Senior Cyber Security Architect - Hybrid, Cloud & IAM

SIDRAM TECHNOLOGIES; New York (NY); Hybrid; USD 170,000 - 230,000; Full time

Job summary

Altimetrik / S&P Global is seeking a highly experienced Cyber Security Architect to define and maintain enterprise cybersecurity strategy, security architecture, controls, standards, and governance across applications, networks, cloud, APIs, data platforms, and infrastructure.

The ideal candidate will have strong expertise across Cloud Security, IAM, Network Security, Application Security, DevSecOps, Threat Modeling, Security Operations, and Cybersecurity Governance.

Qualifications

• 15+ years of IT/Cybersecurity experience
• 3+ years designing and reviewing enterprise security architectures
• Strong knowledge of Network Security, Application Security, Cloud Security, IAM, Cryptography, and Security Operations
• Experience with threat modeling methodologies such as STRIDE or MITRE ATT&CK
• Understanding of Zero Trust, least privilege, defense in depth, and secure-by-design principles

Responsibilities

• Define and maintain cybersecurity strategy, principles, standards, and reference architectures
• Design secure architectures across enterprise applications, networks, cloud, APIs, data, and infrastructure
• Conduct threat modeling, attack-surface analysis, risk assessments, and architecture reviews
• Define defense-in-depth, IAM, network, endpoint, application, data, and cloud security controls
• Design and govern SSO, MFA, RBAC, ABAC, PAM, and Zero Trust solutions
• Review solution designs, IaC, and implementation plans for security compliance
• Guide engineering teams on Secure SDLC, secure coding, DevSecOps, and security testing
• Define requirements for WAF, VPN, IDS/IPS, SIEM, EDR, DLP, secrets management, and endpoint security
• Develop security architectures for AWS, Azure, and GCP environments
• Establish security logging, monitoring, detection, alerting, and incident-response requirements
• Support vulnerability assessments, penetration testing, remediation, and incident response
• Evaluate security technologies, products, vendors, and managed security services
• Maintain security architecture documentation, standards, diagrams, risk registers, and control mappings
• Support ISO 27001, SOC 2, PCI DSS, GDPR, HIPAA, and other compliance initiatives

Skills

Network Security

Application Security

Cloud Security

IAM

Cryptography

Security Operations

Threat Modeling

Zero Trust

DevSecOps

Secure SDLC

Tools

AWS

Azure

GCP

Kubernetes

Docker

Terraform

Job description

Altimetrik / S&P Global is seeking a highly experienced Cyber Security Architect to define and maintain enterprise cybersecurity strategy, security architecture, controls, standards, and governance across applications, networks, cloud, APIs, data platforms, and infrastructure.

The ideal candidate will have strong expertise across Cloud Security, IAM, Network Security, Application Security, DevSecOps, Threat Modeling, Security Operations, and Cybersecurity Governance.