enterprise security architect

DISTILLERY

<div>About Distillery
Distillery accelerates innovation through an unyielding approach to nearshore software development. The world&rsquo;s most innovative technology teams choose Distillery to help accelerate strategic innovation, fill a pressing technology gap, and hit mission-critical deadlines. We support essential applications, mobile apps, websites, and eCommerce platforms by placing senior, strategic technical leaders and deploying fully managed technology teams that work intimately alongside our client&rsquo;s in-house development teams. At Distillery we&rsquo;re not here to reinvent nearshore software development, we&rsquo;re on a mission to perfect it.
Distillery is committed to diversity and inclusion. We actively seek to cultivate a workforce that reflects the rich tapestry of perspectives, backgrounds, and experiences present in our society. Our recruitment efforts are dedicated to promoting equal opportunities for all candidates, regardless of race, ethnicity, gender, sexual orientation, disability, age, or any other dimension of diversity.
About the Position
We are looking for an Architect to evaluate, design, and advise on the architecture, security posture, and risk profile of SaaS applications within an enterprise environment.
This role blends enterprise architecture principles with deep cloud and application security expertise to ensure SaaS solutions are secure, scalable, compliant, and aligned with business and technology strategy.
The Architect will work across technical and business teams, providing strategic and tactical guidance with minimal oversight, and ensuring secure adoption of SaaS and cloud technologies.
 This position is for Europe.
Responsibilities
Architecture &amp; Design<ul><li>
Define and evaluate enterprise and SaaS architecture patterns, standards, and best practices across cloud, hybrid, and multi-cloud environments</li><li>
Assess SaaS application architectures including APIs, integrations, data flows, microservices, and lifecycle models</li><li>
Establish reusable architectural and security patterns and guide implementation across teams</li><li>
Represent the architecture function in technical and business discussions</li></ul>
SaaS Security &amp; Risk Management<ul><li>
Perform security architecture reviews focusing on confidentiality, integrity, availability, and resilience</li><li>
Lead third-party security due diligence, vendor risk assessments, and ongoing risk management activities</li><li>
Evaluate compliance with frameworks and regulations such as NIST, GDPR, and SOC reports</li><li>
Define and assess Zero Trust security models across SaaS and cloud environments</li></ul>
Identity, Data, and Application Security<ul><li>
Design and assess IAM solutions including authentication, SSO, RBAC, privilege management, and Microsoft Entra</li><li>
Evaluate data protection controls such as encryption, classification, retention, and privacy practices</li><li>
Review application security practices including SSDLC, OWASP Top 10, API security, and secure design patterns</li></ul>
Cloud, Network, and Operations Integration<ul><li>
Assess SaaS solutions across Azure, AWS, hybrid, and multi-cloud environments</li><li>
Review network security controls including firewalls, WAF, IDS/IPS, proxies, and API gateways</li><li>
Evaluate logging, monitoring, SIEM integration, incident response readiness, and penetration testing practices</li></ul>
Emerging Technologies<ul><li>
Assess secure adoption of AI and emerging technologies (e.g., Microsoft Copilot) within enterprise SaaS environments</li></ul>
Requirements<ul><li>
Bachelor&rsquo;s degree in Computer Science, Information Systems, or related field (or equivalent experience)</li><li>
7+ years of experience in information security, enterprise architecture, or related roles</li><li>
Hands-on experience with cloud platforms and SaaS environments</li><li>
Strong knowledge of enterprise architecture frameworks (e.g., TOGAF, Zachman)</li><li>
Deep understanding of cloud security, application security, data protection, IAM, and network architecture</li><li>
Experience with compliance, risk management, and governance frameworks</li><li>
Strong analytical, consultative, and communication skills</li><li>
Proven ability to collaborate with cross-functional teams in complex enterprise environments</li></ul>
Nice to Have<ul><li>
Security certifications such as CISSP, CCSP, or cloud security certifications</li><li>
Architecture certifications such as TOGAF, Zachman, or AWS/Azure Solutions Architect</li><li>
Experience implementing Zero Trust models</li><li>
Exposure to AI/security considerations in enterprise environments</li></ul>
Why You'll Like Working Here
Join a global team committed to Distillery's core values: Unyielding Commitment, Relentless Pursuit, Courageous Ambition, and Authentic Connection.<ul><li>
100% Remote Work: Work from anywhere while collaborating with a diverse, multinational team</li><li>
Competitive Compensation: Competitive USD package and comprehensive benefits</li><li>
Flexible Hours: Create a schedule that aligns with your life</li><li>
Home Office Setup: We provide everything you need to succeed remotely</li><li>
Innovative Environment: Work alongside top-tier global talent</li><li>
Growth Opportunities: Focus on continuous professional and personal development</li></ul></div><div></div>

