Architecture Consultant

Job not on LinkedIn

🕒 October 3

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🏛️ Architect

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GFT Technologies

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1987

💼 Consulting

🛡️ Insurance

🔒 Cybersecurity

Consulting • Insurance • Cybersecurity

GFT Technologies is a leading technology and digital transformation company that specializes in providing advanced solutions for consent management and data privacy compliance. Their flagship product, Cookiebot, enables businesses to automate user consent collection efficiently, ensuring adherence to complex privacy regulations such as GDPR and CCPA. GFT's solutions facilitate seamless integration into existing digital infrastructures, helping over 600,000 customers globally manage user data transparently and securely.

📋 Description

• Develop resilient information security architectures that protect assets and ensure regulatory compliance, as well as the trust of customers and stakeholders. • Define and implement security architectures based on Defense in Depth and Zero Trust. • Assess the risks of new integrations, hybrid environments, multicloud architectures, and SaaS solutions; issue technical opinions and document residual risks. • Lead threat modeling using STRIDE, DREAD, OWASP Top 10, and MITRE ATT&CK. • Ensure Security by Design (SbD) and Privacy by Design (PbD) throughout the development lifecycle. • Design and audit IAM and PAM solutions, including SSO, MFA, OIDC, SAML 2.0, RBAC, and secure credential management. • Validate DevSecOps practices by integrating SAST, DAST, SCA, IaC Security, and Secrets Detection into CI/CD pipelines. • Define encryption standards for data in transit and at rest, and support HSM processes and cryptographic key management. • Ensure compliance with Brazil's LGPD, Banking Secrecy Law, PCI DSS, and Central Bank of Brazil regulations. • Serve as the technical lead for impact assessments, access management, penetration tests, and security opinions, approving systemic cyber risks.

🎯 Requirements

• Zero Trust Security Frameworks and Architecture (NIST SP 800-207). • NIST SP 800-53. • OWASP ASVS 4.0, MASVS, MASTG, and API Security Top 10. • CIS Controls. • Application Security Architecture. • Vulnerability Management. • Endpoint & Cloud Protection: CrowdStrike Falcon, Trend Micro Vision One, and QualysGuard. • Database Security & DSPM: IBM Security Guardium (DAM/GDP, VA, GKLM) and Securiti.ai. • IAM and PAM: CyberArk, BeyondTrust, and Keycloak. • Mobile Security: Guardsquare (DexGuard, iXGuard, ThreatCast) and MobSF. • Network, Edge, and API Security: Palo Alto NGFW, Prisma Access, Zscaler (ZIA, ZPA, and Risk360), Cloudflare WAF, and Apigee X. • Threat Intelligence and Offensive Security: MITRE Caldera, Burp Suite Professional, Cobalt Strike, MISP, Shodan, and ANY.RUN. • Hybrid Identity: Microsoft Entra ID, Entra Connect, and Intune. • SIEM/SOAR: Splunk, Splunk Enterprise Security, and Wazuh. • Cloud security certifications, such as Google Cloud Professional Cloud Security Engineer, AWS Certified Security – Specialty, or equivalent certifications, are a plus. • Certifications focused on security architecture and compliance are a plus. • Experience with due diligence and continuous monitoring of third-party cyber risks is a plus. • Experience with Axur (DRP/CTI) and SecurityScorecard (GRC/TPRM) is a plus. • Advanced knowledge of OWASP, Application Security Architecture, and Vulnerability Management is a plus. • Strategic security vision. • Analytical skills for risk management. • Strong consultative approach when working with technical and business teams. • Effective communication and the ability to influence critical information security decisions.

🏖️ Benefits

• Multi-benefit card – choose how and where to use it. • Study scholarships for undergraduate, graduate, MBA, and language courses. • Certification incentive programs. • Flexible working hours. • Competitive salaries. • Annual performance reviews with a structured career development plan. • International career opportunities. • Wellhub and TotalPass. • Private pension plan. • Childcare assistance. • Medical insurance. • Dental insurance. • Life insurance.