senior information security architect

Qiddiya Investment Company

<div><p>Qiddiya Investment Company is looking for a highly experienced and innovative Senior Manager - Cybersecurity Security Architecture to join our forward-thinking team. In this pivotal role, you will oversee the development and implementation of a comprehensive cybersecurity architecture framework designed to protect our digital and operational environments. Your strategic leadership will be essential in integrating security into all levels of our organization, ensuring that security measures support our ambitious growth and innovation goals.</p><p>
As a senior leader, you will play an instrumental role in shaping the security posture of Qiddiya by designing robust security architectures that align with industry best practices and regulatory standards.</p>
Responsibilities<ul>
<li>Lead the design, development, and enhancement of the cybersecurity security architecture across all platforms and technologies.</li>
<li>Establish security design principles and standards that guide the implementation of secure systems and applications.</li>
<li>Conduct thorough assessments of existing security architectures and identify areas for improvement to mitigate risks.</li>
<li>Collaborate with cross-functional teams, including IT, engineering, and operations, to ensure that security architecture is implemented throughout the SDLC and operational phases.</li>
<li>Monitor advancements in cybersecurity technologies and integrate relevant solutions to enhance the security architecture.</li>
<li>Provide mentoring and leadership to team members and promote a culture of security awareness within the organization.</li>
<li>Develop and deliver presentations on cybersecurity architecture strategies to stakeholders and executive leadership.</li>
<li>Engage with external partners and vendors to assess potential security solutions and ensure alignment with architecture goals.</li><br>
</ul><br>
<br>
<b>Requirements</b><br>
<ul>
<li>Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; a master&rsquo;s degree is preferred.</li>
<li>10+ years of experience in cybersecurity, with a focus on security architecture and design.</li>
<li>Demonstrated expertise in developing enterprise-level cybersecurity architectures for complex IT environments.</li>
<li>In-depth knowledge of security frameworks, standards (e.g., NIST, ISO 27001, CIS Controls), and best practices.</li>
<li>Strong analytical and problem-solving abilities, with a strategic and innovative mindset.</li>
<li>Excellent leadership, communication, and collaboration skills, able to work effectively with diverse teams and stakeholders.</li>
<li>Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Architect (CISA) are highly desirable.</li><br>
</ul><br>
<br>
<b>Benefits</b><p><br>
Comprehensive benefits package</p></div>

