Security & Safety|Security,Construction|Architecture,Construction|Architecture|Architect,Construction,Security & Safety Jobs

Position : Security Architect
Location : Jersey City NJ
Duration : Fulltime

Job Description:
Must Have Technical/Functional Skills
Key Responsibilities

1. Discovery & Assessment

• Assess the organization's current IAM landscape, including:
  • Identity Governance & Administration (IGA)
  • Privileged Access Management (PAM)
  • Authentication and Single Sign-On (SSO)
  • Access Certification and Governance processes
  • Directory Services and Identity Stores

• Evaluate existing IAM security controls, architecture standards, and operational processes.
• Identify security, compliance, and operational gaps.
• Produce current-state architecture assessments and recommendations.

2. Requirements Gathering & Analysis

• Conduct workshops and stakeholder interviews with business, security, risk, compliance, and application teams.
• Gather functional and non-functional IAM requirements.
• Translate business and regulatory requirements into IAM architecture principles.
• Document use cases and security requirements.

3. IAM Architecture Design

• Define enterprise IAM architecture standards and frameworks.
• Design:
  • Authentication architectures
  • Authorization models
  • Role-Based Access Control (RBAC)
  • Attribute-Based Access Control (ABAC)
  • Federation and Single Sign-On architectures
  • Privileged Access Management frameworks

• Ensure architecture alignment with Zero Trust and cybersecurity policies.

4. IAM Security Pattern Development

• Develop reusable IAM security patterns for common business scenarios.
• Establish standard design templates and implementation blueprints.
• Create approved reference architectures covering:
  • Joiner-Mover-Leaver processes
  • Application onboarding
  • Privileged access management
  • API and service account security
  • Federation and external identity integrations
  • MFA and passwordless authentication

• Maintain a catalog of approximately 160+ enterprise IAM patterns.

5. Security Architecture Reviews

• Conduct architecture reviews for IAM solutions and integrations.
• Collaborate with Security, Risk, Compliance, Infrastructure, and Engineering teams.
• Review technical designs against security standards and control requirements.
• Drive remediation of architecture and security control gaps.

6. Documentation & Standards Management

• Develop and maintain:
  • IAM Architecture Frameworks
  • Security Standards
  • Architecture Decision Records (ADRs)
  • Technical Reference Architectures
  • Pattern Catalogs
  • Implementation Guidance Documents

• Ensure architecture artifacts remain current and accessible.

Title: Senior Cloud Security Architect
Location: Trenton, NJ (Hybrid)
Duration: 3 Months
Interview type: Web cam & In Person Only

Note:
Candidates must be local
Hybrid - three days per week

Job Description
We are seeking a highly skilled and experienced Senior Cloud Security Architect to join our IT team. This position will be full-time, hybrid, and is a contract position.
What You'll Do

• Design and implement enterprise cloud security standards, policies, and governance frameworks for AWS, Azure, and multi-cloud environments
• Assess current cloud security posture and identify security gaps, vulnerabilities, risks, and improvement opportunities
• Develop and maintain an enterprise security framework aligned with organizational, regulatory, and government requirements
• Create a DevSecOps roadmap that integrates security controls throughout the software development lifecycle
• Define and document security processes, procedures, standards, and best practices
• Provide strategic guidance and recommendations on cloud security architecture, risk management, and security governance
• Partner with IT leadership and stakeholders to support secure cloud adoption and modernization initiatives
• Establish security controls and operational processes that support scalable development and cloud operations
• Develop implementation plans and phased approaches for cloud security and DevSecOps initiatives
• Create training materials, documentation, and knowledge transfer resources to support internal teams
• Conduct workshops, training sessions, and mentoring to build internal cloud security capabilities
• Collaborate with technical teams to improve security practices across development, infrastructure, and operations
• Support compliance, governance, and risk management initiatives
• Deliver security standards, policy documentation, roadmaps, operational procedures, and related project deliverables
• Work independently while maintaining close alignment with organizational priorities and leadership objectives

