Part time - Hybrid - Security Architect with 15 years - San Francisco, CA

Dear Applicants,

Greetings!

We currently have an opening for the position of Security Architect. Candidates must have strong experience working with government agencies.

If you are interested and meet the requirements, please share your updated resume along with your contact details.

Email: shahATSprucetechDOTcom

Contact: (Nine Seven Three) (Five Two Eight) (Five Seven Seven Three)

We look forward to hearing from you.

Title: Security Architect with 15 years

Location:San Francisco, CA, preferred local only

Duration:6 months

Rate:$70/hr c2c

Part time

Hybrid - one day onsite, rest other days remote

Job Description:

A Security Architect is responsible for designing, implementing, and maintaining an organization's overall security architecture to protect its systems, networks, applications, cloud infrastructure, and sensitive data. The role involves defining security standards, assessing risks, implementing security controls, and ensuring compliance with applicable security policies and regulatory requirements.

Key Responsibilities

Security Architecture & Design: Design and maintain enterprise security architecture, security frameworks, and technical security standards.

Cloud Security: Develop security solutions for Microsoft Azure, AWS, and other cloud platforms, including identity protection, network security, and data protection.

Identity & Access Management (IAM): Implement and manage Microsoft Entra ID, Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, Privileged Identity Management (PIM), and Role-Based Access Control (RBAC).

Network Security: Design secure network architectures, including firewalls, VPNs, network segmentation, Zero Trust, and secure remote access.

Endpoint Security: Develop endpoint security strategies using Microsoft Intune, Microsoft Defender for Endpoint, device compliance policies, and endpoint detection and response (EDR).

Security Risk Assessment: Conduct security assessments, threat modeling, vulnerability assessments, and risk analysis to identify and mitigate security gaps.

Data Protection: Implement data classification, encryption, Data Loss Prevention (DLP), and information protection controls.

Security Operations: Collaborate with SOC teams to improve threat detection, incident response, security monitoring, and remediation processes.

Compliance & Governance: Ensure alignment with security frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, SOC 2, and applicable regulatory requirements.

Security Documentation: Develop security architecture diagrams, policies, standards, procedures, and technical implementation guidelines.

Stakeholder Collaboration: Work with IT infrastructure, cloud engineering, networking, application development, compliance, and executive teams to integrate security into business initiatives.

Required Technical Skills

Enterprise security architecture and Zero Trust principles.

Microsoft security ecosystem, including Microsoft Entra ID, Microsoft Defender, Microsoft Intune, and Microsoft Purview.

Cloud security architecture across Azure, AWS, or Google Cloud.

Network security technologies, including firewalls, VPNs, IDS/IPS, and network segmentation.

Identity governance, privileged access management, and authentication protocols.

Security information and event management (SIEM), such as Microsoft Sentinel or Splunk.

Vulnerability management, penetration testing concepts, and threat modeling.

Encryption, key management, data protection, and security incident response.

Knowledge of security frameworks such as NIST, ISO 27001, CIS Controls, and MITRE ATT&CK.

Qualifications

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.

Typically 5–10+ years of experience in IT infrastructure, cybersecurity, or information security, depending on the seniority of the role.

Experience designing and implementing enterprise security solutions.

Strong analytical, problem-solving, communication, and stakeholder management skills.

Preferred Certifications

CISSP – Certified Information Systems Security Professional

CCSP – Certified Cloud Security Professional

SABSA certifications

TOGAF certification

Microsoft Certified: Cybersecurity Architect Expert

AWS Certified Security – Specialty

Certified Information Security Manager (CISM)