Senior Manager - Cybersecurity Security Architecture

Steerbridge

<div><div><b>SteerBridge Strategies is a modern technology company delivering innovative, mission‑focused solutions to the U.S. Government and private sector.</b> Leveraging deep expertise in federal acquisition, digital transformation, and emerging technologies, we deliver agile, commercial‑grade capabilities that accelerate operational effectiveness and drive measurable mission success.</div><div>
At the core of SteerBridge is our people&mdash;especially the veterans whose leadership, problem‑solving mindset, and commitment to excellence elevate every project we support. We don&rsquo;t simply hire exceptional talent; <b>we cultivate it</b>, creating meaningful career pathways for veterans, military spouses, and professionals who share our passion for advancing technology and strengthening the missions we serve.</div><div></div><div><br>
<div></div><div>
<div><div><div>Serve as a <b>Security Architect </b>within the client to conduct security reviews of network diagrams/topologies, architecture diagrams, and associated Risk Management Framework (RMF) artifacts to proactively discover security issues prior to implementation.
<br>
<li>Review technical documentation and artifacts to assess a system/network for potential security issues, document potential courses of action to support resolution, and submit findings to the appropriate party.</li><br>
<li>Respond to requests for assistance from the Network Security Operations (NSO) and Cyber teams.</li><br>
<li>Engage with internal/external stakeholders to drive resolution of IT and cyber problems.</li><br>
<li>Determine cybersecurity risks and threats present, document and monitor them, and escalate to leadership as appropriate.
</li><br>
<li>Serve as a liaison to client personnel to resolve technical issues, assume ownership of the issue until it is complete, and develop Standard Operating Procedures (SOP) to proactively address those issues.</li><br>
<li>Demonstrate expertise with federal client policies, instructions, standards, guides, and requirements; validate that systems reviewed are compliant and identify for system owners where they are not.</li><br>
<li>Provide input to cybersecurity artifacts and technical briefings given to clients.</li><br>
<li>Develop technical briefs for senior leaders and executives that can explain complex technical information concisely and accurately.</li><br>
<li>Collect information or intelligence necessary to conduct the full scale of your responsibilities.</li></div>
</div><br>
</div></div></div><h3 class="jobSectionHeader"><b>Benefits</b></h3><ul><li>
Health insurance</li><li>
Dental insurance</li><li>
Vision insurance</li><li>
Life Insurance</li><li>
401(k) Retirement Plan with matching</li><li>
Paid Time Off</li><li>
Paid Federal Holidays</li></ul><h3 class="jobSectionHeader"><b>
Minimum Skills</b></h3><div>
NIST Cybersecurity Framework (CSF), Cybersecurity</div><div><b>
SteerBridge Strategies is proud to be an Equal Opportunity Employer.</b> We are committed to creating a diverse and inclusive workplace where all qualified applicants and employees are treated with respect and dignity&mdash;regardless of race, color, gender, age, religion, national origin, ancestry, disability, veteran status, genetic information, sexual orientation, or any other characteristic protected by law.</div><div>
We also provide reasonable accommodations for individuals with disabilities in accordance with applicable laws. If you require assistance during the application process, we encourage you to reach out so we can support your needs.</div>
<p>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