SaaS Security Architect

American Recruiting & Consulting Group

<div><h2 class="jobSectionHeader">Cybersecurity Architect &ndash; AI Security (LLM / Guardrails / Enterprise Architecture)</h2>
100% REMOTE! 
W2 Contract Only | No C2C / No 1099 / No Third-Party Vendors 
Must have permanent residency or citizenship<h3 class="jobSectionHeader">
SUMMARY STATEMENT</h3>
ARC Group is seeking a Cybersecurity Architect &ndash; AI Security for a direct client in the healthcare insurance domain. This role focuses on designing and implementing enterprise-level AI security architecture, with a strong emphasis on securing locally hosted AI/LLM models, defining guardrails, and establishing security standards, blueprints, and governance frameworks across AI-driven platforms.
This is a true Architect-level role requiring hands-on experience in AI security design, threat modeling, and control implementation, not just tool-based security operations.<h3 class="jobSectionHeader">
ESSENTIAL RESPONSIBILITIES</h3><ul><li>
Design and implement enterprise AI security architecture for locally hosted AI/LLM platforms, ensuring confidentiality, integrity, and availability of sensitive data.</li><li>
Define and enforce AI guardrails, including prompt filtering, output validation, and protection against prompt injection and data leakage risks.</li><li>
Develop security blueprints, architecture standards, and design patterns for AI and machine learning platforms across the enterprise.</li><li>
Perform AI threat modeling and identify vulnerabilities specific to LLMs, including model misuse, poisoning, and adversarial inputs.</li><li>
Integrate security controls across AI lifecycle, including data ingestion, model training, inference, and output handling.</li><li>
Establish and monitor security metrics and controls to evaluate effectiveness of AI security architecture and enterprise security posture.</li><li>
Collaborate with engineering, data science, and infrastructure teams to ensure secure AI solution design and deployment.</li><li>
Participate in architecture governance, design reviews, and technology selection, ensuring alignment with enterprise security standards.</li><li>
Evaluate and recommend AI security tools, frameworks, and solutions, including build vs. buy analysis.</li><li>
Maintain detailed architecture documentation, security standards, and operational procedures.</li><li>
Provide technical leadership and guidance on emerging AI security threats, trends, and best practices.</li></ul><h3 class="jobSectionHeader">
REQUIRED EXPERIENCE</h3><ul><li>
10+ years of overall cybersecurity experience with strong focus on architecture and design.</li><li>
2+ years of current, hands-on experience in AI security architecture (MANDATORY).</li><li>
Proven experience securing locally hosted AI/LLM models (non-SaaS environments).</li><li>
Strong experience implementing AI guardrails, including:<ul><li>
Prompt injection prevention</li><li>
Input/output filtering</li><li>
Response validation and policy enforcement</li></ul></li><li>
Experience designing end-to-end security architecture for AI/ML platforms.</li><li>
Strong understanding of AI/LLM threat landscape, including OWASP Top 10 for LLMs.</li><li>
Experience with enterprise security architecture frameworks and governance models.</li><li>
Hands-on experience with cloud security (AWS/Azure) and enterprise infrastructure security.</li><li>
Strong background in Identity and Access Management (IAM) and secure access controls.</li></ul><h3 class="jobSectionHeader">
REQUIRED CERTIFICATIONS</h3><ul><li>
CISSP (REQUIRED at time of submission)<ul><li>
Certification number must be included on resume</li><li>
Will be validated during background screening</li></ul></li></ul><h3 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h3><ul><li>
Healthcare or regulated industry experience (HIPAA, PHI data protection).</li><li>
Experience working in Agile / Scaled Agile environments.</li><li>
Exposure to AI security frameworks, governance models, or compliance standards.</li><li>
Experience with security monitoring, metrics, and risk reporting at enterprise scale.</li></ul><h3 class="jobSectionHeader">
ADDITIONAL REQUIREMENTS</h3><ul><li>
Must demonstrate strong architecture ownership and design leadership, not just implementation experience.</li><li>
Must be actively engaged in staying current with rapidly evolving AI security technologies and threats.</li><li>
Strong communication skills with ability to explain complex security architectures to both technical and non-technical stakeholders.</li></ul>
-
ARC Group is a Forbes-ranked top 20 recruiting and executive search firm working with clients nationwide to recruit the highest quality technical resources. We achieve this by understanding both our candidates&rsquo; and clients&rsquo; goals and serving both with integrity and a shared desire to succeed.
At ARC Group, we are committed to providing equal employment opportunities and fostering an inclusive work environment. We encourage applications from all qualified individuals regardless of race, ethnicity, religion, gender identity, sexual orientation, age, disability, or any other protected status.
Position offered with no fee to candidate.
TW1EN3bazt</div>

