senior security architect

Dragonfli Group LLC

<div><p><b>ABOUT DRAGONFLI GROUP</b></p><p>
Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal, state, and municipal government agencies as well as Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments.</p><p></p><p><b><br>
ROLE SUMMARY</b></p><p>
Dragonfli Group is seeking an experienced Senior Cloud Security Architect to support a federal government client. In this role, you will lead the strategic vision for protecting a large-scale multi-cloud ecosystem, designing security blueprints that govern the entire digital footprint&mdash;from identity perimeters to AI-driven threat detection. This position requires a &quot;Security as Code&quot; mindset, where automated guardrails empower development teams to move at speed without compromising data or infrastructure safety.</p><p>
The ideal candidate brings 12+ years of cybersecurity experience, with at least 6 years architecting secure cloud environments at scale across AWS, Azure, or GCP. You will serve as a trusted security advisor, bridging the gap between DevOps agility and rigorous regulatory compliance in a high-visibility federal environment.</p><p></p><p><b><br>
KEY RESPONSIBILITIES</b></p><ul><li>
Lead the design of a global Zero Trust architecture, ensuring robust identity governance (IAM), network micro-segmentation, and data encryption across AWS, Azure, and/or GCP</li><li>
Architect specialized security frameworks for AI/ML pipelines, focusing on data privacy for training sets, model integrity, and securing LLM-integrated applications against emerging attack vectors</li><li>
Develop and enforce enterprise-wide security policies using Infrastructure-as-Code tools (e.g., Terraform), ensuring non-compliant infrastructure is automatically remediated or blocked from deployment</li><li>
Design and oversee integration of CNAPP and CSPM tools to provide real-time visibility into misconfigurations, vulnerabilities, and excessive permissions</li><li>
Conduct deep-dive threat modeling for complex cloud-native systems, simulating advanced persistent threats (APTs) and blast-radius scenarios to strengthen system resilience</li><li>
Drive the organization's transition to a Zero Standing Privilege model for all production environments</li><li>
Achieve automated auditing for core compliance frameworks, including NIST and CIS Benchmarks</li><li>
Leverage AI-driven monitoring to minimize Mean Time to Detect (MTTD) anomalous cloud activity</li><li>
Act as lead security advisor for the Cloud Architecture team, bridging DevOps agility with rigorous regulatory compliance (SOC 2, FedRAMP)</li><li>
Communicate security risks, architecture decisions, and roadmap recommendations clearly to C-suite and executive stakeholders</li><li>
Embed automated security testing (SAST/DAST/SCA) directly into CI/CD pipelines as part of a mature DevSecOps practice</li></ul><br>
<p></p>
Requirements:<br>
<br>
<p><b>Must-Have Qualifications</b></p><ul><li>
12+ years of experience in Cybersecurity, with at least 6 years focused on architecting secure cloud environments at scale</li><li>
Demonstrated expertise designing and implementing Zero Trust architectures across multi-cloud environments (AWS, Azure, or GCP)</li><li>
Expert knowledge of Identity-First Security, including Cloud Infrastructure Entitlement Management (CIEM), Just-In-Time (JIT) access provisioning, and complex OIDC/SAML federation flows</li><li>
Hands-on proficiency with cloud-native security suites: AWS Security Hub, Azure Defender, and/or GCP Security Command Center</li><li>
Experience developing Policy as Code frameworks using Terraform or equivalent IaC tooling for automated compliance enforcement</li><li>
Proficiency in scripting and automation languages (Python, Go, or Bash) for custom security automations and SOAR platform integration</li><li>
Deep experience embedding security testing (SAST/DAST/SCA) into CI/CD pipelines within a DevSecOps framework</li><li>
Advanced understanding of secure cloud networking, including SD-WAN, Cloud WAF, and Zero Trust Network Access (ZTNA)</li><li>
Working knowledge of CNAPP and CSPM tooling for cloud posture management and misconfiguration remediation</li><li>
Familiarity with regulatory and compliance frameworks including NIST, CIS Benchmarks, and SOC 2</li></ul><p></p><p><b><br>
Preferred / Desired Qualifications</b></p><ul><li>
Advanced degree in Computer Science, Cybersecurity, or a related engineering discipline</li><li>
Active top-tier security certifications (e.g., CISSP, CCSP, AWS Security Specialty, GCP Professional Cloud Security Engineer, Azure Security Engineer Associate, or equivalent)</li><li>
Prior experience in a federal government or public-sector consulting environment; familiarity with FedRAMP and FISMA compliance</li><li>
Experience architecting security frameworks for AI/ML pipelines and LLM-integrated applications</li><li>
Proven track record implementing Zero Standing Privilege models in large enterprise or government environments</li><li>
Experience operating at the executive advisory level, presenting security risk posture and roadmap to C-suite leadership</li><li>
Familiarity with SOAR platforms and AI-driven threat detection tooling for cloud environments</li></ul><br>
<p></p>
Skill(s):<br>
<br>
<p><b>TECHNICAL SKILLS</b></p><p><b>
Cloud Security Platforms</b></p><ul><li>
AWS Security Hub, Amazon GuardDuty, AWS IAM, AWS Organizations SCPs</li><li>
Microsoft Azure Defender for Cloud, Azure Sentinel, Azure Active Directory / Entra ID</li><li>
Google Cloud Security Command Center, Chronicle SIEM</li></ul><p><b>
Identity &amp; Access Management</b></p><ul><li>
Cloud Infrastructure Entitlement Management (CIEM)</li><li>
Just-In-Time (JIT) access provisioning frameworks</li><li>
OIDC, SAML 2.0, OAuth 2.0 federation and SSO architectures</li></ul><p><b>
Automation &amp; DevSecOps</b></p><ul><li>
Infrastructure as Code: Terraform, AWS CloudFormation, Pulumi</li><li>
Scripting: Python, Go, Bash</li><li>
CI/CD security integration: SAST, DAST, SCA tooling (e.g., Snyk, Checkov, Semgrep)</li><li>
SOAR platforms: Splunk SOAR, Microsoft Sentinel Automation, Palo Alto XSOAR</li></ul><p><b>
Cloud Networking &amp; Perimeter</b></p><ul><li>
Zero Trust Network Access (ZTNA) architecture and implementation</li><li>
Cloud WAF, SD-WAN, and secure connectivity design</li><li>
Network micro-segmentation and east-west traffic controls</li></ul><p><b>
Compliance &amp; Governance</b></p><ul><li>
NIST SP 800-53, CIS Benchmarks, SOC 2, FedRAMP, FISMA</li><li>
CNAPP and CSPM tools: Prisma Cloud, Wiz, Orca Security, or equivalent</li><li>
Threat modeling methodologies: STRIDE, MITRE ATT&amp;CK for Cloud</li></ul><br>
<p></p>
Benefits:<br>
<br>
<p>Dragonfli Group offers a comprehensive benefits package to support the health, financial well-being, and work-life balance of our team members:</p><ul><li>
Insurance &ndash; Comprehensive health, dental, and vision coverage for employees and eligible dependents</li><li>
Paid Time Off (PTO) and 11 Federal Holidays &ndash; Generous PTO accrual plus all 11 federally recognized holidays</li><li>
401(k) with Employer Match &ndash; Competitive employer match to support your long-term financial goals</li></ul></div>