Cybersecurity Architect

Starlink Qatar

<div>
 <p>
  We are seeking a
  <strong>
   Cybersecurity Architect
  </strong>
  to define and govern the end-to-end security architecture for platform capabilities and vendor-delivered solutions. The role ensures
  <strong>
   secure-by-design implementation
  </strong>
  across cloud-agnostic deployments.
 </p>
 <p>
  You will establish security standards, reference architectures, and assurance processes covering
  <strong>
   identity, network segmentation, application security, data protection, and operational security monitoring
  </strong>
  . Working with stakeholders, vendors, and operations teams, the architect drives
  <strong>
   threat modeling, security controls validation, and compliance evidence readiness
  </strong>
  , including SIEM/SOAR integration, vulnerability management, and incident response procedures. The role ensures consistent security posture across multi-tenant environments and multiple cloud platforms.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   Define
   <strong>
    security reference architecture and baseline controls
   </strong>
   for cloud, Kubernetes, applications, and data services.
  </li>
  <li>
   Lead
   <strong>
    security governance
   </strong>
   : design reviews, threat modeling, security exceptions, and risk acceptance processes.
  </li>
  <li>
   Define
   <strong>
    identity and access controls
   </strong>
   (Entra ID, RBAC, PIM/JIT, conditional access, service principals, secrets management).
  </li>
  <li>
   Design
   <strong>
    network security architecture
   </strong>
   (segmentation/trust zones, private endpoints, WAF, egress controls, firewall policies).
  </li>
  <li>
   Establish
   <strong>
    application security standards
   </strong>
   (OWASP, secure SDLC, SAST/DAST, dependency/SBOM, container image signing).
  </li>
  <li>
   Define
   <strong>
    data security controls
   </strong>
   (classification, encryption/CMK/HSM, DLP, key management, retention, secure deletion).
  </li>
  <li>
   Own
   <strong>
    security monitoring requirements and integrations
   </strong>
   : Defender for Cloud (CSPM/CWPP), Sentinel (SIEM), SOAR playbooks, alert tuning.
  </li>
  <li>
   Define
   <strong>
    vulnerability management and patching processes
   </strong>
   for OS/Kubernetes/runtime components, including SLA targets and reporting.
  </li>
  <li>
   Support
   <strong>
    incident response readiness
   </strong>
   : runbooks, tabletop exercises, forensic logging, evidence handling, and post-incident improvements.
  </li>
  <li>
   Provide
   <strong>
    assurance of vendor deliverables and go-live readiness
   </strong>
   (pen test coordination, remediation validation, compliance evidence packs).
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Skills &amp; Abilities
  </strong>
 </p>
 <ul>
  <li>
   Deep understanding of
   <strong>
    cloud security architecture, zero-trust networking, and Kubernetes/container security
   </strong>
   .
  </li>
  <li>
   Strong capability in
   <strong>
    IAM design and privileged access governance
   </strong>
   in regulated environments.
  </li>
  <li>
   Ability to translate
   <strong>
    risk and compliance requirements into practical technical controls and acceptance criteria
   </strong>
   .
  </li>
  <li>
   Experience implementing
   <strong>
    security monitoring, detection engineering, and incident response processes
   </strong>
   .
  </li>
  <li>
   Strong
   <strong>
    stakeholder influence
   </strong>
   and ability to enforce standards across multiple vendors and teams.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Education &amp; Experience
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in
   <strong>
    Computer Science, Information Technology, Cybersecurity
   </strong>
   ; Master&rsquo;s degree highly preferred.
  </li>
  <li>
   <strong>
    8+ years
   </strong>
   in cybersecurity architecture or security engineering roles in government, telco, finance, or critical infrastructure.
  </li>
  <li>
   Hands-on experience securing
   <strong>
    Azure and at least one other cloud
   </strong>
   (GCP/AWS), including hybrid connectivity and shared responsibility.
  </li>
  <li>
   Proven experience with
   <strong>
    SIEM
   </strong>
   (Microsoft Sentinel preferred) and
   <strong>
    CSPM/CWPP
   </strong>
   (Defender for Cloud preferred).
  </li>
  <li>
   Experience with
   <strong>
    secure SDLC, vulnerability management, penetration testing coordination, and remediation programs
   </strong>
   .
  </li>
  <li>
   Relevant certifications preferred:
   <strong>
    CISSP/CCSP, CISM, Azure Security Engineer, CKA/CKS, ISO 27001 awareness
   </strong>
   .
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Preferred Tools
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    Security posture &amp; SIEM:
   </strong>
   Microsoft Defender for Cloud, Microsoft Sentinel, SOAR playbooks
  </li>
  <li>
   <strong>
    Container/Kubernetes security:
   </strong>
   image scanning (Trivy/Anchore), policy-as-code (OPA/Gatekeeper), cosign/Sigstore, Kubernetes audit tools
  </li>
  <li>
   <strong>
    Identity &amp; secrets:
   </strong>
   Azure Entra ID, PIM, Key Vault/KMS/HSM, PAM tooling
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Soft Skills
  </strong>
 </p>
 <ul>
  <li>
   Risk-based
   <strong>
    decision-making
   </strong>
   and ability to articulate trade-offs clearly
  </li>
  <li>
   Strong facilitation of
   <strong>
    threat modeling and security design reviews
   </strong>
  </li>
  <li>
   Clear, structured
   <strong>
    documentation and compliance evidence mindset
   </strong>
  </li>
  <li>
   Calm, decisive leadership during
   <strong>
    incidents and high-pressure situations
   </strong>
  </li>
  <li>
   <strong>
    Collaborative approach
   </strong>
   that enables delivery while maintaining security standards
  </li>
 </ul>
</div>


