Senior Security Architect

Kellton; Boston (MA); Hybrid; USD 170,000 - 230,000; Full time

Job summary

Kellton in Boston seeks a senior security architect for an 18-month SOW focused on a Workday SaaS transformation. You will design and lead security across infrastructure, applications, IAM, authentication, and data protection.

You will drive SSO, IAM, MFA, PAM, provisioning, Workday security, and vendor access while overseeing SIEM, audits, DR/BCP, incident response and testing; ensure compliance with major frameworks.

Qualifications

• 9+ years IT design and implementation experience with security focus.
• 5+ years security architecture design and implementation.
• Bachelor's degree in CS, Systems Analysis or related field.
• Security certifications such as Security+ or CISSP.

Responsibilities

• Lead security architecture for BEST Workday SaaS transformation.
• Own infrastructure, application, IAM, authentication, and data security architecture.
• Lead SSO, IAM, MFA, PAM, provisioning, Workday security, and vendor access.
• Oversee SIEM, security SLAs, audits, DR/BCP, incident response, tabletop testing.
• Ensure compliance with NIST, ISO 27001, SOX, COBIT, COSO, PCI, FERPA, GLBA.
• Manage security risks, vulnerabilities, controls, remediation, policies, and standards.
• Strong experience with large SaaS migrations, integrations, data exchange, and enterprise security.

Skills

IT design

Security architecture

SaaS migrations

Workday security

IAM

SIEM

Education

Bachelor's degree in CS, Systems Analysis or related field

Tools

Security+

CISSP

Job description

Location: Boston, MA – Hybrid, 4 days/month onsite; local candidates only.

Contract: 18 (Months); initial SOW through 06/30/2027.

Experience: 9+ years IT design/implementation, including 5+ years security architecture.

Education: Bachelor’s in CS, Systems Analysis, or related/equivalent experience.

Certification: Security certification required (Security+, CISSP, or equivalent).

Lead security architecture for the client’s BEST Workday SaaS transformation.

Own infrastructure, application, IAM, authentication, and data security architecture.

Lead SSO, IAM, MFA, PAM, provisioning, Workday security, and vendor access.

Oversee SIEM, security SLAs, audits, DR/BCP, incident response, and tabletop testing.

Ensure compliance with NIST, ISO 27001, SOX, COBIT, COSO, PCI, FERPA, and GLBA.

Manage security risks, vulnerabilities, controls, remediation, policies, and standards.

Strong experience with large SaaS migrations, integrations, data exchange, and enterprise security.

• Bachelor's degree in CS, Systems Analysis or related field, or equivalent experience in audit compliance and security risk management
• 9+ years of IT design and implementation experience, with deep knowledge in atleast two of: infrastructure/network design, application development, APIs, middleware, servers and storage, database management, data security, systemadministration and operations
• 5+ years of security architecture design and implementation, with securitycertifications such as CompTIA Security+
• Experience producing security materials: compliance documentation, security operationalprocedures, implementation plans, network and security diagrams