Senior Cloud Security Architect

Xcel Energy

<div><p>Are you looking for an exciting job where you can put your skills and talents to work at a company you can feel proud to be a part of? Do you want a workplace that will challenge you and offer you opportunities to learn and grow? A position at Xcel Energy could be just what you&rsquo;re looking for.</p><p></p><div><div><p>
We have 1 open position for an AI-focused Security Architect (Sr or Principal) and 1 open position for an OT-focused Security Architect (Sr. or Principal). Both descriptions below &ndash;</p></div><p></p><div><p><b><br>
AI-focused Security Architect</b></p></div><p></p><div><p><b>
Position Summary</b></p></div><div><p>
This is a hybrid AI/IAM Security Architect role; ensure that Xcel&rsquo;s artificial intelligence (AI) and machine learning (ML) capabilities are designed, deployed, and operated securely&mdash;while also serving as a security architecture lead for Identity &amp; Access Management (IAM) more broadly across the enterprise (not limited to agentic or AI-specific identity). This role provides security oversight for AI-enabled products and platforms (including generative AI/LLM solutions) and for IAM capabilities such as authentication, authorization, privileged access, and identity governance, partnering with engineering, data, infrastructure, and business teams to define secure-by-design patterns from the ground up. A successful candidate will combine strategic thinking with hands-on technical depth across AI/ML architectures, data protection, IAM architecture, and emerging threats. They will advise stakeholders on methods and practices that achieve business outcomes while reducing risk, and will champion standards, architectural patterns, and governance that strengthen the security and trustworthiness of Xcel&rsquo;s AI footprint and IAM program. This role is part of the larger security architecture organization and will collaborate with peers as well as technology and business teams.</p></div><p></p><div><p><b>
Essential Responsibilities</b></p></div><div><ul><li><p>
AI &amp; IAM Security Architecture: Design security reference architectures and guardrails for AI/ML and generative AI solutions and for enterprise IAM capabilities, including authentication, authorization, privileged access, identity governance, and secure integration patterns.</p></li></ul></div><div><ul><li><p>
AI &amp; IAM Security Governance: Define and maintain control baselines and guardrails for AI-enabled platforms and enterprise IAM (e.g., model inventory, risk tiering, approval gates; identity standards, access reviews, and privileged access requirements) and ensure compliance drift is detected and addressed.</p></li></ul></div><div><ul><li><p>
Threat Modeling &amp; Risk Analysis: Conduct threat modeling and risk assessments for AI use cases (e.g., prompt injection, data leakage, model inversion/extraction, supply-chain risks) and provide advisory services to programs and operations.</p></li></ul></div><div><ul><li><p>
Secure AI Engineering Practices: Partner with product and engineering teams to embed security requirements into the AI lifecycle (data sourcing, training/fine-tuning, evaluation, deployment, monitoring, and retirement).</p></li></ul></div><div><ul><li><p>
Regulation, Privacy, and Compliance: Ensure AI solutions and IAM controls align with applicable regulatory expectations and internal policies (e.g., privacy, critical infrastructure requirements), including controls for sensitive data used in AI workflows.</p></li></ul></div><div><p><b><br>
Minimum</b><b> </b><b>Requirements</b><b> </b><b>(Senior Security Architect)</b><b> </b><b>&ndash;</b><b> </b><b>$112,200 - 159,400</b><b>:</b></p></div><div><ul><li><p>
Minimum of 8 years&rsquo; experience in IT including 5 years&rsquo; direct experience in IT engineering and cyber security.</p></li></ul></div><div><ul><li><p>
Demonstrated verbal/written communication and presentation skills.</p></li></ul></div><div><ul><li><p>
Demonstrated experience collaborating with internal stakeholders, 3rd parties, and management.</p></li></ul></div><div><ul><li><p>
Ability to influence without direct authority.</p></li></ul></div><div><ul><li><p>
Experience with technology implementation projects for enterprise-scale organizations.</p></li></ul></div><div><p><b><br>
Minimum</b><b> </b><b>Requirements</b><b> </b><b>(Principal Security Architect)</b><b> </b><b>&ndash;</b><b> </b><b>$129,000 &ndash; 183,200:</b></p></div><div><ul><li><p>
5 years of experience in systems architecture or systems engineering.</p></li></ul></div><div><ul><li><p>
10 years of experience in Information Security.</p></li></ul></div><div><ul><li><p>
3 years of experience designing complex systems.</p></li></ul></div><div><ul><li><p>
3 years of experience with systems integration and engineering.</p></li></ul></div><div><ul><li><p>
Strong oral and written communication skills.</p></li></ul></div><div><ul><li><p>
Must be able to understand and respond to clients' business needs.</p></li></ul></div><div><ul><li><p>
Demonstrated experience collaborating with internal employees, third parties, and management to develop solutions and ensure stakeholder buy-in.</p></li></ul></div><div><ul><li><p>
Ability to influence without direct authority.</p></li></ul></div><div><ul><li><p>