PROZ TECHNOLOGIES

<p><b>JOB DESCRIPTION</b></p><p>The Cybersecurity Architect defines and governs the end-to-end security architecture for TASMU Platform 2.0 and its vendor-delivered capabilities, ensuring secure-by-design implementation across cloud-agnostic deployments. The role establishes security standards, reference architectures, and assurance processes covering identity, network segmentation, application security, data protection, and operational security monitoring. Working with MCIT, Ooredoo, vendors, and TASMU operations, the architect drives threat modeling, security controls validation, and compliance evidence readiness, including SIEM/SOAR integration, vulnerability management, and incident response procedures. The role ensures consistent security posture across multi-tenant environments and across Azure and any connected clouds.</p><p><b>DUTIES &amp; RESPONSIBILITIES</b></p><ul><li>Define TASMU 2.0 security reference architecture and baseline controls for cloud, Kubernetes, applications, and data services.</li><li>Lead security governance: security design reviews, threat modeling, security exceptions, and risk acceptance processes.</li><li>Define identity and access controls (Entra ID, RBAC, PIM/JIT, conditional access, service principals, secrets management).</li><li>Design network security architecture (segmentation/trust zones, private endpoints, WAF, egress controls, firewall policies).</li><li>Establish application security standards (OWASP, secure SDLC, SAST/DAST, dependency/SBOM, container image signing).</li><li>Define data security controls (classification, encryption/CMK/HSM, DLP, key management, retention, secure deletion).</li><li>Own security monitoring requirements and integrations: Defender for Cloud (CSPM/CWPP), Sentinel (SIEM), SOAR playbooks, alert tuning.</li><li>Define vulnerability management and patching processes for OS/K8s/runtime components, including SLA targets and reporting.</li><li>Support incident response readiness: runbooks, tabletop exercises, forensic logging, evidence handling, and post-incident improvements.</li><li>Provide assurance of vendor deliverables and go-live readiness (pen test coordination, remediation validation, compliance evidence packs).</li></ul><p><b>SKILLS &amp; ABILITIES</b></p><ul><li>Deep understanding of cloud security architecture, zero-trust networking, and Kubernetes/container security.</li><li>Strong capability in IAM design and privileged access governance in regulated environments.</li><li>Ability to translate risk and compliance requirements into practical technical controls and acceptance criteria.</li><li>Experience implementing security monitoring, detection engineering, and incident response processes.</li><li>Strong stakeholder influence and ability to enforce standards across multiple vendors and teams.</li></ul><p><b>POTENTIAL BACKGROUND</b></p><ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, Cybersecurity, a Master&rsquo;s degree is highly preferred</li><li>8+ years in cybersecurity architecture or security engineering roles in government, telco, finance, or critical infrastructure.</li><li>Hands-on experience securing Azure and at least one other cloud (GCP/AWS), including hybrid connectivity and shared responsibility.</li><li>Proven experience with SIEM (Microsoft Sentinel preferred) and CSPM/CWPP (Defender for Cloud preferred).</li><li>Experience with secure SDLC, vulnerability management, penetration testing coordination, and remediation programs.</li><li>Relevant certifications preferred (CISSP/CCSP, CISM, Azure Security Engineer, CKA/CKS, ISO 27001 awareness).</li></ul><p><b>PREFERRED TOOLS / SOFT SKILLS</b></p><p><b>Preferred tools:</b></p><ul><li>Security posture &amp; SIEM: Microsoft Defender for Cloud, Microsoft Sentinel, SOAR playbooks</li><li>Container/K8s security: image scanning (Trivy/Anchore), policy-as-code (OPA/Gatekeeper), cosign/Sigstore, Kubernetes audit tools</li><li>Identity &amp; secrets: Azure Entra ID, PIM, Key Vault/KMS/HSM, PAM tooling</li></ul><p><b>Soft skills:</b></p><ul><li>Risk-based decision-making and ability to articulate trade-offs clearly</li><li>Strong facilitation of threat modeling and security design reviews</li><li>Clear, structured documentation and compliance evidence mindset</li><li>Calm, decisive leadership during incidents and high-pressure situations</li><li>Collaborative approach that enables delivery while maintaining security standards</li></ul><p>Job Type: Permanent</p><p>Pay: Up to QAR20,000.00 per month</p>