What You'll Need
Required:

• 10+ years of experience in cloud security architecture across AWS, Azure, and multi-cloud environments
• Experience designing and implementing enterprise cloud security frameworks, governance models, and security standards
• Strong expertise in DevSecOps practices and integrating security into development and operational workflows
• Experience conducting security assessments, risk analysis, vulnerability reviews, and remediation planning
• Deep understanding of cloud security architectures, security controls, compliance requirements, and governance frameworks
• Experience supporting large-scale cloud transformation, modernization, or application development initiatives
• Strong knowledge of cloud security best practices, identity and access management, security monitoring, and risk management
• Excellent communication, presentation, documentation, and stakeholder management skills
• Experience delivering training, knowledge transfer, and capability-building programs
• Ability to work effectively with executive leadership, technical teams, and business stakeholders
• Experience operating in regulated environments with strict security and compliance requirements
• Government sector experience, including state or local government environments
• Ability to work independently and lead strategic security initiatives
• AWS Certified Security – Specialty (SCS-C03)
• Certified Cloud Security Professional (CCSP)

Preferred:

• Experience supporting state or local government technology transformation initiatives
• Experience establishing security practices for organizations scaling development operations
• Microsoft Azure Security Engineer Associate (AZ-500)
• Certified DevSecOps Professional (CDP) or equivalent certification
• CISSP (Certified Information Systems Security Professional)
• Additional cloud security certifications, including Azure or Google Cloud security credentials
• Experience building internal security capabilities and reducing dependency on external consulting resources

Physical Demands

• Ability to safely and successfully perform the essential job functions consistent with the ADA and other federal, state, and local standards
• Sedentary work that involves sitting or remaining stationary most of the time with occasional need to move around the office to attend meetings, etc.
• Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard, and monitor

Position : Security Architect
Location : Jersey City NJ
Duration : Fulltime

Job Description:
Must Have Technical/Functional Skills
Key Responsibilities

1. Discovery & Assessment

• Assess the organization's current IAM landscape, including:
  • Identity Governance & Administration (IGA)
  • Privileged Access Management (PAM)
  • Authentication and Single Sign-On (SSO)
  • Access Certification and Governance processes
  • Directory Services and Identity Stores

• Evaluate existing IAM security controls, architecture standards, and operational processes.
• Identify security, compliance, and operational gaps.
• Produce current-state architecture assessments and recommendations.

2. Requirements Gathering & Analysis

• Conduct workshops and stakeholder interviews with business, security, risk, compliance, and application teams.
• Gather functional and non-functional IAM requirements.
• Translate business and regulatory requirements into IAM architecture principles.
• Document use cases and security requirements.

3. IAM Architecture Design

• Define enterprise IAM architecture standards and frameworks.
• Design:
  • Authentication architectures
  • Authorization models
  • Role-Based Access Control (RBAC)
  • Attribute-Based Access Control (ABAC)
  • Federation and Single Sign-On architectures
  • Privileged Access Management frameworks

• Ensure architecture alignment with Zero Trust and cybersecurity policies.

4. IAM Security Pattern Development

• Develop reusable IAM security patterns for common business scenarios.
• Establish standard design templates and implementation blueprints.
• Create approved reference architectures covering:
  • Joiner-Mover-Leaver processes
  • Application onboarding
  • Privileged access management
  • API and service account security
  • Federation and external identity integrations
  • MFA and passwordless authentication

• Maintain a catalog of approximately 160+ enterprise IAM patterns.

5. Security Architecture Reviews

• Conduct architecture reviews for IAM solutions and integrations.
• Collaborate with Security, Risk, Compliance, Infrastructure, and Engineering teams.
• Review technical designs against security standards and control requirements.
• Drive remediation of architecture and security control gaps.

6. Documentation & Standards Management

• Develop and maintain:
  • IAM Architecture Frameworks
  • Security Standards
  • Architecture Decision Records (ADRs)
  • Technical Reference Architectures
  • Pattern Catalogs
  • Implementation Guidance Documents

• Ensure architecture artifacts remain current and accessible.

