Information Security Architect

Job Description

Day-to-Day: This role is a senior-level Enterprise Information Security Engineer/Architect responsible for owning and advancing the organization's overall security posture across cloud, SaaS, and on-prem infrastructure. On a daily basis, they will design and implement secure enterprise architectures, monitor and respond to security events, conduct risk assessments and threat modeling, manage security tools and vendors, and drive compliance initiatives. The individual will partner closely with infrastructure, application, and business teams to ensure security is embedded into all technology decisions while also serving as a strategic advisor to leadership. This person will help lead security operations, oversee third-party/vendor security reviews, support audits and remediation efforts, and educate employees on cybersecurity best practices. The ideal candidate is a broad, hands-on security professional with strong communication skills who can operate as a technical leader and trusted partner to the EISO.

Skills and Requirements

Must-Haves

• 6+ years of Information Security experience with a broad enterprise security background.

• Experience architecting and implementing security solutions across cloud, SaaS, and enterprise environments.

• Strong knowledge of security operations, including SIEM, IDS/IPS, firewalls, vulnerability management, incident response, and threat detection.

• Hands-on SIEM experience, preferably with Splunk.

• Deep cloud security experience, specifically within AWS, Azure, Microsoft 365, and Entra ID environments.

• Working knowledge of scripting/coding, preferably Python or Perl, including the ability to read and understand automation scripts.

• Experience evaluating, onboarding, and securing third-party/SaaS vendors.

• Experience managing vendor relationships and security service providers (MSSPs).

• Strong Unix/Linux administration experience.

• Strong communication and stakeholder management skills with the ability to work cross-functionally and present to leadership. Prior people leadership, mentoring, or management experience, as this person may help fill leadership responsibilities currently handled by Team Plusses

• Experience with CrowdStrike, Darktrace, and/or Tripwire. CISSP, CISM, CCSP, CISA, and/or GIAC certifications.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].