Preferred: Information Security experience in the electric utility industry.</p></li></ul></div><div><ul><li><p>
Preferred: Experience with technology implementation projects for enterprise-scale organizations.</p></li></ul></div><div><p><b><br>
Preferred Requirements</b></p></div><div><ul><li><p>
Hands-on experience with AI models and solutions (including generative AI/LLMs), such as model selection/integration, training or fine-tuning, retrieval-augmented generation (RAG), inference services, and model monitoring/operations in a production environment.</p></li></ul></div><div><ul><li><p>
Strong understanding of AI security threats and mitigations (e.g., prompt injection, insecure tool/function calling, data leakage, jailbreaks, model inversion/extraction, poisoning, and supply-chain risks).</p></li></ul></div><div><ul><li><p>
Experience with enterprise IAM patterns and controls (e.g., SSO/federation, OAuth2/OIDC, RBAC/ABAC, conditional access, managed identities/service principals, and PAM), applied across enterprise applications and cloud platforms; experience applying these patterns to AI/ML platforms and data services is a plus.</p></li></ul></div><div><ul><li><p>
Experience with IAM architecture and/or operations, such as identity governance (IGA), access reviews and attestations, role engineering, conditional access, and privileged access management (PAM).</p></li></ul></div><div><ul><li><p>
Knowledge of relevant regulations and compliance requirements such as NERC-CIP, TSA, and SOX, plus emerging AI/privacy and IAM-related regulatory expectations as applicable.</p></li></ul></div><div><ul><li><p>
Experience partnering with product, data, platform, and MLOps/DevOps teams to deliver secure AI solutions and to implement IAM controls (e.g., least privilege access, service identity, and privileged access workflows).</p></li></ul></div><div><ul><li><p>
Familiarity with AI governance and risk management practices (e.g., model inventory, documentation, human oversight, third-party model/vendor risk).</p></li></ul></div></div><p></p><div><div><p><b><br>
OT-focused Security Architect</b></p></div><div><p><b><br>
Position Summary</b></p></div><div><p>
The security architect ensures that Xcel&rsquo;s technology services are designed and delivered securely across both Information Technology (IT) and Operational Technology (OT) environments. This role emphasizes security for industrial and critical infrastructure facilities such as electric substations, gas compressor stations, and generation sites. This is an opportunity to partner with operations and engineering teams to define practical security approaches that protect reliability and safety while enabling business outcomes. A successful candidate will bring hands-on experience in roles such as controls engineering, field technician/field operations, or industrial control system (ICS) design or operations, along with strong security architecture skills. They will advise stakeholders on security methods and practices, champion best practices and standards that reduce risk across Xcel&rsquo;s footprint, and collaborate with peers across security, technology, and business teams.</p></div><div><p><b><br>
Essential Responsibilities</b></p></div><div><ul><li><p>
OT/ICS Security Architecture: Work with the business to define security patterns and reference architectures for industrial control environments (e.g., SCADA, DCS, PLC/HMI).</p></li></ul></div><div><ul><li><p>
Network Segmentation &amp; Remote Access: Define and govern segmentation (zones/conduits), secure remote access, and monitoring strategies for OT networks and vendor/contractor connectivity.</p></li></ul></div><div><ul><li><p>
Governance &amp; Standards: Develop security control baselines, hardening standards, and exception processes for OT assets and supporting infrastructure; ensure compliance drift is managed.</p></li></ul></div><div><ul><li><p>
Operational Collaboration: Partner with controls engineering, field technicians, plant operations, and maintenance teams to implement security improvements that work in real-world operating environments.</p></li></ul></div><div><ul><li><p>
Incident Readiness: Improve detection and response for OT environments, including logging/telemetry requirements, playbooks, and tabletop exercises with operations.</p></li></ul></div><div><ul><li><p>
Documentation and Reusability: Create products such as use cases and implementation patterns.</p></li></ul></div><div><ul><li><p>
Regulation and Compliance: Ensure adherence to regulatory frameworks such as NERC CIP and TSA Security Directive 2, including applicability to OT facilities and supporting IT/cloud services where used.</p></li></ul></div><div><p><b><br>
Minimum</b><b> </b><b>Requirements</b><b> </b><b>(Senior Security Architect)</b><b> </b><b>&ndash; comp range:</b><b> </b><b>$112,200 - 159,400</b></p></div><div><ul><li><p>
Minimum of 8 years&rsquo; experience in IT including 5 years&rsquo; direct experience in IT engineering and cyber security.</p></li></ul></div><div><ul><li><p>
Demonstrated verbal/written communication and presentation skills.</p></li></ul></div><div><ul><li><p>
Demonstrated experience collaborating with internal stakeholders, 3rd parties, and management.</p></li></ul></div><div><ul><li><p>