Apogee Global RMS is seeking a Cloud Security Architect / FedRAMP Advisor to support federal and mission‑critical cloud security initiatives. This role is built for architects who understand the intersection of cloud engineering, compliance frameworks, and real‑world security design — and who can guide federal programs through secure cloud adoption with precision and authority.

You will serve as a trusted advisor across AWS, Azure, and hybrid environments, shaping security architectures, guiding FedRAMP readiness, and ensuring cloud platforms meet stringent federal requirements.

What You Will Lead

• Architect secure cloud solutions aligned to federal, IC, and DoD requirements
• Guide FedRAMP readiness, documentation, and control implementation
• Advise engineering teams on cloud security patterns, zero‑trust alignment, and boundary protections
• Conduct risk assessments, gap analyses, and remediation planning
• Partner with stakeholders to translate compliance requirements into actionable engineering decisions
• Support continuous monitoring, audit preparation, and security posture improvement

 

Requirements

Certifications:

• CCSP
• AWS Certified Security – Specialty
• Azure Security Engineer Associate
• FedRAMP 3PAO assessor experience is a major differentiator and will be prioritized

Technical Expertise:

• Deep experience architecting secure solutions in AWS and/or Azure
• Strong understanding of FedRAMP, NIST 800‑53, and federal cloud security baselines
• Ability to design and validate security controls across multi‑cloud and hybrid environments
• Experience advising engineering teams on secure cloud patterns, IAM, encryption, logging, and monitoring
• Strong communication skills for both technical and executive audiences

Location & Clearance:

•  Must reside in the NCR (DC/MD/VA)
• Secret clearance minimum; clearable candidates considered

 

Expected Skills:

• Operates confidently in regulated and federal environments
• Understands both the engineering and compliance sides of cloud security
• Can translate frameworks into real, implementable architectures
• Brings credibility with auditors, assessors, and federal stakeholders
• Thrives in high‑trust, high‑impact advisory roles

Benefits

Why Apogee:

Apogee supporting federal programs where cloud security maturity directly impacts mission success. You’ll work with decision‑makers, shape architectures that matter, and operate in an environment that values expertise, precision, and clarity.

How to Apply

For any questions (OR) to apply, please contact us at (url removed).

Job Title: AI Security Architect
Location: Bolingbrook, IL (Remote ok)
Duration: 12 Months
No. of position: 1
Rate: $65/hr W2

Job Description: The AI Security Architect will define the target-state architecture for securing AI across client — spanning data, models, platforms, and applications. This role sets technical standards and reference architectures that guide how AI is adopted safely at scale and provides deep technical leadership to the AI Engineer team and cross-functional stakeholders on secure AI design.

Key Responsibilities
• Define reference architectures and technical standards for secure AI/ML adoption (data governance, model lifecycle security, LLM/agentic AI security, network and identity boundaries).
• Lead security architecture reviews for new AI initiatives, products, and vendor tools, identifying risks and required controls prior to launch.
• Design enterprise patterns for AI guardrails, output validation, human-in-the-loop controls, and least-privilege access for AI agents and services.
• Partner with enterprise architecture, data platform, and infrastructure teams to ensure AI security controls are embedded consistently across on-prem, cloud, and SaaS AI deployments.
• Evaluate emerging AI security threats and technologies, advising leadership on architectural implications and roadmap priorities.
• Mentor the AI Engineer team on secure design practices; provide technical governance over implementation to ensure alignment with architecture standards.
• Contribute to AI governance policy, risk frameworks, and control mapping (NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10) from a technical architecture perspective. Required

Qualifications
• 8+ years in security architecture or enterprise architecture roles, including recent experience architecting controls for AI/ML or data platforms.
• Deep understanding of AI/ML system design (data pipelines, model training/serving, MLOps) and associated security and privacy risks.
• Strong grasp of cloud security architecture (Azure and/or AWS/GCP), identity and access management, network segmentation, and zero-trust principles.
• Familiarity with AI governance and security frameworks: NIST AI RMF, ISO/IEC 42001, OWASP Top 10 for LLM Applications, and applicable data privacy regulation.
• Demonstrated ability to communicate architecture decisions to both engineering teams and executive stakeholders.