Evolver Inc

<div><p>Evolver is a cybersecurity and digital transformation company supporting national defense, federal civilian agencies, and Fortune 500 organizations. We help customers secure critical systems, modernize enterprise technology, and solve complex operational challenges through integrated capabilities spanning cybersecurity, enterprise IT infrastructure, cloud, software development, data analytics, legal technology and eDiscovery, applied AI, and electronic security systems. Our teams combine deep technical expertise with mission understanding to deliver secure, reliable, and scalable solutions that advance performance in high-stakes environments.</p><p></p><p><br>
Evolver is seeking a <b>Senior Cybersecurity Architect </b>to provide technical support services focused on designing and developing automated tools to support rapid maturity in our federal client's cybersecurity organization. The successful candidate is passionate about cybersecurity and driven to implement rapid change to facilitate organizational growth. This role involves implementing automation to facilitate efficiencies in authorization and continuous monitoring processes.</p><p></p><p><b><br>
Responsibilities</b></p><ul><li>
Design and operationalize continuous authorization (cATO) models that replace traditional point-in-time RMF assessments.</li><li>
Develop authorization score engines to automate security posture scoring across systems.</li><li>
Translate NIST SP 800-53 security and privacy control families into machine-testable assertions.</li><li>
Architect technical control validation frameworks to replace narrative compliance attestations.</li><li>
Build automated workflows for control assertion updates driven by new threat tactics, techniques, and procedures.</li><li>
Implement continuous monitoring telemetry pipelines enabling real-time risk posture dashboards.</li><li>
Develop frameworks for automated compliance evidence collection replacing manual artifact-based reporting.</li><li>
Design compensating control frameworks for systems where patching or remediation is not feasible.</li><li>
Lead technical data flow analysis across enterprise systems, identifying hidden security dependencies.</li><li>
Implement cross-system risk aggregation models that provide enterprise risk insights beyond single system ATO boundaries.</li><li>
Perform other duties as assigned by the Government.</li><li>
Ability to work efficiently and effectively in a dynamic and fast-paced environment.</li></ul><p></p><p><b><br>
Basic Qualifications</b></p><ul><li>
A Bachelor's degree and 8 years of related experience
</li><li>5 years of experience supporting compliance or cybersecurity reporting (e.g., FISMA, RMF) required.</li><li>
5 years of experience in applying and conducting control testing in accordance with NIST 800-53.</li><li>
5 years of experience with Continuous ATO (cATO), including experience in designing and implementing processes and tools to support execution of cATO.</li><li>
2 years of experience with continuous monitoring processes specific to DHS, including familiarity with supporting tools such as Splunk, CDM Elastic, Tenable Nessus.</li><li>
5 years of experience in applying risk quantification methods and tools to enable greater transparency and facilitate an enhanced risk posture across the enterprise.</li><li>
5 years of experience with security telemetry, including automating data transmission to facilitate near real time security decisions and remediation efforts.</li><li>
2 years of previous client-engagement experience.</li><li>
Must have active DHS HQ Suitability/ EOD to facilitate transfer.</li><li>
Must have an Active Secret clearance</li></ul><p></p><p><br>
</p><p><b>Preferred Qualifications</b></p><ul><li>
Strong communication and collaboration skills to engage both technical and non-technical stakeholders.</li><li>
Ability to communicate clearly and effectively via written and verbal communication in both formal and informal situations.</li><li>
Ability to clearly communicate complex technical concepts to technical and non-technical POCs.</li><li>
Ability to adapt to frequent changes in priorities, follow project schedules, meet established deadlines, and proactively communicate risks and issues to the Contractor PM and/or Federal Leads.</li><li>
Possess good listening skills and the ability to detect explicit and implicit needs and wants of the client.</li><li>
Demonstrated ability to exercise good judgment, prioritize multiple tasks, and problem solve under pressure of deadlines and resource constraints</li><li>
Possess strong analytical and critical thinking skills with the ability to apply them to the client/ contract workspace.</li><li>
Excellent organizational skills and attention to detail.</li><li>
Strong analytical, critical thinking, and problem-solving skills.</li></ul><p></p><p><br>
Evolver is an equal opportunity employer and welcomes all job seekers. It is the policy of Evolver not to discriminate based on race, color, ancestry, religion, gender, age, national origin, gender identity or expression, sexual orientation, genetic factors, pregnancy, physical or mental disability, military/veteran status, or any other factor protected by law.</p><p></p><p><br>
Actual salary will depend on factors such as skills, qualifications, experience, market and work location. Evolver offers competitive benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies.</p></div>

