Senior Cybersecurity Architect (onsite)

Vitaver & Associates, Inc; Juno Beach (FL); On-site; USD 150,000 - 190,000; Full time

Job summary

Vitaver & Associates, Inc. is seeking a Senior Cybersecurity Architect to work onsite at the client site in Juno Beach, FL. This contract role requires 100% on-site presence with no remote work and relocation as needed.

You will independently lead cybersecurity architecture reviews, analyze architectures and data flows, perform threat modeling, and define practical security controls and mitigations. The position emphasizes defensive architecture, regulatory compliance, and working with

Qualifications

• Experience with cybersecurity architecture in large enterprises.
• Ability to design cloud security architectures (IAM, networking, data protection, encryption).
• Familiarity with NIST CSF, NIST 800-53, ISO/IEC 27001 and regulatory considerations.
• Proven ability to lead architecture reviews independently.
• Willingness to relocate to Juno Beach, FL.

Responsibilities

• Independently lead cybersecurity architecture reviews for complex projects and environments.
• Analyze solution architectures, data flows, trust boundaries, and security controls.
• Perform threat modeling to identify attack paths and risk implications.
• Define required security controls and practical mitigation strategies.
• Produce risk documentation with exposure, impact, and residual risk.
• Assess internet-facing technologies, APIs, and external attack surfaces.

Skills

Cybersecurity architecture

Cloud security

Threat modeling

Network security

Regulatory compliance

ISO 27001

Education

Bachelor's degree

Job description

14970 - Senior Cybersecurity Architect (Onsite) - Juno Beach, FL

Start Date: ASAP
Type: Temporary Project
Estimated Duration: 12+ months with possible extensions
Work Setting: 100% of the time at the Client's site. No telecommuting or remote work. This is a non-negotiable requirement from the client.
Only candidates able to relocate as required should apply to avoid removal from future consideration.
Our client is filling this contract position exclusively through approved staffing partners, so this opportunity is not available by applying directly with the client.

Required

• Availability to work 100% of the time at the Client's site in Juno Beach, FL (required).
• Experience with Cybersecurity architecture, solution security, or technology risk assessments in large and complex enterprise environments.
• Experience with Cybersecurity architecture principles across diverse technology environments.
• Experience with Cloud security architecture including IAM, networking, data protection, workload security, logging/monitoring, encryption, and shared-responsibility models (AWS, Azure, and/or GCP).
• Experience with Network and infrastructure security including segmentation, firewalls, Web Application Firewalls (WAF), proxies, Domain Name System (DNS), load balancers, certificates, encryption, remote access, and secure connectivity.
• Experience with Application security including authentication and authorization, Application Programming Interfaces (API), web application security, secrets management, secure design patterns, Open Worldwide Application Security Project (OWASP) risks, and third-party integrations.
• Experience with Identity and Access Management (IAM) including Single Sign-On (SSO), federation, Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), privileged access, service/workload identities, and least privilege.
• Experience with Data security and privacy architecture including data classification, encryption, key management, tokenization, and Data Loss Prevention (DLP).
• Experience with Threat modeling to identify attack surfaces, trust boundaries, realistic threat scenarios, and potential attack paths.
• Experience with Interpreting vulnerability assessments, penetration-test findings, and vendor-provided security assessment results for architecture risk relevance.
• Experience with Evaluating third-party/vendor technologies and challenging vendor security assertions.
• Experience with Cybersecurity frameworks and standards including NIST CSF, NIST SP 800-53, NERC CIP, and ISO/IEC 27001.
• Experience with Regulatory and compliance considerations.
• Experience with Developing concise and defensible cybersecurity risk statements.

Preferred

• Experience with Cybersecurity architecture assessments within a Fortune 500 or similarly large, complex enterprise.
• Experience with Multiple cloud environments such as AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Experience with Operational Technology/Industrial Control Systems (OT/ICS) cybersecurity environments.
• Experience with Emerging AI/GenAI security risks and considerations.
• Experience with Contributing to cybersecurity reference architectures, reusable security patterns, technical standards, or architecture guidance.
• Experience with Utility, critical infrastructure, or other highly regulated environment.
• CISSP, CCSP, Comparable cybersecurity/cloud/architecture certifications.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline (equivalent relevant professional experience will be considered).

Responsibilities

• Independently lead cybersecurity architecture reviews for complex projects, platforms, applications, infrastructure, cloud services, SaaS platforms, vendor solutions, APIs, and enterprise integrations.
• Analyze solution architectures, network and data flows, trust boundaries, authentication models, integrations, external connectivity, and security controls.
• Perform threat modeling to identify realistic threat scenarios, attack paths, trust-boundary concerns, and potential security weaknesses.
• Identify cybersecurity risks and assign appropriate risk ratings using established enterprise risk methodologies combined with senior-level professional judgment.
• Define required and recommended security controls and practical mitigation strategies based on identified risk.
• Produce concise, defensible risk documentation identifying exposure, potential impact, risk rating, mitigation requirements, and residual risk.
• Assess internet-facing technologies and external attack surfaces, including web applications, APIs, exposed services, authentication mechanisms, WAFs, DDoS protections, DNS, certificates, and ingress architectures.

Why apply?

• Gain experience with one of the world's largest solar and wind energy providers, which last year briefly became the most valued U.S. energy company.
• Work with a great team of professionals and learn newest technologies and approaches.
• Enjoy our Client's wonderful campus with top-notch facilities for work and recreation.
• Benefit from multiple projects extensions.
• Receive support and advice from Vitaver consultants who are already working at our Client's site.
• Get extra cash by participating in Vitaver Successful Completion Bonus Program.
• Always get paid in full and on time.