Preferred Qualifications
• Architecture certifications (SABSA, TOGAF) and/or security certifications (CISSP, CCSP).
• Experience building AI/ML platforms or securing generative AI/agentic AI deployments at enterprise scale.
• Retail or large consumer-brand enterprise experience.

Senior Cloud Security Architect
As a Senior Cloud Security Architect, you will lead the strategic vision for protecting our multi-cloud ecosystem. You are responsible for designing the security blueprints that govern our entire digital footprint—from identity perimeters to AI-driven threat detection. This role requires a "Security as Code" mindset, where you build automated guardrails that empower developers to move at speed without compromising the safety of our data or infrastructure.

Key Responsibilities
• Security Architecture Vision: Lead the design of a global Zero Trust architecture, ensuring robust identity governance (IAM), network micro-segmentation, and data encryption across AWS, Azure, or GCP.
• AI-Native Security Strategy: Architect specialized security frameworks for AI/ML pipelines, focusing on data privacy for training sets, model integrity, and securing LLM-integrated applications against emerging attack vectors.
• Automated Guardrails (Policy as Code): Develop and enforce enterprise-wide security policies using Terraform, etc., ensuring that non-compliant infrastructure is automatically remediated or blocked from deployment.
• Cloud Posture Management: Design and oversee the integration of CNAPP and CSPM tools to provide real-time visibility into misconfigurations, vulnerabilities, and excessive permissions.
• Threat Modeling & Resilience: Conduct deep-dive threat modeling for complex cloud-native systems, simulating advanced persistent threats (APTs) and "blast radius" scenarios to strengthen system resilience.
• Security Consultancy: Act as the lead security advisor for the Cloud Architecture team, bridging the gap between DevOps agility and rigorous regulatory compliance (SOC2).

Technical Qualifications
Category
Security Platforms
Requirements
Mastery of cloud-native security suites (e.g., AWS Security Hub, Azure Defender, GCP Security Command Center).

Category
Identity & Access
Requirements
Expert knowledge of Identity-First Security, including CIEM, Just-In-Time (JIT) access, and complex OIDC/SAML flows.

Category
Automation
Requirements
Proficiency in Python, Go, or Bash to build custom security automations and integrate with SOAR platforms.

Category
DevSecOps
Requirements
Deep experience embedding automated security testing (SAST/DAST/SCA) directly into CI/CD pipelines.

Category
Cloud Networking
Requirements
Advanced understanding of secure connectivity, including SD-WAN, Cloud WAF, and Zero Trust Network Access (ZTNA).

Preferred Experience
• Experience: 12+ years in Cybersecurity, with at least 6 years focused on architecting secure cloud environments at scale.
• Certifications: Top-tier credentials.
• Education: Advanced degree in Computer Science, Cybersecurity, or a related engineering field preferred. BS degree from an accredited College/University in the applicable field of services is required, or four additional years of relevant experience in lieu of a college degree. If the individual's degree is not in the applicable field then four additional years of related experience is required.
• Soft Skills: Strong ability to bridge the gap between "Speed of DevOps" and "Rigors of Security" while communicating clearly with executive leadership
• Leadership: Proven ability to influence technical roadmaps and present security risks clearly to C-suite stakeholders.

