What are the responsibilities and job description for the Enterprise Security Architect position at Contech Systems Inc.?
Enterprise Security Architect
Hybrid - 2 days per month, onsite, in Newark, NJ is required
The Enterprise Security Architect defines enterprise security architecture standards, creates security patterns and frameworks, and establishes security controls by tier to enable secure-by-design systems across the organization. The Enterprise Security Architect translates InfoSec policies into practical architectural patterns, leads zero-trust adoption, and partners with architecture and operational security teams to protect critical applications and data. This senior-level Enterprise Security Architect role focuses on patterns, standards, and governance rather than operational security tasks.
Key Responsibilities
- Define security architecture reference architectures including zero-trust and defense-in-depth models.
- Create authentication, authorization, API security, data protection, network security, and application security patterns.
- Establish security controls by application tier (Tier 0/1/2/3) and define IAM, encryption, key management, and secrets management standards.
- Build secure design templates for web apps, APIs, and microservices.
- Develop threat modeling frameworks and security testing standards (SAST, DAST, penetration testing).
- Define DevSecOps patterns, shift-left security standards, and compliance frameworks for SOC 2, ISO 27001, GDPR, and HIPAA.
- Review solution architectures for security pattern compliance and conduct threat modeling for strategic initiatives.
- Translate InfoSec policies into architectural patterns and participate in security governance.
- Train solution architects on security patterns and maintain the enterprise security pattern catalog.
Qualifications
- Bachelor’s degree in Computer Science, Information Security, or related field.
- 7 years in security architecture, enterprise architecture, or cybersecurity.
- 5 years creating enterprise security standards, patterns, and frameworks.
- Proven experience with zero-trust architecture, secure design patterns, and security controls frameworks.
- Experience conducting threat modeling and security architecture reviews.
- CISSP required; TOGAF, SABSA, and cloud security certifications preferred.
- Strong knowledge of authentication, authorization, API security, encryption, key management, secrets management, and network/application security.
- Familiarity with DevSecOps, security testing, and regulatory/compliance frameworks.
LinkedIn-Optimized Summary
The Enterprise Security Architect leads the creation of enterprise-wide security standards, zero-trust patterns, and tier-based security controls that guide secure-by-design architecture across the organization. This role focuses on strategic security architecture, governance, and reusable patterns—not operational security. The Enterprise Security Architect partners with InfoSec, engineering, and architecture teams to define secure design templates, threat modeling frameworks, and compliance patterns that support modern cloud, API, and application ecosystems.
The Enterprise Security Architect will deliver security reference architectures, reusable security patterns, and governance frameworks that strengthen enterprise security posture and enable consistent, scalable, secure solutions across the organization.