Opening for Enterprise Security Architect || Newark, NJ - Hybrid || Contract

Job Title: Enterprise Security Architect

Location: Newark, NJ -Hybrid

Mode of Hire: Contract

Job Description:

Level: Senior/Principal
Department: Enterprise Architecture
Reports To: Director, Enterprise Architecture

Required Qualifications :

Education:

• Bachelor's degree in Computer Science, Information Security, or related field

Experience:

• 7 years in security architecture, enterprise architecture, or cybersecurity

• 5 years creating enterprise security standards and patterns

• Proven experience with zero-trust architecture and secure design patterns

• Experience establishing security controls frameworks and compliance patterns

• Track record conducting threat modeling and security architecture reviews

Certifications (Required/Preferred):

• CISSP (Certified Information Systems Security Professional) - required

• TOGAF certification - preferred

• SABSA certification - preferred

• Cloud security certification (AWS Security Specialty, Azure Security Engineer, Google Cloud Security Engineer) - preferred

• CISM or CISA - preferred

Required Technical Skills:

Preferred Qualifications :

• Experience in highly regulated industries (healthcare, finance, government)

• Background in penetration testing or offensive security

• Experience implementing zero-trust at enterprise scale

• Deep knowledge of compliance frameworks and audit processes

Role Purpose :

Define enterprise security architecture standards, create security patterns and frameworks, establish security controls by tier, and provide the security templates that enable secure-by-design solutions. This role creates security patterns and standards, not operational security implementation.

What Makes This Role Unique :

• Policy translator: Convert InfoSec policies into practical architectural patterns solution architects can apply

• Security-by-tier architect: Define exactly what security controls are required for each application tier (Tier 0/1/2/3)

• Zero-trust strategist: Lead the enterprise adoption of zero-trust architecture through patterns and templates

• Strategic partnership: Bridge between architecture and operational security (InfoSec team)

Key Responsibilities :

Enterprise Security Standards & Patterns (40%)

• Define security architecture reference architectures (zero-trust, defense-in-depth)

• Create security patterns library (authentication and authorization patterns, API security patterns, data protection patterns, network security patterns, application security patterns)

• Establish security controls by application tier (Tier 0: HSM, 24/7 SOC, multi-region DR; Tier 1: MFA, encryption at rest/transit, WAF; Tier 2/3: standard security controls)

• Define identity and access management (IAM) patterns

• Document encryption and key management standards

• Create secrets management patterns

Security Frameworks (30%)

• Build secure design templates for common patterns (web apps, APIs, microservices)

• Develop threat modeling framework (STRIDE, PASTA templates)

• Create security testing framework (SAST, DAST, penetration testing standards)

• Establish DevSecOps patterns and shift-left security standards

• Define security compliance frameworks (SOC 2, ISO 27001, GDPR, HIPAA patterns)

Security Architecture Governance (20%)

• Review solution architectures for security pattern compliance

• Conduct threat modeling for strategic initiatives

• Define security architecture review criteria

• Translate InfoSec policies into architectural patterns

• Establish security exception process

Enablement (10%)

• Train solution architects on security patterns

• Conduct secure design workshops

• Maintain security pattern catalog

• Partner with InfoSec on security requirements

Success Metrics (First 12 Months)

• Security pattern adoption rate 80% for new solutions

• 100% of strategic initiatives complete threat modeling

• Security controls by tier framework established with 90% compliance

• Publish 10 security patterns in catalog

• Conduct 50 architecture security reviews

• Reduce security incident rate by 30% for pattern-compliant solutions

What You'll Deliver

• Security architecture reference architectures

• Security pattern library

• Security controls by application tier

• Zero-trust implementation patterns

• IAM patterns and templates

• Threat modeling framework

• DevSecOps standards

• Security review criteria

Working Relationships :

Key Partnerships:

• InfoSec team (operational security, policy translation)

• Solution architects (apply security patterns)

• Cloud & Platform Architect (security controls by tier alignment)

• Compliance and audit teams

Governance Participation:

• Architecture Review Board (bi-weekly)

• Security Architecture Review (weekly - you lead this)

• Pattern Review Sessions (bi-weekly)

Company Culture & Values :

Our Enterprise Architecture team operates on principles of collaboration, excellence, and innovation:

• Pattern-first mindset: We create reusable blueprints that enable consistency and quality

• Partnership model: We work alongside operational teams (App Dev, Data Platform, Infrastructure, InfoSec) as strategic partners

• Continuous improvement: Patterns evolve based on feedback from implementation

• Enablement focus: Success means solution architects effectively apply our patterns

• Executive backing: Strong leadership support for architecture governance and standards