Core Objectives
• Zero Standing Privilege: Help Transition the organization to a "Zero Standing Privilege" model for all production environments.
• Automated Compliance: Help Achieve automated auditing for core compliance frameworks (e.g., NIST, CIS Benchmarks).
• Mean Time to Detect (MTTD): Utilize AI-driven monitoring to reduce the detection time of anomalous cloud activity to minimum

Additional Provisions:
• Pass a client mandated clearance process to include drug screening, criminal history check and credit check.
• Once candidate's resume is approved and interview passed, the agency is responsible for providing drug screening. Failure to submit the drug screening results will delay the security clearance process.
• If a candidate is given an interim clearance, continuation of employment is then based on the candidate receiving a sensitive clearance.
• All candidates must be a US Citizen or permanent status Green Card holder.
• Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)
• All overtime must be pre-approved in writing by the client manager or his/her designated representative.
• Agency will not be reimbursed for overtime charges without previous written authorization. Authorized overtime will be reimbursed at straight time.
• The enforced dress code is business casual, i.e., collared shirt with slacks for men, no skirts above the knee for women.

Prime Contract Number - 1BITCS-25-B-0009
For this position, there will be only one bill rate regardless of hours worked in a day and/or workweek.
The North American Industry Classification System (NAICS) code for this acquisition is (phone number removed). The small business size standard is $34 million Comments for Suppliers: Work will be remote with candidates located in Morrisville, NC; Falls Church, VA; or Eagan, MN given preference.

The Cloud Security Architect supports the Chief Information Security Officer (CISO) for a centralized services contract supporting an HHS client. The cloud broker has more than 1,000 customer environments in Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure. The Architect manages the Authorization to Operate (ATO) process under the NIST Risk Management Framework (RMF), maintains the controls that customer environments inherit from the broker, and reviews the security architecture of each new service before it is deployed.

The Architect works with the CISO, Authorizing Officials, system owners, Information System Security Officers (ISSOs), assessors, cloud engineers, and customer technical leads.

Responsibilities CISO Support and ATO Management (RMF)

• Manages the ATO process for the broker's authorization boundaries and for each customer environment onboarded to it: categorization under FIPS 199, control selection and tailoring, implementation, assessment, authorization, and continuous monitoring.
• Prepares and tracks System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and authorization decision packages.
• Keeps one schedule and one status report for every environment in the authorization process.
• Directs continuous monitoring: annual assessments, significant change reviews, POA&M closure, and vulnerability and configuration findings.
• Briefs the CISO and Authorizing Officials on authorization status, open risks, and risk acceptance requests.
• Aligns packages to the Federal Information Security Modernization Act (FISMA), NIST SP 800-37 Rev. 2, NIST SP 800-53 Rev. 5, NIST SP 800-53A, FIPS 199 and 200, and the Federal Risk and Authorization Management Program (FedRAMP) baselines.
• Coordinates assessors, ISSOs, system owners, and engineers on evidence and schedule.

Inheritability

• Defines and maintains the catalog of controls that customer environments inherit from the broker's boundary, landing zones, and shared services in AWS, GCP, and Azure.
• Maintains customer responsibility matrices for each cloud service provider and service, tied to the provider's current FedRAMP authorization and to the federal regions it offers, such as AWS GovCloud (US), Azure Government, and Google Cloud Assured Workloads.
• Builds reusable SSP sections, control narratives, and evidence templates so that a customer environment documents only the controls it implements itself.
• Reviews each onboarding request to confirm which controls the environment inherits and which it owns.
• Reports the share of controls inherited per environment and the time from onboarding request to authorization decision.

Security Architecture Input Before Deployment

• Reviews each new service before deployment: data flows, authorization boundary, identity and access, network segmentation, encryption with FIPS 140 validated modules, logging, and vulnerability management.
• Works with customer technical leads and cloud engineers during onboarding to select the cloud service provider and product stack that meet the customer's requirements and the security controls.
• Writes a security architecture decision for each new service that lists the required controls, the inherited controls, and the residual risk, before the build starts.
• Writes reference architectures and guardrails for accounts, subscriptions, projects, landing zones, and policy as code in AWS, Azure, and GCP.
• Determines whether a new service fits inside the authorized boundary or requires a significant change review.
• Checks the FedRAMP status of each cloud service before it enters the broker's service catalog.
• Sits on the architecture and change review boards.

