Security Tech Lead/ Security Architect

Security Tech Lead/ Security Architect

Chicago/ Tempe, AZ 3 days hybrid

Must have LinkedIn

Independent candidates only

Note:

• Need resource to review security architecture, overall assessment of security of Saas platform - architect/ advisory profile
• Architecture and design role, not managing but reviewing platform. Someone with previous hands-on experience will be successful in this role
• 7 years in cybersecurity and 3 years in cloud security
• Not looking for expert in 1 domain, wants someone who has an understanding of all domains - cloud security, identity, data security, logs
• Collaboration skills - working with stakeholders, application teams, platform owners
• Cloud - Prefers Azure then AWS, Google Cloud Platform. But this role doesn't need deep cloud experience, its more focused on Saas
• Cybersecurity frameworks, guideline knowledge is required
• Certification - CISSP, CSSP are ideal but willing to look at stronger candidates with no certification

Description: looking for an enthusiastic, innovative Security Architect to lead Security Architecture reviews specific to SaaS platforms.

Qualifications
Bachelor's degree in computer science or related discipline and experience in information security, or an equivalent combination of education and work experience.
Deep knowledge of cloud security, preferred experience in financial industry.
Excellent consultative and communication skills, and the ability to work effectively with client, partner, and IT management and staff.
Seven years of experience in the Information Security role. Three years of experience with cloud and/or technologies
CISSP, CSSP, CCNP/CCIE Security, or Cloud security certification preferred
Strong collaboration skills and analytical ability

Skill Level: Senior

Requirements/Responsibilities-
In-depth knowledge of various cybersecurity frameworks, standards, and SSDLC
Hands-on experience with management of SaaS platforms within enterprise environment
Knowledge related to third party cyber security due diligence and Risk Management
Experience working with identity management systems including Authentication, SSO, RBAC, privilege management, Microsoft Entra
Must be knowledgeable related to various security frameworks, compliance, and regulations including NIST, GDPR, SOC reports etc.
Experience working with Microsoft Azure, AWS, hybrid, and multi-cloud systems
Very good understanding of data security concepts including encryption, retention, classification
Knowledge related to Application security including OWASP, API security, SSDLC etc.
Understanding related to security and audit logs, SIEM integration, alerting, incident response plan, pen testing
Very good understanding related to the concepts related to Firewall, IPS/IDS, Proxy servers, WAF, App Proxy, APIM
Very strong understanding of network architecture concepts including topology, protocols, and components
Ability to establish security patterns related to cloud/ hybrid architecture and work with various tech teams to assist with the implementation as needed
Must be able to represent the team in technical discussions and drive towards deliverables with minimal guidance
Very good understanding of zero-trust architecture and working experience with relevant tools/technologies
Knowledge related to AI, specifically Microsoft co-pilot


Must Have:
Experience working with identity management systems including Authentication, SSO, RBAC, privilege management, Microsoft Entra