Senior Cybersecurity Architect

Booz Allen Hamilton

<div>Cybersecurity Architect<p><b>
The Opportunity:</b></p><p>
Are you ready to apply your deep expertise in cybersecurity and cutting-edge technologies to protect our nation&rsquo;s most sensitive information and critical defense operations? As a Cybersecurity Architect for the Department of War, you&rsquo;ll lead strategic initiatives focused on securing government systems, developing advanced security frameworks, and directly contributing to the integrity and confidentiality of mission-critical assets. In this role, you&rsquo;ll design robust architectures that mitigate vulnerabilities, address evolving cyber threats, and ensure the resilience of networks.</p><p></p><p>
As a key leader, you&rsquo;ll implement Zero Trust security models and guide the implementation of advanced solutions across critical systems. You&rsquo;ll evaluate emerging threats, develop solutions tailored to hybrid cloud and on-premise environments, and ensure that all users, devices, and applications are properly authenticated and authorized before accessing sensitive systems. In this leadership role, you&rsquo;ll work closely with system engineers, network engineers, and other key stakeholders to modernize cybersecurity practices, implement resilient architectures, and enhance operational efficiency. Your expertise in endpoint security, risk management, security automation, and compliance monitoring will play a pivotal role in strengthening the defense infrastructure against advanced cyber-attacks.</p><p></p><p>
This position offers opportunities to solve complex challenges, stay ahead of emerging threats, and play a pivotal role in shaping the future of national cyber defense. Your leadership in designing resilient security frameworks and technologies will be instrumental in protecting our nation&rsquo;s security and ensuring operational readiness in the face of rapidly evolving adversaries.</p><p></p><p>
Join us. The world can&rsquo;t wait.</p><p></p><p><b>
You Have:</b></p><ul><li>
5+ years of experience with cybersecurity
</li><li>3+ years of experience leading modernization or transformation workstreams for Threat Detection, Vulnerability Management, Infrastructure Protection, multi-cloud, A&amp;O, or Zero Trust initiatives</li><li>
Experience architecting cyber solutions, roadmaps, and capabilities in alignment with industry standards
</li><li>Experience leading product selection initiatives
</li><li>Knowledge of the ZT technology ecosystem, including ZTNA, IDP, DLP, EDR/XDR, SOAR/SIEM, Threat Detection, Data Tagging, or Comply-to-Connection (C2C), and Compliance Monitoring</li><li>
TS/SCI clearance</li><li>
HS diploma or GED</li><li>
Security+ Certification</li></ul><p></p><p><b>
Nice If You Have:</b></p><ul><li>
Experience in a cybersecurity compliance, operations, or engineering leadership role
</li><li>Experience selecting, designing, and implementing security tools and capabilities for large, complex government organizations
</li><li>Experience with AWS or GCP</li></ul><p></p><p><b>
Clearance</b><b>:</b></p><p>
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.</p><p></p><p><b>
Compensation</b></p><p>
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.</p><p></p>
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.<p></p><p><b>
Identity Statement</b></p><p>
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</p><p></p><p><b>
Work Model</b><br>
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.</p><ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul><p></p><p><b>
Commitment to Non-Discrimination</b></p><p>
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</p></div><p></p>

