Senior Zero Trust Architect — Cloud & Identity Security

Initial Therapeutics, Inc.

New Jersey

On-site

USD 111,000 - 145,000

Full time

6 days ago

Be an early applicant

Application generator

Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Legend Biotech in Bridgewater, NJ or Somerset, NJ seeks a Senior Zero Trust Architect/Engineer to design, implement, and govern the organization's Zero Trust security strategy across users, devices, applications, networks, data, and cloud environments. The role collaborates with Infrastructure, Cloud, Compliance, and Cybersecurity teams to align security controls with business objectives.

The ideal candidate will have in-depth expertise in identity security, network security, cloud security,

Qualifications

Bachelor’s degree in cybersecurity or related field; Master’s preferred.
10+ years in IT infrastructure, cybersecurity, or security engineering.
5+ years designing enterprise security architectures.
3+ years leading Zero Trust initiatives or identity modernization programs.
Experience in regulated industries preferred.
Proven expertise in Microsoft Entra ID, ADDS, and Conditional Access.
Experience with ZIA, ZPA for Zero Trust.
Ability to translate regulatory requirements into technical controls.
Strong executive communication and leadership.

Responsibilities

Develop and maintain the enterprise Zero Trust architecture roadmap.
Design security architectures based on NIST Zero Trust Architecture (SP 800-207), CISA Zero Trust Maturity Model.
Lead enterprise‑wide Zero Trust transformation across cloud, on‑premises, and hybrid environments.
Define security reference architectures, standards, policies, and design principles.
Conduct architecture reviews and guidance for new technology deployments.
Architect micro‑segmentation and software‑defined perimeter solutions.
Design secure access controls for corporate networks, data centers, cloud environments, and third‑party connectivity.
Implement Zero Trust Network Access (ZTNA) technologies and reduce VPN reliance.
Lead network access policy modernization initiatives.
Design and implement security architectures across Microsoft Azure and AWS.
Collaborate with cloud engineering to establish secure landing zones.
Implement cloud‑native security controls and posture management.
Evaluate and improve cloud identity and access security.
Lead implementation of Zero Trust security technologies and integrations.
Establish security monitoring and continuous verification capabilities.
Support incident response and threat hunting activities.
Identify gaps and remediation opportunities through assessments.
Develop automation and orchestration to improve security operations.
Translate regulatory requirements into technical controls.
Participate in risk assessments and security audits.
Develop KPIs to measure Zero Trust maturity and effectiveness.
Present architecture recommendations and risk findings to senior leadership.
Strong executive communication and ability to influence stakeholders.