Security Architect

Role overview

Key responsibilities

• Define and maintain security architecture frameworks, standards, reference architectures, and design principles using TOGAF or SABSA.
• Review and approve security designs, HLDs, LLDs, solution architectures, technical proposals, and documentation.
• Apply security-by-design and security-by-default principles to technology initiatives.
• Conduct architecture reviews, threat modeling, risk assessments, and design evaluations.
• Assess and improve platforms, applications, infrastructure, and security controls.
• Design and review architectures across IAM, network, cloud, endpoint, email, and SIEM/SOAR platforms.
• Evaluate Azure, hybrid cloud, multi-cloud, and VMware environments for secure implementation.
• Identify security gaps, recommend remediation, and support security improvement initiatives.
• Support audits by maintaining architecture documentation, controls, and evidence.
• Guide architects, engineering teams, and business stakeholders on secure technology decisions.

Required skills and experience

• 10–12 years of experience in cybersecurity architecture, enterprise security design, or security consulting.
• TOGAF and/or SABSA certification.
• Strong understanding of enterprise security architecture, Zero Trust, and security-by-design.
• Experience with IAM platforms including SailPoint, IBM IAM, Imprivata, SSO, MFA, PAM, and access governance.
• Experience with network security platforms including Fortinet, Palo Alto Networks, Cisco ASA, VPN technologies, and network segmentation.
• Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Intune, Microsoft Purview, and Defender XDR.
• Experience with endpoint and email security solutions including Microsoft Defender for Endpoint, Proofpoint, Trend Micro, and Exchange Online Protection.
• Experience preparing HLDs, LLDs, security architecture diagrams, technical designs, and recommendations.
• Strong knowledge of threat modeling, risk assessment, security controls, and architecture governance.
• Experience evaluating solutions across hybrid and multi-cloud environments.

Preferred skills

• CISSP, CCSP, or Azure Security certification.
• Experience with VMware security architecture.
• Knowledge of ISO 27001, NIST, SOC 2, or PCI-DSS.
• Experience with SIEM/SOAR integration and security operations processes.
• Exposure to DevSecOps and secure software development lifecycle practices.
• Strong communication, documentation, presentation, and stakeholder management skills.