BambooHR

<div><div><p><i>Please Note: This is a Utah-based hybrid position which will require some regular in-office days each week. Additionally, employment with BambooHR is contingent on passing both a background and credit check.</i></p>
<p></p>
<p><b>AI at BambooHR</b><br>
At BambooHR, we&rsquo;re all about setting people free to do great work, and we believe AI is a powerful partner in that mission. We&rsquo;re leaning into intelligent tools to streamline our workflows, giving us more time for high-impact innovation. We look for curious, forward-thinking people who are ready to explore how AI can elevate their work and help us reimagine the future of HR.</p>
<p></p>
<p><b>Essential Job Duties</b></p>
<p>
The Information Security Architect will lead hands-on security architecture design across BambooHR&rsquo;s cloud environment and corporate information systems, partnering with engineering, IT, and security teams to embed security into platforms, processes, and day-to-day technology decisions. A typical day includes leading architecture and design reviews, defining secure cloud and corporate security patterns, advising on identity and data protection strategies, and guiding teams through complex security tradeoffs to enable secure, scalable delivery.</p>
<p>
The Information Security Architect will own outcomes across cloud and corporate security architecture, delivering scalable designs, standards, and measurable risk reduction. This role operates with a high degree of autonomy and influence, partnering across engineering, IT, product, and security to embed security into how BambooHR designs, builds, and operates.</p>
<p>
You will:</p>
<ul>
<li><div>Lead the design and evolution of security architecture across cloud infrastructure, SaaS platforms, and corporate information systems, ensuring solutions are secure-by-design, scalable, and operationally sustainable.</div>
</li><li><div>Own and maintain security architecture standards, reference architectures, and secure design patterns spanning identity and access management, data protection, logging/telemetry, endpoint security, and third-party integrations.</div>
</li><li><div>Conduct and lead security architecture reviews for new systems, material changes, vendor tools, and integrations; document decisions, required control outcomes, and implementation guidance that teams can execute.</div>
</li><li><div>Drive threat modeling and architectural risk assessments for strategic initiatives; translate findings into prioritized remediation plans and architecture improvements that balance risk reduction with usability and delivery velocity.</div>
</li><li><div>Define and validate cloud security control expectations, including IAM, network segmentation, encryption and key management, secrets management, centralized logging, and least-privilege access models; validate adoption through partnership with engineering and IT.</div>
</li><li><div>Influence detection and response architecture in collaboration with SecOps to improve visibility, telemetry quality, and response effectiveness; support investigations by providing architectural context and remediation guidance as needed.</div>
</li><li><div>Partner with Security Engineering, Application Security, Security Operations, and GRC to ensure security controls are consistently designed and implemented across prevention, detection, response, and governance/audit domains (e.g., SOC 2, ISO 27001, and customer requirements).</div>
</li><li><div>Create clear and accessible architecture documentation (standards, diagrams, patterns, decision records) and communicate security tradeoffs effectively to both technical and non-technical stakeholders.</div>
</li><li><div>Mentor and guide security practitioners and cross-functional partners by improving shared understanding, raising architectural maturity, and promoting consistent adoption of security patterns and secure-by-default approaches.</div>
</li><li><div>Demonstrate an AI-forward mindset and proficiency by actively using AI tools to improve productivity, quality, and decision-making in security architecture and engineering workflows, and be able to speak to real-world examples of using AI to conduct work and to design and implement practical, secure solutions (e.g., accelerating architecture documentation, threat modeling, control validation, detection logic development, policy/standard drafting, or automating analysis).</div>
</li>
</ul><p><b>What You Need to Get the Job Done</b></p>
<ul>
<li><div>Bachelor&rsquo;s degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent professional experience.</div>
</li><li><div>6&ndash;7+ years of hands-on experience in information security, security engineering, cloud security, or closely related roles.</div>
</li><li><div>Demonstrated experience leading security architecture or design decisions for production cloud and/or corporate environments.</div>
