Security Architect

thyssenkrupp; Southfield (MI); On-site; USD 130,000 - 185,000; Full time

Job summary

thyssenkrupp is seeking a senior security architect to design and govern secure cloud, identity, applications, and data platform architectures for US government–level environments, including GCC High and Azure Government. Lead application security initiatives, threat modeling, secure SDLC practices, and vulnerability remediation, and provide senior guidance during incidents and investigations.

Translate regulatory and business requirements into scalable security roadmaps and standards, and

Qualifications

• Bachelor's degree or equivalent required.
• 7+ years of experience in information security, including hands-on security architecture or application security.
• Strong experience securing Microsoft 365 GCC‑High and Azure Government environments.
• Demonstrated expertise with cloud security, identity and access management, application security, and incident response.
• Experience supporting regulated environments (CMMC, ITAR, DFARS, or similar).

Responsibilities

• Design and govern secure architectures across cloud, identity, applications, and data platforms.
• Lead application security initiatives including assessments, threat modeling, secure SDLC practices, and vulnerability remediation.
• Support CMMC 2.0 Level 2+ readiness, including NIST 800 171/172 control implementation, SSP/POA&M management, and audit support.
• Architect and operate security capabilities within Microsoft GCC High and Azure Government, including Defender, Sentinel, Purview, and Entra ID.
• Provide senior level guidance during security incidents, investigations, and post incident remediation.
• Translate regulatory and business requirements into scalable security roadmaps and standards.
• Serve as a trusted advisor to engineering, IT, and leadership teams, mentor security professionals.

Skills

Application Security

Threat modeling

SAST/DAST/SCA

API security

Container security

Incident response

Automation

Microsoft Sentinel

Defender XDR

Identity and access management

Cloud security

Education

Bachelor's degree or equivalent

Master's degree preferred

Tools

Microsoft 365 GCC High

Azure Government

Microsoft Sentinel

Job description

• Design and govern secure architectures across cloud, identity, applications, and data platforms.
• Lead application security initiatives including assessments, threat modeling, secure SDLC practices, and vulnerability remediation.
• Support CMMC 2.0 Level 2+ readiness, including NIST 800 171/172 control implementation, SSP/POA&M management, and audit support.
• Architect and operate security capabilities within Microsoft GCC High and Azure Government, including Defender, Sentinel, Purview, and Entra ID.
• Provide senior level guidance during security incidents, investigations, and post incident remediation.
• Translate regulatory and business requirements into scalable security roadmaps and standards.
• Serve as a trusted advisor to engineering, IT, and leadership teams, mentor security professionals.
• Meets TKMNA Employee Attributes / Competencies

The above is intended to describe the general content of and requirement for the performance of this job. It is not to be construed as an exhaustive statement of duties, responsibilities or requirements.

Qualifications:

• Bachelor's degree or equivalent professional experience required, Master's degree preferred.
• 7+ years of experience in information security, including hands‑on security architecture or application security experience.
• Strong experience securing Microsoft 365 GCC‑High and Azure Government environments.
• Demonstrated expertise with cloud security, identity and access management, application security, and incident response.
• Experience supporting regulated environments (CMMC, ITAR, DFARS, or similar).

Certifications

• All relevant security and cloud certifications preferred, including CISSP, CCSP, CISM, GIAC, and Microsoft security certifications.

Skills

• Application Security: Threat modeling, SAST/DAST/SCA, API and container security
• Monitoring & Response: Microsoft Sentinel, Defender XDR, automation and incident response