Ability to influence without direct authority.</p></li></ul></div><div><ul><li><p>
Experience with technology implementation projects for enterprise-scale organizations.</p></li></ul></div><div><p><b><br>
Minimum</b><b> </b><b>Requirements</b><b> </b><b>(Principal Security Architect)</b><b> </b><b>&ndash; comp range:</b><b> </b><b>$129,000 &ndash; 183,200</b></p></div><div><ul><li><p>
5 years of experience in systems architecture or systems engineering.</p></li></ul></div><div><ul><li><p>
10 years of experience in Information Security.</p></li></ul></div><div><ul><li><p>
3 years of experience designing complex systems.</p></li></ul></div><div><ul><li><p>
3 years of experience with systems integration and engineering.</p></li></ul></div><div><ul><li><p>
Strong oral and written communication skills.</p></li></ul></div><div><ul><li><p>
Must be able to understand and respond to clients' business needs.</p></li></ul></div><div><ul><li><p>
Demonstrated experience collaborating with internal employees, third parties, and management to develop solutions and ensure stakeholder buy-in.</p></li></ul></div><div><ul><li><p>
Ability to influence without direct authority.</p></li></ul></div><div><ul><li><p>
Preferred: Information Security experience in the electric utility industry.</p></li></ul></div><div><ul><li><p>
Preferred: Experience with technology implementation projects for enterprise-scale organizations.</p></li></ul></div></div><p></p><div><div><p><b><br>
Preferred Requirements</b></p></div><div><ul><li><p>
5+ years of experience in security architecture, cybersecurity engineering, or control systems engineering, including work that interfaces with industrial/OT environments.</p></li></ul></div><div><ul><li><p>
Hands-on experience with OT/ICS technologies and environments (e.g., SCADA, PLC/HMI, DCS) and the operational constraints of critical infrastructure.</p></li></ul></div><div><ul><li><p>
Knowledge of network segmentation concepts and secure remote access patterns for OT/vendor connectivity.</p></li></ul></div><div><ul><li><p>
Experience with OT security frameworks and guidance (e.g., IEC 62443, NIST SP 800-82) and applying them pragmatically in operating environments.</p></li></ul></div><div><ul><li><p>
Experience working with vendors/contractors supporting industrial equipment and control systems, including secure access and support models.</p></li></ul></div><div><ul><li><p>
Certifications such as GICSP, CISSP, CCSP, CCSK, or AWS Certified Security.</p></li></ul></div><div><ul><li><p>
Knowledge of relevant regulations and compliance requirements such as NERC CIP, TSA, and 10 CFR 810.</p></li></ul></div></div><p></p><p><br>
As a leading combination electricity and natural gas energy company, Xcel Energy offers a comprehensive portfolio of energy-related products and services to 3.4 million electricity and 1.9 million natural gas customers across eight Western and Midwestern states. At Xcel Energy, we strive to be the preferred and trusted provider of the energy our customers need. If you&rsquo;re ready to be a part of something big, we invite you to join our team.</p><p></p><p>
All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.</p><p></p><p>
Individuals with a disability who need an accommodation to apply please contact us at recruiting@xcelenergy.com.</p><p></p>
Non-Bargaining<p></p>
The anticipated starting base pay for this position is: $112,200.00 to $183,200.00 per year<p></p>
This position is eligible for the following benefits: Annual Incentive Program, Medical/Pharmacy Plan, Dental, Vision, Life Insurance, Dependent Care Reimbursement Account, Health Care Reimbursement Account, Health Savings Account (HSA) (if enrolled in eligible health plan), Limited-Purpose FSA (if enrolled in eligible health plan and HSA), Transportation Reimbursement Account, Short-term disability (STD), Long-term disability (LTD), Employee Assistance Program (EAP), Fitness Center Reimbursement (if enrolled in eligible health plan), Tuition reimbursement, Transit programs, Employee recognition program, Pension, 401(k) plan, Paid time off (PTO), Holidays, Volunteer Paid Time Off (VPTO), Parental Leave<p></p><p>
Benefit plans are subject to change and Xcel Energy has the right to end, suspend, or amend any of its plans, at any time, in whole or in part.</p><p></p><p>
In any materials you submit, you may redact or remove age-identifying information including but not limited to dates of school attendance and graduation. You will not be penalized for redacting or removing this information.</p><p></p>
Deadline to Apply: 05/08/26<p></p><p>
EEO is the Law | EEO is the Law Supplement | Pay Transparency Nondiscrimination | Equal Opportunity Policy (PDF) | Employee Rights (PDF)</p><p></p><p>
All Xcel Energy employees and contractors share responsibility for protecting the company's information and systems by adhering to cybersecurity policies, standards, and best practices, recognizing that cybersecurity is everyone's responsibility.</p><p></p><p><b><br>
ACCESSIBILITY STATEMENT</b></p><p>
Xcel Energy endeavors to make https://www.xcelenergy.com/ accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact Xcel Energy Talent Acquisition at recruiting@xcelenergy.com. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.</p></div>

