Job Details

Job Title: Security Architect

100% Remote

12 Months Contract

Key Responsibilities/Duties:

• Focused specifically on IRAM (private cloud), server and AD migrations, and secure configurations in conjunction with client Security Standards and Industry Best Practices.
• Document architecture and process flows and patterns.
• Collaborate with Security Enterprise Architects, Security Engineering, and GRC teams.
• Conduct security assessments and vulnerability testing.
• Conduct Risk Assessment to ensure alignment with company requirements and industry good practice.
• Document and raise risks as they are found.
• Assess and aid with Disaster Recovery architecture.
• Hands on keyboard working on Delenia, Entra, and various PowerShell scripts.
• Provide technical guidance and support to IT and security teams.
• Develop and deliver training and documentation for security practices.
• Collaborate with stakeholders to ensure security requirements are met.
• Stay up to date with the latest security trends and technologies.
• Participate in incident response and forensic investigations.

Qualifications:

Relevant certifications (e.g., CISSP, CISM) are a plus.

Application Architecture (COTS, Web applications, APIs, etc.) a plus.

Understanding of certificates (particularly TLS) and PKI.

Bachelor's degree in information technology, Computer Science, or a related field.

Experience

• Senior position (~10 years' experience in a related discipline, CISSP / CCSP preferred).
• 5+ years of experience in IT security.
• Secrets Management (Delinea Secrets Server experience preferred)
• Preferred Agile methodologies (Scrum and Kanban).
• Strong understanding of security best practices and industry standards.
• Experience with training and documentation development.
• Windows Server administration and security experience.
• Linux (specifically Redhat RHEL) security experience preferred.
• Active Directory / Entra security including understanding of authentication, authorization, principle of least privilege, group policy, password policies, tiering (tier 0, 1, 2) etc.
• Azure Cloud, SailPoint, HPE Greenlake, RedHat OpenShift, and VXLAN experience a plus.
• Experience with zero trust network architectures.