Cybersecurity Architect

Shaw Systems Associates

<div>Overview

The Information Security Architect is responsible for designing secure, compliant, and scalable architectures that enable the organization to safely adopt Microsoft 365 Copilot, large language models (LLMs), AI agents, and intelligent automation. This role blends deep expertise in Microsoft Purview, cloud security, responsible AI, and enterprise productivity tooling.

A core mandate includes implementing strong data ring‑fencing controls to ensure sensitive information remains within trusted network boundaries, while also driving measurable business value from Copilot in Microsoft 365 (M365) through secure enablement, workflow optimization, and governed adoption while limiting access to other AI resources from the company network not approved by the Information Security Office.

This individual will lead the company&rsquo;s M365 CoPilot Purview implementation setting many of the foundational pre-requisites required for a successful and secure AI ecosphere. 


Key Responsibilities

AI, LLM, Copilot, and Agent Security Architecture
<ul>
<li>Design secure architectures for LLMs, Microsoft 365 Copilot, generative AI systems, RAG pipelines, and autonomous AI agents.</li>
<li>Define guardrails for Copilot and AI agents, including identity boundaries, access controls, and operational constraints.</li>
<li>Establish governance for prompt security, model input/output filtering, and safe‑use patterns across the enterprise.</li>
<li>Architect secure integration patterns ensuring all AI systems operate strictly within approved network zones and data boundaries.</li>
</ul>
Data Ring‑Fencing &amp; Boundary Protection
<ul>
<li>Implement ring‑fencing strategies to prevent sensitive data from leaving the company&rsquo;s network or being accessed by unauthorized AI systems.</li>
<li>Design and enforce network segmentation, private endpoints, and isolation zones for AI workloads.</li>
<li>Ensure Copilot, LLMs, vector stores, and AI agents only access data through approved, monitored, and policy‑controlled channels.</li>
<li>Build automated controls that block data exfiltration, including DLP, egress filtering, and Purview‑driven policy enforcement.</li>
</ul>
Business Value Realization with Microsoft 365 Copilot
<ul>
<li>Lead secure enterprise adoption of Microsoft 365 Copilot, ensuring alignment with data governance and security policies.</li>
<li>Identify high‑value Copilot use cases that drive measurable productivity, efficiency, and decision‑making improvements.</li>
<li>Develop Copilot frameworks, usage patterns, and success metrics demonstrating</li>
<li>Ensure Copilot interactions respect sensitivity labels, retention policies, and Purview‑driven governance.</li>
</ul>
AI‑Driven Automation &amp; Enterprise Productivity
<ul>
<li>Architect secure AI agent frameworks that automate business processes, knowledge retrieval, and decision support.</li>
<li>Evaluate and implement AI‑powered copilots, workflow automation, and intelligent assistants across departments.</li>
<li>Develop standards for human‑in‑the‑loop oversight, escalation paths, and monitoring of autonomous agent behavior.</li>
</ul>
Microsoft Purview Strategy &amp; Data Governance
<ul>
<li>Lead the enterprise strategy for Microsoft Purview, ensuring data classification, lineage, and sensitivity labeling support AI and Copilot use cases.</li>
