security into products and operations.

The role emphasizes threat modeling, identity security, and Zero Trust, with collaboration across security, platform, and DevOps teams to strengthen CI/CD security

Qualifications

• 7–10+ years in information security with 2–3 years in security architecture.
• Deep understanding of network, cloud, identity security, IAM/PAM, and app security.
• Hands-on with AWS/AZure/GCP and native security services.

Responsibilities

• Design and document secure architectures for networks, cloud, apps, and identities.
• Define security standards, reference architectures and design patterns.
• Review projects and vendor solutions for security alignment and risk-based guidance.
• Lead threat modeling for new applications, migrations and major initiatives.
• Design and validate identity security architectures, including Zero Trust implementations.
• Evaluate identity risks across Active Directory, Entra ID, IAM/PAM and cloud identities.
• Implement IAM, network segmentation, encryption, and Zero Trust strategies.
• Recommend security tooling (SIEM, EDR, DLP, CASB, WAF, IAM/PAM) and integrate it into architecture.
• Partner with DevOps to embed security into CI/CD and IaC (DevSecOps).
• Support incident response with architectural context and remediation guidance.
• Ensure architectures meet SOC 2, ISO 27001, NIST CSF, PCI DSS, HIPAA as appropriate.

Skills

Information security

Cloud security

Identity security

IAM/PAM

Zero Trust

Threat modeling

Scripting (Python, Terraform)

Communication skills

Education

Bachelor's degree in Computer Science or related field

Tools

AWS

Azure

GCP

Terraform

Python

Job description

Company Overview
Arctiq is a global, intelligence-driven technology services company delivering professional and managed services across Hybrid Cloud Infrastructure, Networking & Connected Experiences, Cybersecurity, Data & AI, Autonomous Operations & Intelligence, and Enterprise Service Management. We help organizations operate, secure, and modernize complex environments by unifying infrastructure, networking, data, security, automation, and observability under a single, integrated operating model. Our work focuses on helping customers reduce operational friction, improve resilience, and make better, faster decisions as their environments evolve. Arctiq builds on decades of industry expertise and a customer-centric ethos to deliver exceptional value to clients across diverse industries.

The Security Architect is responsible for designing, developing, and maintaining security architectures that protect client systems, applications, networks, identities, and data. This role bridges strategic security planning with hands-on technical execution by translating business, security, and compliance requirements into secure, scalable technical solutions. The Security Architect partners closely with engineering, IT, infrastructure, and business teams to evaluate risks, implement security controls, and ensure security best practices are embedded throughout the technology environment.

Key Responsibilities

• Design and document secure architectures for networks, cloud environments (AWS/Azure/GCP), applications, and identity systems across client environments.
• Define and maintain security architecture standards, reference architectures, and design patterns across the organization.
• Review new projects, systems, applications, and vendor solutions to evaluate security architecture alignment and provide risk-based recommendations to engineering and business teams.
• Lead threat modeling exercises for new applications, infrastructure changes, migrations, and major technology initiatives.
• Design and validate identity security architectures, including identity governance, access management, privileged access controls, authentication strategies, and Zero Trust implementations.
• Evaluate identity-related risks and recommend improvements across Active Directory, Entra ID, IAM/PAM platforms, and cloud identity environments.
• Design and implement identity and access management (IAM), network segmentation, encryption, and Zero Trust strategies.
• Evaluate and recommend security tooling (SIEM, EDR, DLP, CASB, WAF, IAM/PAM, etc.) and oversee integration into the broader security architecture.
• Partner with DevOps and Platform teams to embed security into CI/CD pipelines and infrastructure-as-code (DevSecOps) practices.
• Support incident response and forensic activities by providing architectural context, root cause analysis support, and remediation recommendations.
• Ensure security architectures align with applicable compliance frameworks (SOC 2, ISO 27001, NIST CSF, PCI DSS, HIPAA, etc.) based on business requirements.
• Mentor engineers and junior security team members on secure design principles and architecture best practices.
• Maintain current architecture diagrams, data flow diagrams, security documentation, and technical standards.
• Stay current on emerging threats, attacker techniques, identity security trends, and evolving security technologies.

Required Qualifications

• 7–10+ years of experience in information security, including at least 2–3 years in a security architecture-focused role.
• Deep understanding of network security, cloud security architecture, identity security, IAM/PAM, and application security principles.
• Hands-on experience with at least one major cloud provider (AWS, Azure, or GCP) and its native security services.
• Experience designing and evaluating identity security solutions, including identity governance, authentication, authorization, privileged access, and Zero Trust strategies.
• Familiarity with security frameworks and standards including NIST CSF, ISO 27001, CIS Controls, and MITRE ATT&CK.
• Experience with threat modeling methodologies such as STRIDE or PASTA.
• Strong scripting and automation skills (Python, Terraform, or similar) are a plus.
• Excellent written and verbal communication skills, with the ability to explain technical risks and recommendations to both technical and non-technical stakeholders.
• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.

Preferred Qualifications

• Relevant certifications: CISSP, SABSA, CCSP, GIAC (GSEC/GCIA/GDSA), AWS Security, or Azure Security certifications.
• Experience working in regulated industries such as finance, healthcare, or government contracting.
• Experience designing, implementing, or maturing Zero Trust architectures.
• Prior experience leading security design reviews, architecture assessments, or Architecture Review Board activities.
• Experience with identity security platforms, including Microsoft Entra ID, Active Directory, IAM, or PAM solutions.

Arctiq is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply.

We thank you for your interest in joining the Arctiq team! While we welcome all applicants, only those who are selected for an interview will be contacted.