Senior / Principal Security Architect (AI/OT)

AHU Technologies

<div><div><div><b>Job Description:</b><br>
</div><div><b>Short Description</b>:<br>
</div><div>16+ years of experience. Analyzes, designs, and implements networks to withstand security intrusions.<br>
</div><div><b>Complete Description:</b><br>
<b>Employment Type: Contract w2/1099/C2C</b><br>
</div><div>The role involves supporting the replacement, lifecycle management, and upgrade of networking equipment such as switches, routers, firewalls, and related hardware across the agency&rsquo;s environment. The specialist develops and maintains detailed network documentation, including logical and physical diagrams, system interfaces, rack elevations, cabling records, and equipment inventories for 911 and 311 operations. They also maintain thorough configuration documentation, standard operating procedures, change records, and disaster recovery materials specific to mission‑critical systems. The position monitors network performance, identifies vulnerabilities or bottlenecks, and implements corrective measures to ensure high availability for 24/7 emergency communications. Additionally, the specialist troubleshoots complex network issues affecting 911 operations, performs root‑cause analysis, and restores service rapidly. The role includes managing and supporting two data centers hosting critical 911 applications, ensuring continuous availability, redundancy, and compliance with public‑safety requirements.<br>
<br>
 <br>
<b>CONTRACT JOB DESCRIPTION</b><br>
<b> Responsibilities:</b><br>
</div><ul><li>Knowledge of network analysis related to infrastructure design.</li>
<li>May be an expert in security or intrusion detection.</li>
<li>Proficient in proprietary network technology.</li>
<li>Advanced experience with, but not limited to, routers, firewalls, switches, and servers.</li>
<li>Advanced knowledge in network analysis.</li>
<li>Advanced problem resolution and project management skills.</li>
<li>Designs and implements class wide area networks.</li>
<li>Experience with Firewalls, VPN, encryption, intrusion detection and prevention systems, and penetration testing.</li>
<li>Knowledge of network vulnerabilities and be able to mitigate and prevent each one.</li>
<li>Supporting the replacement, lifecycle management, and upgrade of networking equipment, including core, distribution, and access layer switches; routers; firewalls; and related hardware used across the agency&rsquo;s network environment</li>
<li>Creating, maintaining, and improving detailed network diagrams for all agency systems, including logical network maps, physical connectivity diagrams, and system‑to‑system interfaces used by 911 and 311 operations.</li>
<li>Developing and maintaining rack elevation diagrams, equipment inventories, and cabling documentation for data centers, communications rooms, and remote agency sites</li>
<li>Preparing and maintaining documentation of network configurations, standard operating procedures, change records, and disaster recovery materials specific to the 911 environment.</li>
<li>Monitoring network performance and availability, identifying bottlenecks or vulnerabilities, and implementing corrective actions to ensure the resiliency required for 24/7 emergency communications</li>
<li>Troubleshooting complex network issues affecting critical 911 operations, conducting root‑cause analysis, and restoring service quickly while documenting findings</li>
<li>Managing and supporting two data centers that host mission‑critical 911 applications, ensuring continuous availability, redundancy, and compliance with public‑safety operational requirements</li>
</ul><div><b>Minimum Education/Certification Requirements:</b><br>
Bachelor&rsquo;s degree in IT or related field or equivalent experience<br>
</div><div><b>Skills Matrix</b><br>
</div><ul><li>16+ yrs. analyzing networks related to infrastructure design</li></ul><br>
<ul><li>16+ yrs. identifying best practices and standards for the use of the product</li></ul><br>
<ul><li>16+ yrs. supporting and designing industry specific technologies that require integration with systems or networks</li></ul><br>
<ul><li>Bachelor&rsquo;s degree in IT or related field or equivalent experience</li></ul></div></div>