Requirements

• Bachelor's degree in information security, computer science, or a related field, or equivalent experience.
• 6 years of information security experience, including 3 years on federal ATO packages under the NIST RMF.
• Authored SSPs, SARs, and POA&Ms that an Authorizing Official accepted.
• Working knowledge of the NIST SP 800-53 Rev. 5 control families and of common and inherited controls.
• Hands-on security architecture experience in at least one of AWS, GCP, or Azure in federal environments, and working knowledge of the other two: account, subscription, and project structure, identity, network, encryption, and logging.
• Experience with FedRAMP authorized services, FedRAMP baselines, and customer responsibility matrices.
• Experience running threat models and architecture reviews with engineers.
• Written and spoken communication with CISOs, Authorizing Officials, assessors, and engineers.
• One of the following certifications: Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or Certified Information Security Manager (CISM).
• Eligible to work in the United States.

Preferred Qualifications

• Experience supporting a multi-tenant cloud environment with hundreds of accounts and many customers.
• Experience building inherited control catalogs, reusable authorization packages, or automated control evidence, including Open Security Controls Assessment Language (OSCAL).
• Experience with governance, risk, and compliance (GRC) tools, ServiceNow, and Splunk for control evidence and monitoring.
• Experience writing policy as code and infrastructure as code guardrails, for example with Terraform.
• Experience moving a system boundary from FISMA Moderate to High.
• Certifications: Certified Authorization Professional (CAP), Information Systems Security Engineering Professional (ISSEP), Certified Information Systems Auditor (CISA), AWS Certified Security Specialty, Microsoft Certified Cybersecurity Architect Expert, or Google Professional Cloud Security Engineer.

Benefits

• Employee Bonus Programs
• Medical, Dental, and Vision Insurance
• 401(k) Retirement Plan
• Basic Life, Voluntary Life, and AD&D Insurance
• Short-Term and Long-Term Disability Insurance
• Paid Time Off
• Paid Parental Leave
• Training and Professional Development
• Remote Work Opportunities
• Wellness Resources

Description:

AI Security Architect

Remote Opportunity The AI Security Architect will support the AI Security transformation program The consultant will provide hands-on leadership across AI security architecture, prompt and data protection, shadow AI discovery, model security, monitoring, governance, and platform reuse. The role will work across AD, EMEA, APAC, and HO with security architecture, engineering, operations, finance, procurement, risk, compliance, legal, privacy, business technology teams, vendors, and regional security leaders. The position is accountable for moving work from analysis through decision, implementation, evidence, and sustainable operational adoption. Skills Lead security initiatives for LLM-powered applications, copilots, agentic systems, and AI-assisted workflows.This is an hands on role. Design and implement controls to reduce the risks of prompt injection, sensitive information disclosure / data leakage, improper output handling, excessive agent autonomy, model and AI supply chain risk, vector / embedding and retrieval-related weaknesses. Partner with engineering teams to embed secure-by-design patterns into AI application development, deployment, and operations. Create guardrails for AI systems that process customers, employees, and regulate financial data. Architect and implement AI gateway controls that centralize security policy enforcement for model traffic, including prompt inspection, response filtering, PII/secret redaction, model access control, rate limiting / abuse prevention, audit logging and evidence generation. Proficiency in at least one modern scripting or programming language (e.g., Python, Go, or Node.js) for automation, tooling, and integrations.

Apogee Global RMS is seeking a Cloud Security Architect / FedRAMP Advisor to support federal and mission‑critical cloud security initiatives. This role is built for architects who understand the intersection of cloud engineering, compliance frameworks, and real‑world security design — and who can guide federal programs through secure cloud adoption with precision and authority.

You will serve as a trusted advisor across AWS, Azure, and hybrid environments, shaping security architectures, guiding FedRAMP readiness, and ensuring cloud platforms meet stringent federal requirements.

