Cybersecurity Architect - Information Technology

Fisher Dynamics•St. Clair Shores, MI

4d•Onsite

About The Position

The Cybersecurity Architect will design and implement comprehensive security architecture and controls for Fisher Dynamics' custom ERP platform and AI/LLM infrastructure. This position will architect security at every layer: application, data, infrastructure, and AI model integrity. Candidates MUST be local to the Metro Detroit Area. Relocation is not available. This role does not provide immigration sponsorship. Candidates must be legally authorized to work in the US without requiring sponsorship now or in the future.

Requirements

Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field.
5-8 years of professional cybersecurity and security architecture experience.
Demonstrated experience designing security architectures for large-scale systems or enterprise platforms required.
Expert knowledge of security architecture, threat modeling, and risk assessment.
Advanced understanding of application security, secure coding, and OWASP Top 10.
Deep expertise in cryptography, encryption standards, and key management.
Strong knowledge of network security, firewalls, VPNs, and network segmentation.
Experience with cloud security (AWS, GCP, Azure) and cloud-native security patterns.
Proficiency with security tools: vulnerability scanners, SIEM, intrusion detection.
Knowledge of compliance frameworks (SOX, GDPR, HIPAA, PCI-DSS).
Experience with identity and access management (IAM, RBAC, OAuth, SAML).
Understanding of API security, authentication/authorization protocols.
Knowledge of secure data architecture and data protection techniques.
Familiarity with ML/AI security and model integrity concerns.
Strong knowledge of incident response and forensics.
Experience with penetration testing and security assessments.
Excellent communication skills for presenting security concepts to technical and executive audiences.
Candidates MUST be local to the Metro Detroit Area.
Candidates must be legally authorized to work in the US without requiring sponsorship now or in the future.

Nice To Haves

Master's degree preferred.
CISSP, CCSK, or similar certifications strongly preferred.
Experience with ERP, financial systems, or mission-critical applications strongly preferred.
Security certifications (CISSP, CCSK, CEH) preferred.

Responsibilities

Design end-to-end security architecture for the ERP platform across application, data, infrastructure, and AI layers.
Conduct threat modeling and risk assessments for ERP modules and workflows.
Define security controls, best practices, and standards for the platform.
Design authentication, authorization (RBAC), encryption, and data protection mechanisms.
Architect secure APIs, data access patterns, and audit logging systems.
Establish secure coding standards and OWASP compliance requirements for development teams.
Review architecture and code for security vulnerabilities; recommend remediation.
Conduct security reviews of APIs, integrations, and third-party connections.
Implement security testing (SAST, DAST) in CI/CD pipelines.
Design mechanisms to prevent common attacks: SQL injection, cross-site scripting, privilege escalation.
Design data protection architecture for sensitive ERP data: financial records, supplier information, production data.
Implement encryption standards for data at rest and in transit.
Establish data access controls and audit logging to track data usage and modifications.
Design privacy controls compliant with data governance and regulatory requirements.
Ensure compliance with data retention, purging, and archival policies.
Design security controls for ML/AI models and feature pipelines to prevent model poisoning and tampering.
Implement monitoring for adversarial attacks on models and anomalous predictions.
Secure model serving infrastructure and ensure integrity of model outputs.
Design data isolation and access controls for training and inference data.
Establish audit trails for model decisions and predictions.
Design secure cloud architecture on AWS, GCP, or Azure with proper security groups, VPCs, and network segmentation.
Implement infrastructure hardening, patch management, and vulnerability remediation.
Design secrets management, key rotation, and credential security.
Establish monitoring, logging, and alerting for security incidents.
Conduct disaster recovery and business continuity planning with security considerations.
Establish security policies, standards, and procedures aligned with industry best practices.
Ensure compliance with relevant regulations (SOX, GDPR, manufacturing standards).
Implement audit logging and reporting for regulatory compliance.
Design security incident response and escalation procedures.
Conduct security awareness training and promote security culture.
Conduct regular security assessments, penetration testing, and vulnerability scanning.
Identify, prioritize, and track security vulnerabilities and their remediation.
Perform security testing of new features and system changes before deployment.
Monitor for emerging threats and security advisories; recommend updates.
Support production security incident investigation and resolution.