Senior Network Security Architect

Microsoft

<div><b>Overview</b><p><br>
With more than 45,000 employees and partners worldwide, the Customer Experience and Success (CE&amp;S) organization is on a mission to empower customers to accelerate business value through differentiated customer experiences that leverage Microsoft&rsquo;s products and services, ignited by our people and culture. We drive cross-company alignment and execution, ensuring that we consistently exceed customers&rsquo; expectations in every interaction, whether in-product, digital, or human-centered. CE&amp;S is responsible for all up services across the company, including consulting, customer success, and support across Microsoft&rsquo;s portfolio of solutions and products. Join CE&amp;S and help us accelerate AI transformation for our customers and the world.</p><p>
The Global Customer Success (GCS) organization, an organization within CE&amp;S, is leading the effort to enable customer success on the Microsoft Cloud by harnessing leading, AI-powered capabilities and human expertise to deliver innovation solutions that accelerate business value, drive operational excellence and nurture long term loyalty</p><p>
As a Senior Global Solution Architect - Security in the worldwide Customer Success security team, you support our customers in making their environment more secure. Your focus will be on Security thought leadership and execution, including supporting complex S500 customer use cases; authoring Voice-of-the-customer whitepapers to help influence the product roadmap; and directly influencing the Customer Success Unit (CSU) Intellectual Property (IP) Development direction for Microsoft Security technologies. You evaluate the customer's security posture and help them understand how the Microsoft security portfolio will accomplish their goals. Security Global Solution Architects (GSAs) work very closely with the field and Engineering to remove technical blocker in the customer's security journey.</p><p>
Microsoft&rsquo;s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.</p><b><br>
Responsibilities</b><br>
<ul><li>
Help customers create their security plan and strategy to transform their security practices to a more modern and cloud-native approach, using Microsoft security solutions.</li><li>
Proposes viable solutions based on specific MS security products, demonstrates complex concepts, and proves the capability of those solutions through design collaboration sessions with the customers.</li><li>
Apply technical knowledge of security architecture and solutions to meet business and information technology requirements and resolve identified technical blockers.</li><li>
Supports customer projects as a subject matter expert in a specific Microsoft Security solution.</li><li>
Gather customer insights (e.g., feedback around technical preferences, environments, business needs) and leverages these insights and existing plans to map solutions with customer business outcomes. Identifies technical blockers to accelerate consumption and deployment.</li></ul><br>
<b>
Qualifications</b><p><b><br>
Required/minimum Qualifications</b></p><ul><li>
Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, or related field AND 4+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting<ul><li>
OR equivalent experience.</li></ul></li></ul><p><b>
Other Requirements</b></p><p>
This position is not eligible for visa sponsorship. Candidates must have authorization to work in the United States that does not now or in the future require employer sponsorship.
</p><p><b>Additional or Preferred Qualifications</b></p><ul><li>
3+ years of success in delivering complex technical security and compliance deployment projects, architecture, design, implementation, and/or support of highly distributed infrastructure and applications</li><li>
Technical Experience: Deep-dive experience and knowledge across cloud security computing domains and hands-on experience in Microsoft Security &ndash; Security information and event management (SIEM) &amp; Extended Detection and Response (XDR), Data Security, Endpoint Security, Cloud Security, and Identity with expertise in one or more of the following products:</li><li><ul><li>
Microsoft Sentinel</li><li>
Microsoft Purview (MIP, DLP, IRM)</li><li>
Microsoft Defender</li><li><ul><li>
Defender for Endpoint (MDE)</li><li>
Defender for Office (MDO)</li><li>
Defender for Identity (MDI)</li><li>
Defender for Cloud (MDC)</li><li>
Defender for Cloud Apps (MDCA)</li></ul></li><li>
Microsoft Entra</li></ul></li><li>
Enterprise-scale technical experience with cloud security, hybrid infrastructure security, and network security</li><li>
Certification in one or more of the following technologies preferred: Microsoft Azure and Security architecture, Microsoft Security, CISSP, CCSP, etc.</li></ul><br>
<br>
<br>
<p>Cloud Solution Architecture IC4 - The typical base pay range for this role across the U.S. is USD $106,400 - $203,600 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $137,600 - $222,600 per year.
</p><p></p><p>Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:<br>
https://careers.microsoft.com/us/en/us-corporate-pay</p><p><br>
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.</p><p></p><p><br>
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process<b>.</b></p></div>

Senior Global Solution Architect - Security

Ceenex Global LLC

<p>We are Hiring!!!</p><p><b>#UAEjobs</b> <b>#DubaiJobs</b> <b>#NetworkEngineer</b><br/><b>#CCIE</b> <b>#Senior</b> <b>#L3</b></p><p>Position<br/>- Senior L3 Network Admin&ndash; Security, Cloud &amp; Enterprise Networks</p><p>Location<br/>- Dubai, UAE</p><p>Experience<br/>- 8+ years</p><p>Salary<br/>- Max 20000 AED + Benefits</p><p>Job<br/>Summary</p><p>We are seeking a highly senior L3 Network Engineer / Network Architect with 8&ndash;10<br/>years of hands-on enterprise experience to provide architecture-level support, lead complex network design validation, and drive network optimization, security posture, and availability improvements across enterprise and hybrid cloud environments. The<br/>role requires CCIE-level expertise, deep Azure networking skills at L3 level,<br/>and strong leadership in critical escalations, Zero Trust implementation, and governance.</p><p>Experience</p><p>&middot; 8&ndash;10 years of experience in enterprise network engineering, with senior L3 / architect-level ownership</p><p>&middot; Proven experience leading large-scale, mission-critical network environments</p><p>Technical Expertise (Mandatory)</p><p>&middot; CCIE (Enterprise Infrastructure or<br/>Security) &ndash; <b>#mandatory</b></p><p>&middot; Palo Alto Firewalls (expert level,<br/>including segmentation &amp; Zero Trust)</p><p>&middot; Cisco Firepower Threat Defense (FTD)</p><p>&middot; Microsoft Azure Networking &ndash; L3<br/>level</p><p>&middot; Cisco DNAC, Cisco ISE, Cisco WLC</p><p>&middot; F5 Load Balancers</p><p>&middot; Strong expertise in BGP, OSPF,<br/>SD-WAN, LAN/WAN</p><p>&middot; Solid understanding of DNS, DHCP,<br/>and enterprise network services</p><p>Certifications<br/>(Mandatory / Preferred)</p><p>&middot; CCIE &ndash; Enterprise Infrastructure or<br/>Security (<b>#Mandatory</b>)</p><p>&middot; Palo Alto Networks: PCNSE (strongly<br/>preferred)</p><p>&middot; Microsoft Azure: AZ-700 (Azure<br/>Network Engineer Associate)</p><p>&middot; F5 Networks: F5 Certified<br/>Administrator / Specialist</p><p>&middot; ITIL&reg; 4 Foundation (preferred)</p><p>APPLY AS SOON AS POSSIBLE!</p><p>Email- greeshma@ceenexglobal.com</p><p>Job Type: Full-time</p><p>Pay: AED16,000.00 - AED20,000.00 per month</p><p>Work Location: In person</p>