<li>Implement automated governance workflows that feed LLMs, Copilot, and AI agents only the data they are authorized to access.</li>
</ul>
Information Security &amp; Compliance
<ul>
<li>Define and enforce security baselines for AI workloads, including encryption, identity, network segmentation, and model access.</li>
<li>Ensure compliance with emerging AI regulations, including transparency, auditability, and model risk management requirements.</li>
<li>Conduct threat modeling for Copilot, LLMs, and AI agents, including prompt injection, data leakage, model manipulation, and supply‑chain risks.</li>
</ul>
Cross‑Functional Leadership
<ul>
<li>Serve as the enterprise SME for secure AI and Copilot adoption, guiding engineering, data science, legal, and compliance teams.</li>
<li>Translate complex AI security concepts into actionable guidance for business leaders and technical teams.</li>
<li>Lead architecture reviews for AI‑enabled applications, copilots, and agent‑based automation initiatives.</li>
</ul>
Monitoring, Observability &amp; Continuous Improvement
<ul>
<li>Implement monitoring for Copilot usage, LLM interactions, agent actions, and data access patterns.</li>
<li>Automate governance and compliance checks using Purview workflows, Azure Policy, and CI/CD pipelines.</li>
<li>Continuously evaluate emerging AI threats, model vulnerabilities, and best practices for responsible AI.</li>
</ul>
Required Qualifications
<ul>
<li>7+ years in information security, cloud architecture, or data governance.</li>
<li>2+ years of hands-on AI experience in an implementation and/or architecture role.</li>
<li>Strong experience and working knowledge of Microsoft Purview, Azure security services, and cloud governance frameworks with a proven track record of implementations.</li>
<li>Strong understanding of LLMs, generative AI, Retrieval-Augmented Generation (RAG) architectures, AI agent frameworks, and Microsoft 365 Copilot.</li>
<li>Proven experience driving business value through Microsoft 365 Copilot, including workflow optimization and measurable productivity gains.</li>
<li>Expertise in identity and access management, data protection, and secure cloud architecture.</li>
<li>Experience implementing ring‑fencing, network segmentation, and data‑boundary controls in Azure or AWS.</li>
<li>Excellent communication faculties, capable of demystifying complex technical paradigms to a varied audience, with both technical and non-technical stakeholders.</li>
</ul>
Preferred Qualifications
<ul>
<li>Certifications such as Azure Solutions Architect, Azure Security Engineer, CISSP, CCSP, or equivalent.</li>
<li>Experience with enterprise AI platforms, vector databases, and Machine Learning Operations (MLOps) pipelines.</li>
<li>Knowledge of AI observability, model risk management, and responsible AI frameworks.</li>
<li>Background in data architecture, automation engineering, or enterprise integration.</li>
</ul>
Core Competencies
<ul>
<li>Strategic thinker with the ability to influence across technical and non‑technical teams.</li>
<li>Strong communication skills with the ability to simplify complex AI and Copilot concepts.</li>
<li>Ability to work effectively with managers, technical leads, and technical staff to understand and deliver value added solutions.</li>
<li>Passion for secure, ethical, and innovative use of AI to transform business operations.</li></ul></div>

