Security Architect (IAM + network security experience) C2c roles Boston, MA

Tech Mirrors; Boston (MA); On-site; USD 140,000 - 190,000; Full time

Job summary

Tech Mirrors in Boston, MA is seeking a Senior Security Architect to design, implement, and manage enterprise security across network, cloud, and application environments. You will lead IAM, SSO, MFA deployments and enforce secure authentication practices, alignment with governance and audit requirements.

You will partner with infrastructure and development teams, apply NIST/ISO standards, oversee threat modeling, security reviews, and SDLC integration in AWS/Azure and on‑prem environments.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 8+ years in cybersecurity, network security, or security architecture.
• Deep expertise in IAM, SSO, MFA, and cloud security.

Responsibilities

• Design and implement enterprise IAM, including SSO, federation, and MFA.
• Define secure network architectures with DMZ, segmentation, and Zero Trust.
• Develop security architecture standards aligned with NIST, CIS, ISO 27001.
• Integrate security controls into SDLC and DevSecOps in cloud/on‑prem.
• Collaborate with SOC for monitoring, incident response, and vulnerability programs.

Skills

IAM design

SSO

MFA

Active Directory / LDAP

RBAC

Privileged access management

Zero Trust

Cloud security

Threat modeling

DevSecOps

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field

Tools

SAML

OAuth 2.0

OpenID Connect

LDAP/AD

Firewalls

VPNs

AWS

Azure

Job description

Position:Senior Security Architect

Location:Boston, MA (Onsite)

Contract:6-12+ Months

Position Summary

We are seeking an experienced Security Architect to design, implement, and manage enterprise security solutions across network, cloud, application, and infrastructure environments. The ideal candidate will possess deep expertise in Identity and Access Management (IAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), network security, DMZ architecture, and cybersecurity standards. The role requires collaboration with application, network, cloud, and infrastructure teams to ensure security best practices are embedded throughout the technology lifecycle.

Key Responsibilities

Identity & Access Management

• Design and implement enterprise IAM solutions, including SSO, federation, and MFA.
• Integrate applications with SAML, OAuth 2.0, OpenID Connect, and LDAP/Active Directory.
• Manage role-based access control (RBAC) and privileged access management.
• Ensure compliance with enterprise IAM and authentication standards.

Network & DMZ Security

• Design secure network architectures, including DMZ, internal, external, and cloud security zones.
• Implement network segmentation, firewall policies, and Zero Trust security controls.
• Review and approve network connectivity requirements across trust boundaries.
• Work with networking teams to secure internet-facing applications and services.

Security Architecture & Standards

• Define and enforce security standards, policies, and technical controls.
• Ensure compliance with industry frameworks such as NIST, CIS, ISO 27001, and enterprise cybersecurity standards.
• Conduct security design reviews and threat modeling exercises.
• Develop secure architecture patterns for cloud and on-premises platforms

Application & Cloud Security

• Integrate security controls into the SDLC and DevSecOps pipelines.
• Implement secure authentication and authorization mechanisms.
• Review application architectures for vulnerabilities and security risks.
• Support cloud security initiatives across AWS, Azure, and hybrid environments.

Security Monitoring & Incident Response

• Collaborate with SOC and cybersecurity teams on security monitoring and incident response.
• Define logging, monitoring, and alerting requirements.
• Support vulnerability management, penetration testing, and remediation programs.

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 8+ years of experience in cybersecurity, network security, or security architecture.
• Strong experience with:
• SSO (SAML, OAuth, OpenID Connect)
• MFA solutions
• Active Directory / LDAP
• Firewall technologies
• DMZ architecture
• Network segmentation
• VPNs and secure remote access
• TCP/IP, DNS, Routing and Switching
• Cloud Security (AWS/Azure)