Senior L3 Network Admin– Security, Cloud & Enterprise

NODA AI

<div><p><b>Location:</b> Qatar (CENTCOM AOR) (Home office: Austin, TX)</p><p><b>
Travel:</b> Mission-dependent, up to ~75% (OCONUS rotations)</p><p><b>
Clearance Requirement:</b> Active Secret required</p><h2 class="jobSectionHeader"><b>
About NODA</b></h2><p>
NODA is a veteran-owned Series A defense technology company building the orchestration layer for autonomous unmanned systems. Our platform &mdash; URZA &mdash; coordinates fleets of heterogeneous vehicles across air, sea, and land for defense and intelligence customers. We expect every hire to be mission-driven with strong agency.</p><div><br>
</div><h2 class="jobSectionHeader"><b>
The Role</b></h2><p>
We are seeking a senior <b>full-stack engineer</b> to lead URZA deployment and customer-facing technical delivery across active customer programs. <b>This req can land at either Senior Solution Engineer (L5) or Solution Architect (L6)</b> depending on demonstrated depth &mdash; see leveling below.</p><p>
You will own URZA deployments end-to-end at customer sites &mdash; primarily in DoW and military operating environments. You will lead engagements as the senior engineering presence on the ground, partner directly with Mission Leads and Field Operations, and represent NODA in customer technical reviews. Expect significant time on-site and significant time writing &mdash; runbooks, deployment guides, ConOps documents, after-action reports.</p><div><br>
</div><h2 class="jobSectionHeader"><b>
What you'll do</b></h2><ul><li><p>
Lead URZA deployments end-to-end at customer sites in DoW and military operating environments.</p></li><li><p>
Configure URZA for each customer's mission and ConOps.</p></li><li><p>
Integrate URZA with third-party C2 systems, sensors, software APIs, and external data sources (weather, reconnaissance, intelligence feeds).</p></li><li><p>
Run customer technical reviews and operator training; partner with Mission Leads on engagement coordination.</p></li><li><p>
Build reusable engagement scaffolding (runbooks, ConOps templates, integration playbooks); mentor mid-level Solution Engineers.</p></li></ul><div><br>
</div><h2 class="jobSectionHeader"><b>
Required Qualifications</b></h2><ul><li><p>
5+ years of full-stack engineering experience, with significant customer-facing or forward-deployed work.</p></li><li><p>
Strong proficiency in Python, C++, or Rust; advanced Linux fluency.</p></li><li><p>
Networking depth (TCP/IP, UDP, multicast, routing) and field debugging across multiple system layers.</p></li><li><p>
Demonstrated deployment experience in DoW, military, or comparable operational environments.</p></li><li><p>
U.S. citizenship; able to obtain a security clearance.</p></li></ul><div><br>
</div><h2 class="jobSectionHeader"><b>
Preferred Qualifications</b></h2><ul><li><p>
Hands-on with autonomous systems or unmanned vehicles (UAS, UGV, USV, UUV).</p></li><li><p>
Tactical C2 systems (TAK, Cursor-on-Target, Link 16) or pub-sub middleware (Zenoh, DDS).</p></li><li><p>
Experience integrating sensors, third-party APIs, or external data feeds (weather, reconnaissance, intelligence).</p></li><li><p>
Prior defense, autonomy, or robotics company experience; classified / ITAR / CMMC environment exposure.</p></li><li><p>
Active security clearance.</p></li></ul><div><br>
</div><h2 class="jobSectionHeader"><b>
Leveling &mdash; Senior SE (L5) vs. Solution Architect (L6)</b></h2><p><b>
Senior Solution Engineer (L5):</b> Owns URZA deployment for a single engagement. Leads on-site execution; partners with a more senior engineer on architecture decisions. Operates independently within an engagement; escalates cross-engagement trade-offs. Mentors mid-level SEs.</p><p><b>
Solution Architect (L6):</b> Owns URZA deployment architecture across multiple concurrent engagements. Defines integration patterns and ConOps templates that other SEs reuse. Holds customer technical authority where the customer expects an architect. Influences URZA roadmap and the integration layer directly through field learning.</p><div><br>
</div><h2 class="jobSectionHeader"><b>
Skills &amp; Attributes</b></h2><ul><li><p>
Systems thinker across compute, network, vehicle behavior, and ConOps.</p></li><li><p>
Field-grounded; comfortable diagnosing in degraded conditions on a live exercise clock.</p></li><li><p>
Documentation-disciplined.</p></li><li><p>
Customer-credible; holds technical authority without overstating or underselling.</p></li><li><p>
Self-directed; thrives in ambiguity.</p></li></ul><div><br>
</div><h2 class="jobSectionHeader"><b>
What We Offer</b></h2><ul><li><p>
Hybrid work environment</p></li><li><p>
Competitive base + equity</p></li><li><p>
Flexible time off and generous PTO</p></li><li><p>
Federal holidays</p></li><li><p>
401(k)</p></li><li><p>
Comprehensive health, dental, and vision benefits</p></li><li><p>
Free One Medical membership</p></li></ul><div><br>
</div><h2 class="jobSectionHeader"><b>
Growth Path at NODA</b></h2><p>
Senior Solution Engineer Solution Architect Principal Solution Architect. Lateral: Engineering Manager (Solutions Engineering), Product Manager, Mission Lead.</p><div></div><p><i><br>
We are an Equal Opportunity Employer and welcome applicants from all backgrounds. All qualified individuals will receive consideration for employment regardless of race, age, color, religion, sex, national origin, disability, or protected veteran status.</i></p></div>

Forward-Deployed Solution Engineer - International (CENTCOM AOR)