Information Security AI Architect

Akima

<div>Company Overview: 
Work Where it Matters 
Suvi, an Akima company, is not just another federal mission services contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska. 
At Suvi, the work you do every day makes a difference in the lives of our 15,000 I&ntilde;upiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States. 
For our shareholders, Suvi provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years. 
For our government customers, Suvi delivers subject matter experts, an agile management approach, and innovative technologies that accomplish customers&rsquo; missions safely, securely, and efficiently. 
As a Suvi employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.
Description:
<div></div><div><div><div><div><div><div><div>
Suvi is seeking a dedicated Cyber Engineer III to support our TSA Enterprise Architecture team in Springfield, VA. To join our team of outstanding professionals, apply today! 
The ideal candidate will deliver outstanding customer service, strong technical expertise and a mission-driven work ethic. The Cyber Engineer III will provide specialized expertise in enterprise cybersecurity architecture and modernization initiatives under the EASS contract. Will report to the Lead Architect and Program Lead while directly supporting the Architecture &amp; Data Management Branch (ADMB). This role ensures that security architecture principles are fully integrated into all TSA modernization and transformational efforts. Will act as a forward-thinking change agent, modernizing TSA&rsquo;s approach to cybersecurity while enabling the secure infusion of disruptive technologies such as Intelligent Automation and Artificial Intelligence (IAAI), cloud, Zero Trust, biometrics, and next-generation screening capabilities. Will supports secure, scalable and resilient architectures that align with TSA&rsquo;s mission to protect the nation&rsquo;s transportation systems.
</div></div></div></div></div></div></div>Responsibilities:
<ul><li>Develop and maintain as-is and to-be security architectures across enterprise, portfolio and solution levels, including identity management, aviation system security, and layered defenses.</li><li>
Integrate enterprise security architecture domain principles with program-and project-level security assessments and modernization activities.</li><li>
Conduct gap analyses, impact analyses, risk assessments, and technical debt evaluations to support secure modernization and transformational efforts.</li><li>
Provide forward-thinking expertise on emerging technologies and special domains (e.g., Zero Trust, IoT, biometrics, mobile, cloud, AI/IAAI) and their associated security implications.</li><li>
Support the design and evaluation of security systems, policies, and technologies to mitigate cyber threats while aligning with TSA business objectives and risk appetite.</li><li>
Contribute to secure modernization roadmaps, including migration from monolithic applications to open and robust platforms.</li><li>
Collaborate with TSA functional areas to embed security into Analysis of Alternatives (AoAs), white papers, strategies, and next-generation planning activities.</li><li>
Participate in governance processes, FITARA reviews, and technology insertion evaluations with a security and modernization focus.</li><li>
Provide thought leadership on federal cybersecurity policy, NIST Cybersecurity Framework (CSF) 2.0, and layered security approaches for Transportation Screening Equipment (TSE) and other TSA domains.</li></ul>
Qualifications:
<ul><li>U.S. Citizenship.</li><li>
Active Secret security clearance.</li><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Systems or related field.</li><li>
8+ years of progressive experience in cybersecurity architecture, enterprise security, or IT modernization in federal or large-scale environments.</li><li>
Strong knowledge of federal cybersecurity policies, standards, and frameworks (NIST CSF, Zero Trust, FISMA).</li><li>
Demonstrated experience integrating security into enterprise architecture and modernization initiatives.</li><li>
Excellent analytical, communication and collaboration skills.</li></ul>
Preferred Skills:<ul><li>
Master's degree.</li><li>
Experience supporting TSA, DHS, or other federal transportation/security agencies.</li><li>
Hands-on knowledge of modern security technologies (Zero Trust, biometrics, cloud security, AI/ML security).</li><li>
Familiarity with FEAF v2.0, DoDAF, ServiceNow, and EA modeling tools (e.g., Ins-Pi/YouDesign).</li><li>
Certifications such as CISSP, CCSP, TOGAF, or Certified Enterprise Architect.</li><li>
Understanding of Transportation Screening Equipment (TSE) security and aviation system security domains.</li></ul>
Job ID: 2026-22535 Work Type: On-Site</div>

Cyber Architect III

Cisco

The application window is expected to close on: 04/13/2026Job posting may be removed earlier if the position is filled or if a sufficient number of applications are received.
 
A Splunk Security Solution Architect is responsible for assisting customers with implementing their Security Operations Management strategy, processes, and solutions using Splunk security products. Previous job titles and responsibilities may include Security Architect, Enterprise Architect, Splunk Enterprise Security Architect, or Security Operations Analyst.
 
