Security Architect
First seen by Alion on Aug 19, 2026.
Role : Security Architect
About the Role :
We are seeking a hands-on Security Architect to define, implement, and govern security architecture across a next-generation airport operations and intelligence platform. The role spans cloud-native, hybrid cloud + on-prem, OT/IoT, real-time streaming, AI/ML, and critical airport infrastructure environments. This is a technical role requiring practical architecture skills, not purely governance or compliance.
Key Responsibilities :
Security Architecture & Platform Security :
- Define enterprise security architecture for hybrid cloud, on-prem, and edge deployments.
- Design secure architectures for Kubernetes platforms, event-driven streaming, data lakehouse, AI/ML workloads, and real-time systems.
- Build zero-trust patterns; establish security reference architectures and standards.
- Perform architecture reviews and threat modeling for new products and integrations.
IAM, SSO & Access Governance :
- Architect enterprise IAM using Keycloak, Microsoft Entra ID / Azure AD, OAuth2, OIDC, SAML, and JWT.
- Design RBAC and multi-tenant isolation across data, API, UI, and streaming layers.
- Define service-to-service authentication, secrets management, and certificate strategies.
Cloud & Kubernetes Security :
- Define security controls for AWS and Kubernetes : network segmentation, service mesh, API gateway, WAF, runtime security, container scanning, supply chain.
- Establish DevSecOps pipelines and hardening standards for Kubernetes, APIs, databases, etc.
Data & Streaming Security :
- Secure large-scale platforms built on Apache Kafka, Flink, Iceberg, and NiFi.
- Define encryption, tokenization, data masking, PII protection, lineage, and secure multi-tenancy.
OT / IoT / Airport Systems Security :
- Design secure IT/OT/IoT integration patterns; secure SCADA, BMS, PLCs, OPC-UA, MQTT, and CCTV/VMS systems.
- Define IEC 62443-aligned OT segmentation zones and secure edge ingestion architectures.
Security Operations & Governance :
- Define logging, monitoring, audit, and incident response architecture.
- Support SIEM, SOC, IDS/IPS, and threat detection integration.
- Conduct threat modeling, risk assessments, vulnerability remediation guidance, and compliance audits.
Required Skills & Experience :
Core Experience :
- 10+ years in cybersecurity, platform security, or security architecture.
- Strong hands-on experience in cloud-native and hybrid infrastructure security.
- Experience in critical infrastructure, airports, or OT environments preferred.
Technical Skills :
Cloud & Infrastructure :
- AWS/Azure security architecture.
- Kubernetes & container security.
- VPN and hybrid connectivity.
- Linux hardening.
Data & Streaming :
- Kafka security.
- Secure API architecture.
- Data governance & encryption.
- Real-time platform security.
IAM & Identity :
- Keycloak, Azure AD / Entra ID.
- OAuth2 / OIDC / SAML.
- RBAC / ABAC.
- PKI & certificate management.
OT/IoT Security :
- IEC 62443.
- SCADA / ICS security.
- OT network segmentation.
- Industrial protocols & gateways.
DevSecOps & Tooling :
- Vault, Kong/API gateways, Wazuh/Falco/Zeek, Trivy, Prometheus/Grafana, ELK/OpenSearch, SIEM platforms.
Good to Have :
- Application, Cloud, System architecture experience.
- Experience in airport, transportation, smart city, or critical infrastructure domains.
- Exposure to AI/ML, Digital Twin, GIS, or operational intelligence platforms.
- Knowledge of NIST, ISO 27001, CERT-In, and IEC 62443 frameworks.
Qualifications :
- Bachelor's or Master's in Computer Science, Cybersecurity, Information Security, or related field.
- Preferred certifications : CISSP, CCSP, CISM, AWS Security Specialty, Kubernetes Security, IEC 62443.
What We're Looking For :
- Strong systems thinking.
- Practical engineering mindset.
- Bridge OT + IT + Cloud + Data + AI ecosystems.
- Collaborative across architects, developers, DevOps, and customers.
- Strong documentation skills.
- Comfortable in fast-moving platform environments.
Skills
Cyber Security, Cloud Security, DevSecOps, Threat Modeling, iAM, SSO Integration, Kubernetes, SecOps, CISSP, CISM, Security Architect