Security Architect

Security Architect 

12 Months contract  .  After Contract to Hire

Location : @  Newark , NJ /  (Open to remote work) / hybrid model 

MUST HAVE :

• IAM (Identity and Access Management)
• OAuth 2.0 for authentication
• As a solution architect, when designing a security architecture, which authentication, or authorization flow
• API security
• Have you worked with Public Key Infrastructure (PKI)
• application type, whether it’s a 3-tier application, cloud application
• SAML
• Threat modeling, IAM
• Security Architecture, look for 10-15 years of exp.

Job description:

Overview

• The Senior Cybersecurity Architect will play a vital role in designing, implementing, and managing secure, scalable, and resilient cybersecurity architectures within the organization.
• The individuals in this position will collaborate with cross-functional teams, including IT, DevOps, Infrastructure, and Product Development, to develop comprehensive security strategies, identify potential risks, and establish best practices for securing applications, networks, and cloud environments.
• This role requires extensive expertise in cybersecurity, network architecture, and cloud architecture, along with a solid understanding of current and emerging threats.
• The Senior Cybersecurity Architect is essential for enhancing our security posture and ensuring that all cybersecurity initiatives align with industry standards, regulations, and business objectives.

Major Responsibilities

• Develop and maintain the security framework, aligning with industry standards to ensure the organization''''s security posture is up-to-date and effective.
• Design and implement network security protocols and ensure network segmentation to isolate critical systems and prevent unauthorized access.
• Conduct security assessments/threat modeling and implement mitigation strategies to identify vulnerabilities, evaluate their impact, and execute solutions to reduce risks.
• Evaluate and recommend security tools, staying updated on trends to enhance the organization''''s security infrastructure with cutting-edge solutions.
• Design secure cloud architectures and oversee container security, ensuring cloud deployments follow security best practices and protecting containerized workloads.
• Develop data security policies, including encryption and access control, to protect sensitive data at rest and in transit, ensuring confidentiality and integrity.
• Integrate security throughout the SDLC and conduct security reviews to identify and address vulnerabilities early in the development process.
• Collaborate with stakeholders and communicate risks clearly, ensuring everyone understands the impact and importance of security measures.
• Develop and maintain the security framework, aligning with industry standards to ensure the organization''''s security posture is up-to-date and effective.
• Design and implement network security protocols and ensure network segmentation to isolate critical systems and prevent unauthorized access.

Qualifications

• Prefers BA/BS degree from an accredited college or university in Information Security, Computer Science, Information Management Systems, or in related field.
• 8+ years of professional business experience in IT and/or Information Security
• Requires a minimum of 4 years of experience in product/application security, enterprise security architecture, and/or threat modeling or architecture risk analysis.

Knowledge:

• Strong understanding of enterprise architecture frameworks and Zero Trust architecture principles. 
• Strong understating threat modeling and security architecture review concepts.
• Advanced knowledge of cybersecurity technologies, including IAM, DLP, encryption, micro-segmentation, and advanced analytics tools. 
• Understanding of AI/ML Security, LLM, threat modeling frameworks. 
• Proven experience with modern security architectures, including Zero Trust, identity and access management (IAM), and microservices security. 
• Knowledge of common vulnerabilities in the OWASP. 
• Deep expertise in securing multi-cloud environments (e.g., AWS, Azure, Google Cloud Platform), DevSecops, CI/CD Security,  and Container security.