The Splunk Security Solution Architect primarily works with the customer’s Security Operations (SecOps) team or, in organizations where security is a core competency, the Security Operations Director. Security Solution Architects in large organizations often act as a bridge between Enterprise Architects, Application Architects, Security Operations Management, and various business segments.
 This role requires a highly seasoned IT security professional who has successfully led projects in security operations, security software development, or security service management, particularly where business owners significantly impact IT and security success—ideally in various roles. The Security Solution Architect must be able to clearly communicate ideas both orally and in writing to executive staff, business sponsors, and technical resources in concise language appropriate to each group.
 
This role can be performed anywhere in the United States.
 
Requirements: 
<ul>
<li>7+ years in Information Technology, focusing on security operations, applications test and deployment, or IT service management (process design/management)</li>
</ul>
Key Responsibilities: 
<ul>
<li>Define and document Security Operations Management processes, best practices, standards, frameworks, and implementation strategy.</li>
<li>Translate business security goals and objectives into IT security strategy and roadmap.</li>
<li>Communicate the business case for Security Operations Management initiatives to executive and business sponsors.</li>
<li>Analyze the current state of security processes and prioritize automation and monitoring projects based on business value.</li>
<li>Formulate and communicate best practices for using Splunk’s security tools, including Splunk Enterprise Security (ES).</li>
<li>Maintain, improve, and implement a Security Operations Management strategy with the customer’s security organization, including clear value metrics.</li>
<li>Collaborate with project teams to strategize and align long-term solutions for Security Operations Management, including roadmap, tools, frameworks, and approaches that align with business goals and key initiatives.</li>
<li>Create documentation and communicate security automation processes to project teams and testers.</li>
<li>Provide leadership, guidance, training, and mentoring to project teams and Security Operations Management engineers for implementing security processes and best practices</li>
</ul>
Desired Experience: 
<ul>
<li>Security Operations Management knowledge, including familiarity with technologies such as security information and event management (SIEM), threat intelligence, incident response, compliance management, orchestration tools, and scripting toolkits.</li>
<li>Experience collaborating with product development teams to ensure future versions of Splunk security products meet strategic security automation objectives.</li>
<li>Research, test, and recommend new or complementary security technologies from various vendors that can contribute to Security Operations Management initiatives.</li>
<li>Establishment of ‘best practice’ frameworks to automate security monitoring, threat detection, response, and compliance activities.</li>
<li>Experience and comfort with complex, heterogeneous IT infrastructure, including existing security platforms, operating systems, middleware, and applications.</li>
<li>Familiarity with how Security Operations Management supports application development, IT operations, and security service management.</li>
<li>Strong understanding of compliance/regulatory issues, data privacy, and broad application security principles.</li>
</ul>
Consultant Transition to Security Solution Architect: 
The role and strengths required for a Security Solution Architect may differ. The key is to identify a Security Solution Architect who is strategic-minded, business-aware, and technically proficient. Other considerations include:
 <ul>
<li>Experience working with customer senior management in planning Security Operations Management processes to define, monitor, measure, and improve business and technical services.</li>
<li>Experience working with customer technical teams in deploying security infrastructure monitoring, including expertise in SPL search, scripting, security application development, testing, and deployment methods.</li>
<li>Experience working with customer business units to assist in the development of a sustainable security strategy driven by business goals and objectives.</li>
</ul>
Consultants from diverse backgrounds can fulfill the role of Security Solution Architect, but they will need to broaden their skills to meet these requirements. Only the most competent Security Solution Architects with the broadest understanding will deliver successful Security Operations Management and Monitoring deployment strategies that address process, people, and technology—from application development to business service management.
 