What You Will Lead

• Architect secure cloud solutions aligned to federal, IC, and DoD requirements
• Guide FedRAMP readiness, documentation, and control implementation
• Advise engineering teams on cloud security patterns, zero‑trust alignment, and boundary protections
• Conduct risk assessments, gap analyses, and remediation planning
• Partner with stakeholders to translate compliance requirements into actionable engineering decisions
• Support continuous monitoring, audit preparation, and security posture improvement

 

Requirements

Certifications:

• CCSP
• AWS Certified Security – Specialty
• Azure Security Engineer Associate
• FedRAMP 3PAO assessor experience is a major differentiator and will be prioritized

Technical Expertise:

• Deep experience architecting secure solutions in AWS and/or Azure
• Strong understanding of FedRAMP, NIST 800‑53, and federal cloud security baselines
• Ability to design and validate security controls across multi‑cloud and hybrid environments
• Experience advising engineering teams on secure cloud patterns, IAM, encryption, logging, and monitoring
• Strong communication skills for both technical and executive audiences

Location & Clearance:

•  Must reside in the NCR (DC/MD/VA)
• Secret clearance minimum; clearable candidates considered

 

Expected Skills:

• Operates confidently in regulated and federal environments
• Understands both the engineering and compliance sides of cloud security
• Can translate frameworks into real, implementable architectures
• Brings credibility with auditors, assessors, and federal stakeholders
• Thrives in high‑trust, high‑impact advisory roles

Benefits

Why Apogee:

Apogee supporting federal programs where cloud security maturity directly impacts mission success. You’ll work with decision‑makers, shape architectures that matter, and operate in an environment that values expertise, precision, and clarity.

How to Apply

For any questions (OR) to apply, please contact us at (url removed).

Indent: please upload in any of my open indents.

Role: Security Architect (Saviynt, Delinea, GCP)

Location: Remote - USA

Max Rate: USA 80/hr

Role Purpose

Own the end-to-end solution architecture and technical design for a GCP identity governance program using Saviynt and Delinea. Translate business, security, audit, and compliance requirements into scalable architecture, integration patterns, governance models, and implementation guidance.

Project Context

This role supports an identity governance program covering the following solution areas:

• GCP human identity lifecycle automation covering Joiner, Mover, and Leaver processes.

• Service account lifecycle governance including request, approval, provisioning, ownership, certification, and decommissioning.

• Onboarding of GCP projects, folders, groups, roles, memberships, IAM bindings, and entitlement inventory into Saviynt.

• Discovery and classification of non-human identities, including service, workload, automation, API, machine, and AI-agent identities.

• Access governance, ownership, certifications, privileged access reviews, audit evidence, dashboards, and compliance reporting.

• Time-bound GCP group membership controls and custom GCP role lifecycle governance.

• Saviynt-Delinea integration for credential governance and Delinea-based GCP discovery.

• Testing, deployment readiness, operational documentation, and knowledge transfer.

Key Responsibilities

• Lead current-state assessment and architecture discovery workshops across GCP, Saviynt, Delinea, and connected enterprise systems.

• Define target-state architecture for human and non-human identity lifecycle governance, service account governance, access certifications, and credential controls.

• Design integration patterns for Saviynt, GCP IAM, Delinea, authoritative sources, ticketing or approval systems, and downstream applications.

• Define entitlement, ownership, role, service account, NHI taxonomy, and lifecycle models aligned with least privilege and auditability.

• Create solution design documents, architecture diagrams, data flows, interface specifications, security controls, and non-functional requirements.

• Provide design oversight for time-bound group membership, custom GCP role lifecycle, access reviews, and privileged credential governance.

• Review configurations and customizations for scalability, maintainability, security, and alignment with product best practices.

• Facilitate architecture reviews, document decisions and risks, and support customer security, audit, and compliance approvals.

• Guide SIT, security validation, UAT support, production readiness, rollback planning, post-go-live validation, and knowledge transfer.

• Mentor engineering teams and resolve complex cross-platform technical issues.

