Information Security Architect

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Information Security Architect based in United States.

The Information Security Architect will play a key role in strengthening secure architecture and technology governance across a complex enterprise environment.

This hands-on position will guide the secure design, implementation, and management of applications and systems across multiple IT domains.

You will work closely with engineering, DevOps, cloud, infrastructure, networking, data, and security teams to embed security throughout the software development lifecycle.

The role combines cloud security architecture, application security, threat modeling, DevSecOps, and enterprise risk management.

You will help shape secure, resilient, and scalable solutions across modern cloud environments, including AWS and Azure.

As a trusted technical advisor, you will translate security requirements and regulatory expectations into practical architecture and engineering guidance.

This is an opportunity to influence security maturity at an enterprise level while solving complex technical challenges and enabling secure innovation.

Accountabilities:

• Establish and enforce secure software development standards, cloud security practices, and architectural security guidelines across enterprise technology environments.
• Lead the security lifecycle for applications and technologies by evaluating emerging technologies, evolving threats, industry trends, and end-of-life governance requirements.
• Contribute to and mature the Architectural Review Board by applying security-focused principles to architecture reviews across all IT domains.
• Review application architecture documentation, diagrams, technical designs, and operational runbooks to identify security risks and opportunities for improvement.
• Partner with engineering and DevOps teams to integrate security governance, controls, and best practices into CI/CD pipelines and development workflows.
• Conduct architecture risk assessments, threat modeling exercises, and secure design reviews for new and existing applications.
• Develop security reference architectures, reusable design patterns, technical standards, and best practices for cloud-native and enterprise applications.
• Lead application security initiatives covering SAST, DAST, software composition analysis, Infrastructure as Code scanning, container security, and API security.
• Work closely with enterprise architecture leadership to ensure security architecture, governance, and technical guidance are consistently implemented across IT domains.
• Assess cloud services, platforms, and third-party technologies for security risks, architectural weaknesses, and compliance requirements.
• Collaborate with security operations, infrastructure, compliance, engineering, networking, cloud, and data teams to investigate and remediate security findings.
• Serve as a trusted security advisor to technical teams, helping them design resilient applications and infrastructure that meet business, security, and regulatory requirements.
• Ensure cloud-based applications and systems align with relevant security policies and regulatory frameworks, including PCI DSS, HIPAA, SOC 2, ISO 27001, NIST, and GDPR.
• Provide technical leadership, guidance, and mentorship to development and engineering teams on secure coding, cloud security, and application security practices.
• Contribute to additional security architecture, governance, and technology initiatives as required by the organization.

Requirements:

• Bachelor’s degree in Computer Science, Business, Information Technology, or a related discipline, or equivalent professional experience.
• 7+ years of experience securing enterprise environments across on-premises, hybrid, and cloud infrastructures.
• Strong knowledge of secure software development lifecycles and DevSecOps methodologies, with the ability to embed security throughout development and delivery processes.
• Strong understanding of secure coding principles and common application vulnerabilities, including the OWASP Top 10 and API Security Top 10.
• Hands-on experience with Azure DevOps, particularly CI/CD pipelines and Git repositories, with an understanding of how to integrate security controls into development workflows.
• Strong knowledge of identity and access management, authentication, authorization, OAuth, OpenID Connect, SAML, risk management, and Zero Trust principles.
• Familiarity with security technologies and platforms including SIEM, EDR/XDR, IAM, PAM, CASB, DLP, and vulnerability management solutions.
• Strong expertise in cloud security architecture and modern cloud platforms such as AWS and Azure.
• Knowledge of platform architecture, software development practices, cloud well-architected frameworks, application security, and enterprise security architecture.
• Ability to translate business requirements, security policies, regulatory obligations, and risk findings into practical and effective technical architecture guidance.
• Strong analytical and problem-solving skills, with the ability to investigate complex technical challenges and develop scalable security solutions.
• Excellent communication and collaboration skills, with the ability to build relationships and influence stakeholders across multiple technical and business teams.
• Strong organizational and time-management abilities, including the capacity to manage multiple business-critical initiatives simultaneously.
• Understanding of security and compliance requirements within highly regulated environments; experience in healthcare is a plus.
• CISSP certification is preferred.

Benefits:

• Competitive compensation aligned with the scope and seniority of the Information Security Architect role.
• Opportunity to influence enterprise-wide security architecture, governance, and technology strategy.
• Work with modern cloud technologies and security practices across application, infrastructure, and DevSecOps environments.
• Exposure to complex security challenges involving cloud platforms, application security, identity, architecture, compliance, and emerging technologies.
• Opportunity to collaborate with multidisciplinary engineering, architecture, infrastructure, security, and compliance teams.
• Strong platform for professional growth through technical leadership, mentoring, and exposure to evolving cybersecurity practices.
• Opportunity to contribute to security initiatives supporting highly regulated and business-critical environments.
• A role with significant impact on improving security maturity, resilience, and secure technology delivery across the organization.