Basic Qualifications: 
<ul>
<li>Expert in the adoption and use of leading Security Operations Management methods and tools</li>
<li>5+ years of experience in design and development of Security Operations Management frameworks and strategies</li>
<li>Expert knowledge in one or more scripting and/or programming languages is a plus</li>
<li>Responds appropriately and competently to the demands of work challenges when confronted with changes, ambiguity, adversity, and other pressures</li>
<li>Excellent analytical and problem-solving skills</li>
<li>Excellent presentation skills</li>
<li>Effective written and verbal communication skills</li>
<li>Good team and interpersonal skills</li>
<li>Ability to travel</li>
</ul>
Why Cisco?
 
At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.
 Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.
 We are Cisco, and our power starts with you.
 
Message to applicants applying to work in the U.S. and/or Canada:
 
The starting salary range posted for this position is $235,300.00 to $301,700.00 and reflects the projected salary range for new hires in this position in U.S. and/or Canada locations, not including incentive compensation*, equity, or benefits.
 Individual pay is determined by the candidate's hiring location, market conditions, job-related skillset, experience, qualifications, education, certifications, and/or training. The full salary range for certain locations is listed below. For locations not listed below, the recruiter can share more details about compensation for the role in your location during the hiring process.
 
U.S. employees are offered benefits, subject to Cisco’s plan eligibility rules, which include medical, dental and vision insurance, a 401(k) plan with a Cisco matching contribution, paid parental leave, short and long-term disability coverage, and basic life insurance. Please see the Cisco careers site to discover more benefits and perks. Employees may be eligible to receive grants of Cisco restricted stock units, which vest following continued employment with Cisco for defined periods of time.
 
U.S. employees are eligible for paid time away as described below, subject to Cisco’s policies:
 
<ul>
<li>10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees</li>
<li>1 paid day off for employee’s birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness determined by Cisco</li>
<li>Non-exempt employees** receive 16 days of paid vacation time per full calendar year, accrued at rate of 4.92 hours per pay period for full-time employees</li>
<li>Exempt employees participate in Cisco’s flexible vacation time off program, which has no defined limit on how much vacation time eligible employees may use (subject to availability and some business limitations)</li>
<li>80 hours of sick time off provided on hire date and each January 1st thereafter, and up to 80 hours of unused sick time carried forward from one calendar year to the next</li>
<li>Additional paid time away may be requested to deal with critical or emergency issues for family members</li>
<li>Optional 10 paid days per full calendar year to volunteer</li>
</ul>
For non-sales roles, employees are also eligible to earn annual bonuses subject to Cisco’s policies.
 
Employees on sales plans earn performance-based incentive pay on top of their base salary, which is split between quota and non-quota components, subject to the applicable Cisco plan. For quota-based incentive pay, Cisco typically pays as follows:
 
<ul>
<li>.75% of incentive target for each 1% of revenue attainment up to 50% of quota;</li>
<li>1.5% of incentive target for each 1% of attainment between 50% and 75%;</li>
<li>1% of incentive target for each 1% of attainment between 75% and 100%; and</li>
<li>Once performance exceeds 100% attainment, incentive rates are at or above 1% for each 1% of attainment with no cap on incentive compensation.</li>
</ul>
For non-quota-based sales performance elements such as strategic sales objectives, Cisco may pay 0% up to 125% of target. Cisco sales plans do not have a minimum threshold of performance for sales incentive compensation to be paid.
 
The applicable full salary ranges for this position, by specific state, are listed below:
 
New York City Metro Area: 
$257,800.00 - $374,100.00
 
Non-Metro New York state& Washington state: 
$242,800.00 - $357,100.00
 <ul>
<li>For quota-based sales roles on Cisco’s sales plan, the ranges provided in this posting include base pay and sales target incentive compensation combined.</li>
</ul>
** Employees in Illinois, whether exempt or non-exempt, will participate in a unique time off program to meet local requirements.