</li><li><div>Strong working knowledge of at least one major cloud platform (AWS, Azure, or GCP), including IAM, networking, encryption, key management, and logging.</div>
</li><li><div>Practical experience across corporate security domains such as identity and access management, endpoint security, SaaS governance, and data protection.</div>
</li><li><div>Ability to independently assess risk, define security control objectives, and translate them into clear architectural guidance and implementation requirements.</div>
</li><li><div>Ability to drive architectural consistency across diverse cloud and corporate systems with varying ownership and constraints.</div>
</li><li><div>Experience balancing security risk reduction with delivery speed, usability, and operational realities.</div>
</li><li><div>Excellent written and verbal communication skills, with the ability to influence and align technical and non-technical stakeholders.</div>
</li><li><div>Strong organizational and prioritization skills; ability to manage multiple initiatives in a fast-paced environment.</div>
</li><li><div>Experience in a SaaS or cloud-first organization.</div>
</li>
</ul><p><b>What Will Make Us REALLY Love You</b></p>
<ul>
<li><div>Experience supporting SOC 2, ISO 27001, and customer security assessments.</div>
</li><li><div>Familiarity with infrastructure-as-code, CI/CD pipelines, and cloud-native architectures.</div>
</li><li><div>Experience with SSO/IdP platforms, MDM/endpoint management tools, and modern SaaS security controls.</div>
</li><li><div>Security certifications such as AWS Security Specialty, CCSK, SSCP, CISSP (Associate or full), or equivalent.</div>
</li>
</ul><p><b>What You'll Love About Us</b></p>
<ul>
<li>A Great Company Culture that has been recognized by multiple organizations like Inc, and Salt Lake Tribune</li>
<li>Comprehensive health, life, and disability insurance</li>
<li>Generous leave policies that include 4 weeks of vacation, 12 company holidays, parental leave, and volunteer time off so you can enjoy quality of life</li>
<li>401k plans with up to 6% company match</li>
<li>$2000 Paid-Paid Vacation bonus</li>
<li>EAP through Headspace</li></ul></div><p></p><div><br>
<p><b>
About Us</b></p>
<p>
At BambooHR, we're building something different: we're building a people intelligence platform that transforms HR and sets people free to do great work! We're a proven market leader driving innovation while building lasting success through thoughtful, sustainable growth. Here, you'll find a place that champions growth: both professional and personal, both individual and collective.</p>
<p>
We invest in potential, giving you the space to stretch your capabilities and turn good ideas into reality while providing the safety net of a supportive, values-driven culture. Our approach combines meaningful work with meaningful lives, offering competitive benefits, professional development, and the flexibility to thrive both in and outside the office.</p>
<p>
What sets us apart isn't just what we do, but how we do it: with openness, integrity, and a shared commitment to doing the right thing. Join us in creating HR software that makes work better for everyone, while we make work better for you.</p>
<p></p>
<p><b><i>BambooHR is committed to the full inclusion of all qualified individuals and will ensure that persons with disabilities are provided reasonable accommodations throughout the hiring process. If you would like to request accommodations, please let your recruiter know.</i></b></p>
<p><b><i>
BambooHR is An Equal Opportunity Employer-M/F/D/V</i></b><br>
<b><i>Because our team members are trusted to handle sensitive information, we require all candidates that receive and accept employment offers to complete a background check before being hired.</i></b></p><br>
<p></p>
<p><b><i>
Our process utilizes AI as an assistant to efficiently process and analyze candidate data. Recruiters and hiring managers maintain full oversight and accountability, ensuring that all final selection and rejection decisions are human-made and based solely on objective job qualifications. Please see our </i></b><b><i>General Privacy Notice</i></b><b><i> and </i></b><b><i>California Privacy Notice</i></b><b><i> for more details.</i></b></p>
<p><b><i>
See our </i></b><b><i>AI Guidelines for Candidates</i></b><b><i> for details on how BambooHR uses AI in recruiting, how we expect candidates to use AI, and what is not allowed.</i></b></p></div></div>

Information Security Architect

Search 10000+ Senior information security architect jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 senior information security architect jobs Near Me

Senior Manager - Cybersecurity Security Architecture

Cybersecurity Architect

Cybersecurity Architect

Cybersecurity Architect

Senior Cybersecurity Architect

Cybersecurity Architect

Information Security Architect