Security Architect

Servers.com by Nexcess; United States; Hybrid; USD 145,000 - 160,000; Full time

Job summary

Liquid Web Inc. in the United States is seeking an Information Security Architect to design, implement, and continually improve security architecture across infrastructure, cloud platforms, hosting environments, applications, and operations.

This role provides technical leadership to ensure controls, standards, and practices align with business objectives and regulatory requirements, while partnering with Infrastructure, Platform Engineering, Development, Compliance, and Operations to deliver

Qualifications

• 5+ years in Information Security, Infrastructure/Cloud/Systems engineering or related field.
• 3+ years designing or supporting enterprise security architecture and controls.
• Bachelor’s degree or equivalent practical experience in a related field.
• Strong understanding of security architecture methodologies and risk management.
• Experience with cloud infrastructure platforms and compliance frameworks.

Responsibilities

• Design and maintain enterprise security architecture standards across cloud, infrastructure, network, application, and hosting environments.
• Develop secure reference architectures, baselines, and operational security standards.
• Evaluate security technologies and controls to improve posture.
• Partner with cross-functional teams to ensure secure design and implementation.
• Support PCI-DSS, SOC, ISO, and other audits and compliance activities.
• Lead threat modeling, vulnerability management, and incident response activities.
• Mentor teams on secure architecture principles and best practices.

Skills

Information security

Cloud security

Security architecture

Vulnerability management

Identity and access management

Networking fundamentals

Threat modeling

Security governance

Communication skills

SIEM/EDR familiarity

Education

Bachelor’s degree in Information Security, CS, IT

Tools

SIEM systems

EDR tools

Vulnerability scanners

Security monitoring platforms

Kubernetes

Job description

Nexcess provides specialty cloud solutions for organizations where performance and compliance have to coexist. We serve businesses worldwide, from agencies scaling client sites to enterprises running mission-critical operations. We've built our reputation on deep technical expertise and genuine partnership with every client we work with. Behind every environment we manage is a team of people who take the craft seriously and keep showing up when it matters.

Overview

The Information Security Architect is responsible for designing, implementing, and continuously improving the organization’s security architecture across infrastructure, cloud platforms, hosting environments, applications, and operational systems. This role provides technical leadership and strategic guidance to ensure security controls, standards, and practices align with business objectives, regulatory requirements, and operational risk management goals.

The Security Architect partners closely with Infrastructure, Platform Engineering, Development, Compliance, and Operations teams to design scalable and secure solutions while strengthening the organization’s overall security posture. This position plays a critical role in evaluating risk, developing security standards, supporting compliance initiatives, and guiding secure operational and engineering practices across complex hosting and cloud environments.

This role requires deep technical expertise, strong analytical skills, and the ability to communicate security concepts effectively to both technical and non-technical stakeholders.

Compensation: The compensation range for this role is between $145k-$160k

Responsibilities

• Design and maintain enterprise security architecture standards across cloud, infrastructure, network, application, and hosting environments
• Develop secure reference architectures, security baselines, and operational security standards
• Evaluate and recommend security technologies, tools, and controls to improve organizational security posture
• Partner with Infrastructure, Engineering, and Platform teams to ensure secure system design and implementation practices
• Review infrastructure, network, and application designs for security risks, vulnerabilities, and compliance alignment
• Assist with the development and implementation of identity and access management (IAM), segmentation, hardening, encryption, and monitoring strategies
• Support secure cloud adoption and infrastructure modernization initiatives
• Provide technical guidance on security controls for production systems, customer environments, and internal platforms
• Identify, assess, and document security risks across systems, applications, infrastructure, and operational processes
• Partner with Compliance and Governance teams to support PCI-DSS, SOC, ISO, customer audits, and other security-related assessments
• Assist in developing and maintaining security policies, standards, procedures, and technical controls
• Participate in security reviews, risk assessments, vulnerability management, and remediation planning activities
• Support operational maturity initiatives related to governance, access management, logging, monitoring, and security controls
• Evaluate exceptions to security standards and provide documented risk recommendations
• Support incident response activities involving infrastructure, access, operational security, and customer-impacting events
• Assist with threat modeling, security investigations, forensic analysis coordination, and root cause reviews as needed
• Provide guidance on vulnerability remediation priorities and risk mitigation strategies
• Collaborate with operational teams to strengthen monitoring, detection, alerting, and defensive security capabilities
• Participate in security awareness initiatives and promote security best practices throughout the organization
• Serve as a subject matter expert on infrastructure and operational security practices
• Partner cross-functionally with Engineering, Infrastructure, Security Operations, Compliance, and Leadership teams
• Communicate technical risks and recommendations clearly to both technical and business stakeholders
• Mentor technical teams on secure architecture principles and security best practices
• Stay current on emerging threats, vulnerabilities, industry trends, and evolving security technologies
• Additional duties as assigned

Requirements

• 5+ years of experience in Information Security, Infrastructure Engineering, Cloud Engineering, Systems Engineering, or related technical fields
• 3+ years of experience designing or supporting enterprise security architecture and security controls
• Bachelor’s Degree in Information Security, Computer Science, Information Technology, or related field, or equivalent practical experience
• Strong understanding of infrastructure security principles including networking, systems hardening, identity management, access control, encryption, logging, and monitoring
• Experience working with cloud infrastructure platforms and virtualization technologies
• Experience supporting security compliance frameworks such as PCI-DSS, SOC, ISO 27001, CIS, or NIST
• Strong knowledge of security architecture methodologies, operational risk management, and secure system design
• Experience with vulnerability management, remediation coordination, and security assessment processes
• Excellent analytical, organizational, and problem-solving skills
• Strong written and verbal communication skills
• Ability to manage multiple priorities in a fast-paced operational environment
• Deep working knowledge of LAMP stack environments

Preferred Qualifications

• Professional security certifications such as CISSP, CCSP, CISM, Security+, or equivalent
• Experience working within hosting, cloud infrastructure, managed services, SaaS, or enterprise operations environments
• Experience with identity and access management (IAM), SSO, MFA, and privileged access management solutions
• Familiarity with containerization, Kubernetes, infrastructure-as-code, and DevSecOps practices
• Experience with SIEM, EDR, vulnerability scanning, and security monitoring platforms

The physical demands described here are representative of those that must be met by an individual to successfully perform the essential duties of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties.

• While performing the essential duties of this job, the individual is regularly required to speak and hear
• While performing the essential duties of this job, the individual is regularly required to use hands for keyboarding, gross manipulation, and fine manipulation
• Works at a desk and computer screen for extended periods of time
• Works in a traditional climate controlled office environment or from home
• Works in a highly stressful environment dealing with a wide variety of challenges, deadlines and diverse employee population

Disclaimer

This job description is only a summary of the typical functions of the position. It is not intended to be an exhaustive or comprehensive list of all job responsibilities, tasks, or duties. Additional duties and tasks may be assigned as part of the job function. Liquid Web Inc. reserves the right to modify, interpret, or apply this job description in a way that best supports the organizational needs. The job description in no way creates or implies an employment contract. The employment contract remains “at will”.

Equal Employment Opportunity Policy

Equal Employment Opportunity Policy: Liquid Web is committed to offering equal employment opportunity without regard to age, color, disability, gender, gender identity, genetic information, marital status, military status, national origin, race, religion, sexual orientation, veteran status, or any other legally protected characteristic.