Solution Architect (Security) - Splunk - Remote

COZMALABS

We are seeking a highly skilled and motivated Cyber Security Architect with strong system, on prem and Cloud Security expertise to oversee and enhance the organization&rsquo;s internal security architecture, controls, and policies while actively contributing to external security initiatives and projects.This role combines strategic architecture leadership, hands-on implementation, security research, operations oversight, and cloud security engineering, with a strong focus on Microsoft environments such as Microsoft 365, Microsoft azure , and OS security.The ideal candidate will possess deep expertise in enterprise security architecture, domain security, on-prem and hybrid infrastructure protection, cloud-native security controls, and DevSecOps integration.Experience Requirements<ul><li>Minimum 7+ years in system and Cloud Security role.</li><li>Proven experience in enterprise security architecture (on-prem + cloud)</li><li>Experience in security research, security operations, and security assurance</li><li>Experience in setting and documenting security processes and procedures in compliance with Qatar NCSA guidelines and security best practices.</li><li>Experience in operating system and infrastructure hardening.</li></ul>Key Responsibilities<ul><li>Design, implement, and maintain enterprise-wide security architecture for the company internal security, user devices, cloud, and hybrid environments.</li><li>Develop and enforce security policies, standards, and procedures.</li><li>Lead security risk assessments and define mitigation strategies.</li><li>Align security controls with business objectives and regulatory requirements.</li><li>Oversee internal security governance and compliance frameworks (ISO 27001, NIST, CIS).</li><li>Architect and secure Azure cloud environments (IaaS, PaaS, SaaS).</li><li>Implement cloud-native and third-party security controls.</li><li>Conduct detailed security assessments of cloud services to ensure compliance with internal policies and industry frameworks.</li><li>Identify and remediate misconfigurations using automated scanning and manual inspection.</li><li>Implement secure cloud architecture patterns and service integrations.</li><li>Contribute to threat modeling and cloud risk assessments.</li><li>Ensure secure hybrid integration between on-prem and Azure environments.</li><li>Secure Active Directory and domain environments.</li><li>Implement GPO hardening and identity security controls.</li><li>Manage IAM, RBAC, MFA, and privileged access strategies.</li><li>Harden Windows/Linux servers and enterprise endpoints.</li><li>Oversee firewall configurations, IDS/IPS, VPN security, and segmentation.</li><li>Implement encryption and data protection strategies.</li><li>Perform vulnerability assessments and coordinate penetration testing.</li><li>Develop scripts and automation tools (PowerShell, Python, Bash) to enhance monitoring and compliance validation.</li><li>Integrate security controls within CI/CD pipelines (DevSecOps practices).</li><li>Monitor emerging threats, tools, and vulnerabilities.</li><li>Evaluate security technologies and recommend improvements.</li><li>Contribute to threat modeling exercises.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li><li>Conduct risk assessments and compliance audits.</li><li>Ensure adherence to CIS Benchmarks, NIST, ISO 27001.</li><li>Develop remediation guidance and contribute to policy development.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li></ul>Required Technical Expertise<ul><li>Deep technical understanding and hands on of:</li></ul>Cloud &amp; Security Platforms<ul><li>Cloud security.</li><li>Data protection strategies</li><li>Zero Trust Architecture</li></ul>Infrastructure &amp; Systems Security<ul><li>Active Directory and Microsoft 365 hardening</li><li>User devices security</li><li>Domain security best practices</li><li>Endpoint security solutions</li><li>Hybrid identity solutions</li></ul>DevSecOps &amp; Automation<ul><li>CI/CD security integration</li><li>Secure coding awareness</li><li>Security automation scripting</li></ul>Certifications (Required / Strongly Preferred)<ul><li>CISSP &ndash; Certified Information Systems Security Professional</li><li>CCSP &ndash; Certified Cloud Security Professional</li><li>CISM &ndash; Certified Information Security Manager</li><li>Microsoft Azure Security Engineer Associate (AZ-500)</li><li>CompTIA Security+ (Foundational)</li></ul>EducationBachelor&rsquo;s degree in Cyber Security, Computer Science, Information Systems, or related field (Master&rsquo;s preferred).Work Location: In person

Cybersecurity

Search 10000+ Enterprise security architect jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 enterprise security architect jobs Near Me

SaaS Security Architect

Cybersecurity Architect

Information Security AI Architect

Information Security AI Architect

Cyber Architect III

Solution Architect (Security) - Splunk - Remote

Cybersecurity