Senior Security Architect (Pre-Sales) – Hybrid Cloud

The Redesign Group; United States; On-site; USD 160,000 - 230,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) plan with a 4% employer match (

annual dollar cap applied)

Flexible time off plan

15 paid holidays

Sick leave (state-dependent)

Short-term and long-term disability

Life insurance

Paid parental leave

Job summary

The Redesign Group is seeking a highly technical Security Solutions Architect who brings deep hands-on implementation experience across enterprise security domains. You will lead architecture in pre-sales engagements, validate security designs, and translate operational realities into scalable, defensible strategies across hybrid infrastructure, cloud, and identity environments.

Candidates must live on the West Coast and participate in regular in-person meetings with the sales team and clients

Qualifications

• 10+ years of hands-on cybersecurity engineering and architecture experience.
• Experience integrating multiple vendor platforms into a unified detection, prevention, and response architecture.
• Proven experience designing and operating enterprise-scale security environments.
• Strong understanding of network protocols, identity systems, cloud architectures, and threat models.
• Experience in detection engineering, log analysis, and incident response workflows.
• Background supporting regulated enterprise environments.
• Ability to communicate technical trade-offs clearly to both technical and executive stakeholders.

Responsibilities

• Design layered, defense-in-depth architectures across hybrid, multi-cloud, and on-prem environments.
• Lead technical discovery and perform detailed security posture assessments.
• Develop phased remediation and modernization roadmaps aligned to enterprise risk.
• Architect Zero Trust-aligned frameworks spanning identity, endpoint, network, and cloud.
• Integrate SAST, DAST, SCA, and RASP into CI/CD pipelines.
• Architect secure SDLC frameworks and DevSecOps controls.
• Design WAF and API protection strategies.
• Advise on container security, image scanning, and Kubernetes hardening.
• Architect CSPM, CASB, and cloud workload protection solutions.
• Design secure hybrid connectivity models (SASE, NGFW, segmentation, NAC).
• Implement Infrastructure-as-Code (IaC) security controls.
• Secure containerized and serverless environments.
• Align architecture with Azure, AWS, and multi-cloud security best practices.
• Architect enterprise IAM, IGA, PAM, and CIAM solutions.
• Design conditional access, MFA, and identity protection strategies.
• Implement least-privilege and role-based access control models.
• Integrate identity telemetry into broader detection and response ecosystems.
• Design EPP, EDR/XDR, and MDR integrations.
• Architect SIEM and SOAR platforms for centralized logging and automated response.
• Develop detection engineering strategies and use-case tuning.
• Integrate threat intelligence platforms (TIPs) into SOC workflows.
• Support incident response program development and playbook design.
• Implement enterprise DLP and data classification programs.
• Design encryption, key management, and secure collaboration controls.
• Architect phishing protection, SEG, DMARC enforcement, and anomaly detection.
• Align architectures to frameworks such as NIST, ISO, CIS, and SOC 2.
• Conduct vulnerability management program design and risk prioritization.
• Support regulatory requirements across healthcare, financial, and global environments.
• Implement third-party risk management (TPRM) controls.
• CrowdStrike, SentinelOne as hands-on platforms.
• Microsoft Security (Defender, Sentinel, Entra).
• Rapid7, Tenable, Qualys.
• Palo Alto Networks.
• Arctic Wolf.
• Zscaler, Netskope.
• Proofpoint, Abnormal.
• KnowBe4.
• Darktrace.
• Okta.

Skills

Security Architecture

Threat Modeling

Zero Trust

Hybrid Cloud Security

DevSecOps

IAM & PAM

Executive Communication

Education

CISSP

CISM

CCSP

GIAC Certifications

Tools

CrowdStrike

SentinelOne

Microsoft Defender

Palo Alto Networks

Zscaler

Nessus/Tenable

Job description

The Redesign Group is seeking a highly technical Security Solutions Architect who brings deep hands-on implementation experience across enterprise security domains. You will lead architecture in pre-sales engagements, validate security designs, and translate operational realities into scalable, defensible strategies across hybrid infrastructure, cloud, and identity environments.

Candidates must live on the West Coast and participate in regular in-person meetings with the sales team and clients