Senior Security Architect

🕒 August 7

🇺🇸 United States – Remote

💵 $155k - $210k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 24%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Ensono

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

Consulting • Cloud Services • IT Services

Ensono is a managed service provider and expert technology advisor focused on enabling clients to navigate complex IT environments. Ensono offers services including mainframe-as-a-service, cloud migration, and IT infrastructure management, with a strong emphasis on modernizing legacy systems and optimizing IT operations. The company is recognized for its flexibility and allyship, providing businesses with the ability to adapt and evolve through solutions like Ensono Flex®. It specializes in both mainframe and cloud solutions, holding competency in AWS mainframe modernization and is a global Azure Expert MSP. Ensono acts as an ally, helping companies achieve better business outcomes through IT innovation and strategic technology advisement.

📋 Description

• Define and advance secure architecture across Ensono’s enterprise technology environment, emphasizing cloud platforms and artificial intelligence • Translate business, technology, risk, privacy, and compliance requirements into security principles, reference architectures, design patterns, standards, and guardrails • Own and evolve enterprise cloud and AI security architecture principles, roadmaps, reference architectures, reusable design patterns, and technical standards • Lead security architecture reviews for solutions, cloud deployments, AI use cases, AI agents, SaaS platforms, applications, APIs, and third-party integrations • Design and review secure multi-cloud and hybrid architectures across Azure, AWS, GCP, SaaS, hybrid infrastructure, AI-enabled applications, generative AI platforms, AI agents, model and data pipelines, and third-party integrations • Define cloud governance guardrails using policy-as-code, infrastructure-as-code security, secure baselines, configuration standards, posture management, workload protection, and continuous compliance capabilities • Assess cloud architectures against shared-responsibility requirements and identify control ownership • Define security architecture for generative AI, machine learning, AI-enabled applications, RAG, AI gateways, AI agents, plugins, tools, APIs, and Model Context Protocol integrations • Establish AI security requirements covering data handling, model and agent access, non-human identities, least privilege, prompt-injection defenses, secure retrieval sources, output validation, supply-chain risk, audit logging, monitoring, human oversight, and emergency disablement • Perform threat modeling and abuse-case analysis for cloud and AI solutions • Embed security requirements into the SDLC, CI/CD pipelines, cloud landing zones, architecture review gates, and deployment processes • Provide guidance on Zero Trust, identity-centric security, data-centric protection, secure APIs, segmentation, cryptography, security telemetry, and defense in depth • Document architecture decisions, control mappings, exceptions, risks, and remediation recommendations; present design options and residual risk to stakeholders • Collaborate with Security Operations and Incident Response to ensure architectures support detection, investigation, containment, and recovery • Evaluate emerging technologies, security products, and supplier capabilities; contribute to technology selection, proofs of concept, and strategic roadmaps • Mentor engineers, architects, and delivery teams; deliver knowledge transfer and promote consistent security architecture standards

🎯 Requirements

• Bachelor’s degree in Computer Science, Information Security, Information Technology, Engineering, Mathematics, or a related field, or equivalent relevant experience • 8+ years of cybersecurity experience, including significant responsibility for security architecture and the design and review of secure enterprise solutions • Experience designing and reviewing security architectures for complex enterprise environments spanning cloud security, identity and access management, Zero Trust, data protection, network security, threat modeling, and secure-by-design principles • Experience designing cloud security architectures in Microsoft Azure and/or AWS, including multi-cloud and hybrid-cloud environments • Experience designing or governing security controls for cloud identity and privileged access, CSPM/CWPP, network segmentation, containers and Kubernetes, serverless services, encryption, key and secrets management, cloud logging and monitoring, and infrastructure as code • Experience conducting security architecture or risk assessments for AI/ML and generative AI solutions, including LLM applications, RAG, AI agents, model APIs, gateways, AI data flows, and third-party AI services • Experience translating business, technology, risk, privacy, and compliance requirements into security architectures, standards, reference patterns, guardrails, and actionable technical requirements • Experience leading or contributing to threat modeling and risk analysis and incorporating secure SDLC, DevSecOps, defense in depth, least privilege, and security architecture governance into solution designs • Experience applying security frameworks and controls including NIST CSF, NIST SP 800-53, NIST SP 800-160, NIST SP 800-207, NIST AI RMF, CSA CCM, CIS Controls and Benchmarks, ISO/IEC 27001, and OWASP guidance • 5+ years of cybersecurity experience within a professional services, consulting, or managed services environment, supporting complex enterprise or client environments • Experience leading security architecture reviews for complex enterprise solutions, identifying material risks, defining required security controls and mitigations, documenting residual risk, and presenting recommendations to technical and executive stakeholders • Bonus: experience with cloud landing-zone security, policy-as-code, DevSecOps controls, and architecture review processes • Bonus: experience with Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Purview, Entra ID, Azure Policy, AWS Organizations, Security Hub, GuardDuty, Config, CloudTrail, or comparable capabilities • Bonus: knowledge of AI-specific threats and controls • Bonus: familiarity with ISO/IEC 42001, OWASP guidance for LLM and generative AI applications, and AI governance or model risk management practices • Bonus: relevant certifications such as CISSP, CCSP, SABSA, AWS Security Specialty, Microsoft Cybersecurity Architect Expert, Azure Security Engineer Associate, or comparable credentials

🏖️ Benefits

• Unlimited Paid Days Off • Three health plan options • 401k with company match • Eligibility for dental, vision, short and long-term disability, life and AD&D coverage, and flexible spending accounts • Family Forming Benefit including fertility coverage and adoption/surrogacy reimbursement • Paid childbearing and paternal leave • Education Reimbursement, Student Loan Assistance or 529 College Funding • Sabbatical leave • Wellness program • Flexible work schedule • Annual bonus plan based on company and individual performance • Equity grant under our Associate Equity Appreciation Program • Option to work from home or in Ensono offices when not required on a client site