<div><p><b>Location:</b> Kuwait (CENTCOM AOR) (Home office: Austin, TX)<br>
<b>Travel:</b> Mission-dependent, up to ~75% (OCONUS rotations)<br>
<b>Clearance Requirement:</b> Active Secret required</p><h2 class="jobSectionHeader"><b>
About NODA</b></h2><p>
NODA is a veteran-owned Series A defense technology company building the orchestration layer for autonomous unmanned systems. Our platform &mdash; URZA &mdash; coordinates fleets of heterogeneous vehicles across air, sea, and land for defense and intelligence customers. We expect every hire to be mission-driven with strong agency.</p><div><br>
</div><h2 class="jobSectionHeader"><b>
The Role</b></h2><p>
We are seeking a senior <b>full-stack engineer</b> to lead URZA deployment and customer-facing technical delivery across active customer programs. <b>This req can land at either Senior Solution Engineer (L5) or Solution Architect (L6)</b> depending on demonstrated depth &mdash; see leveling below.</p><p>
You will own URZA deployments end-to-end at customer sites &mdash; primarily in DoW and military operating environments. You will lead engagements as the senior engineering presence on the ground, partner directly with Mission Leads and Field Operations, and represent NODA in customer technical reviews. Expect significant time on-site and significant time writing &mdash; runbooks, deployment guides, ConOps documents, after-action reports.</p><div><br>
</div><h2 class="jobSectionHeader"><b>
What you'll do</b></h2><ul><li><p>
Lead URZA deployments end-to-end at customer sites in DoW and military operating environments.</p></li><li><p>
Configure URZA for each customer's mission and ConOps.</p></li><li><p>
Integrate URZA with third-party C2 systems, sensors, software APIs, and external data sources (weather, reconnaissance, intelligence feeds).</p></li><li><p>
Run customer technical reviews and operator training; partner with Mission Leads on engagement coordination.</p></li><li><p>
Build reusable engagement scaffolding (runbooks, ConOps templates, integration playbooks); mentor mid-level Solution Engineers.</p></li></ul><div><br>
</div><h2 class="jobSectionHeader"><b>
Required Qualifications</b></h2><ul><li><p>
5+ years of full-stack engineering experience, with significant customer-facing or forward-deployed work.</p></li><li><p>
Strong proficiency in Python, C++, or Rust; advanced Linux fluency.</p></li><li><p>
Networking depth (TCP/IP, UDP, multicast, routing) and field debugging across multiple system layers.</p></li><li><p>
Demonstrated deployment experience in DoW, military, or comparable operational environments.</p></li><li><p>
U.S. citizenship; able to obtain a security clearance.</p></li></ul><div><br>
</div><h2 class="jobSectionHeader"><b>
Preferred Qualifications</b></h2><ul><li><p>
Hands-on with autonomous systems or unmanned vehicles (UAS, UGV, USV, UUV).</p></li><li><p>
Tactical C2 systems (TAK, Cursor-on-Target, Link 16) or pub-sub middleware (Zenoh, DDS).</p></li><li><p>
Experience integrating sensors, third-party APIs, or external data feeds (weather, reconnaissance, intelligence).</p></li><li><p>
Prior defense, autonomy, or robotics company experience; classified / ITAR / CMMC environment exposure.</p></li><li><p>
Active security clearance.</p></li></ul><div><br>
</div><h2 class="jobSectionHeader"><b>
Leveling &mdash; Senior SE (L5) vs. Solution Architect (L6)</b></h2><p><b>
Senior Solution Engineer (L5):</b> Owns URZA deployment for a single engagement. Leads on-site execution; partners with a more senior engineer on architecture decisions. Operates independently within an engagement; escalates cross-engagement trade-offs. Mentors mid-level SEs.</p><p><b>
Solution Architect (L6):</b> Owns URZA deployment architecture across multiple concurrent engagements. Defines integration patterns and ConOps templates that other SEs reuse. Holds customer technical authority where the customer expects an architect. Influences URZA roadmap and the integration layer directly through field learning.</p><div><br>
</div><h2 class="jobSectionHeader"><b>
Skills &amp; Attributes</b></h2><ul><li><p>
Systems thinker across compute, network, vehicle behavior, and ConOps.</p></li><li><p>
Field-grounded; comfortable diagnosing in degraded conditions on a live exercise clock.</p></li><li><p>
Documentation-disciplined.</p></li><li><p>
Customer-credible; holds technical authority without overstating or underselling.</p></li><li><p>
Self-directed; thrives in ambiguity.</p></li></ul><div><br>
</div><h2 class="jobSectionHeader"><b>
What We Offer</b></h2><ul><li><p>
Hybrid work environment</p></li><li><p>
Competitive base + equity</p></li><li><p>
Flexible time off and generous PTO</p></li><li><p>
Federal holidays</p></li><li><p>
401(k)</p></li><li><p>
Comprehensive health, dental, and vision benefits</p></li><li><p>
Free One Medical membership</p></li></ul><div><br>
</div><h2 class="jobSectionHeader"><b>
Growth Path at NODA</b></h2><p>
Senior Solution Engineer Solution Architect Principal Solution Architect. Lateral: Engineering Manager (Solutions Engineering), Product Manager, Mission Lead.</p><div></div><p><i><br>
We are an Equal Opportunity Employer and welcome applicants from all backgrounds. All qualified individuals will receive consideration for employment regardless of race, age, color, religion, sex, national origin, disability, or protected veteran status.</i></p></div>

Search 10000+ Senior security architect jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 senior security architect jobs Near Me

Senior Cloud Security Architect

Senior / Principal Security Architect (AI/OT)

Senior Network Security Architect

Senior Global Solution Architect - Security

Senior L3 Network Admin– Security, Cloud & Enterprise

Forward-Deployed Solution Engineer - International (CENTCOM AOR)

Forward-Deployed Solution Engineer - International (CENTCOM AOR)