Required Technical and Professional Skills

• Saviynt Enterprise Identity Cloud or equivalent IGA architecture

• GCP IAM, projects, folders, groups, roles, service accounts, and IAM bindings

• Delinea or comparable PAM and credential-vaulting platforms

• Identity lifecycle, access governance, RBAC, least privilege, certifications, and SoD concepts

• API, connector, workflow, data-model, and cloud security architecture

• Architecture documentation, stakeholder workshops, risk management, and design governance

Education and Experience

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline.

• Typically 10+ years in IAM or Security engineering, including 3+ years in solution architecture or technical leadership.

• Relevant Saviynt, GCP, Security, or PAM certifications.

Key Deliverables

• Approved design or configuration artifacts appropriate to the role

• Configured and tested Saviynt, GCP, and Delinea capabilities

• Traceable test evidence, defect resolution inputs, and deployment artifacts

• Operational documentation, runbooks, and knowledge-transfer materials

Collaboration

Works closely with the Solution Architect, Project Manager, security and compliance stakeholders, customer platform teams, QA, operations, and product or vendor support teams. Customer accountability and approval remain governed by the agreed statement of duties and project governance model.

Preferred Attributes

• Ownership mindset with strong attention to security, quality, and documentation

• Ability to communicate complex technical topics clearly to technical and non-technical stakeholders

• Structured problem-solving and disciplined management of risks, assumptions, and dependencies

• Comfort working in cross-functional, customer-facing, and globally distributed teams

Tekfortune is a fast-growing consulting firm specialized in permanent, contract & project-based staffing services for world s leading organizations in a broad range of industries. In this quickly changing economic landscape, virtual recruiting and remote work are critical for the future of work. To support the active project demands and skills gaps, our staffing experts can help you find the best job for you.


Job Title: AI Security Architect
Location: Bolingbrook, IL (Remote ok)
Duration: 12 Months



Job Description:
The AI Security Architect will define the target-state architecture for securing AI across client spanning data, models, platforms, and applications. This role sets technical standards and reference architectures that guide how AI is adopted safely at scale and provides deep technical leadership to the AI Engineer team and cross-functional stakeholders on secure AI design.

Key Responsibilities
" Define reference architectures and technical standards for secure AI/ML adoption (data governance, model lifecycle security, LLM/agentic AI security, network and identity boundaries).
" Lead security architecture reviews for new AI initiatives, products, and vendor tools, identifying risks and required controls prior to launch.
" Design enterprise patterns for AI guardrails, output validation, human-in-the-loop controls, and least-privilege access for AI agents and services.
" Partner with enterprise architecture, data platform, and infrastructure teams to ensure AI security controls are embedded consistently across on-prem, cloud, and SaaS AI deployments.
" Evaluate emerging AI security threats and technologies, advising leadership on architectural implications and roadmap priorities.
" Mentor the AI Engineer team on secure design practices; provide technical governance over implementation to ensure alignment with architecture standards.
" Contribute to AI governance policy, risk frameworks, and control mapping (NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10) from a technical architecture perspective. Required

Qualifications
" 8+ years in security architecture or enterprise architecture roles, including recent experience architecting controls for AI/ML or data platforms.
" Deep understanding of AI/ML system design (data pipelines, model training/serving, MLOps) and associated security and privacy risks.
" Strong grasp of cloud security architecture (Azure and/or AWS/GCP), identity and access management, network segmentation, and zero-trust principles.
" Familiarity with AI governance and security frameworks: NIST AI RMF, ISO/IEC 42001, OWASP Top 10 for LLM Applications, and applicable data privacy regulation.
" Demonstrated ability to communicate architecture decisions to both engineering teams and executive stakeholders.

Preferred Qualifications
" Architecture certifications (SABSA, TOGAF) and/or security certifications (CISSP, CCSP).
" Experience building AI/ML platforms or securing generative AI/agentic AI deployments at enterprise scale.
" Retail or large consumer-brand enterprise experience.






For more information and other jobs available please contact our recruitment team at (url removed). To view all the jobs available in the USA and Asia please visit our website at (url removed).