IT Security Architect

Conduent • Gates, NY

8h • $130,000 - $160,000 • Remote

About The Position

Conduent is building an architecture function responsible for defining enterprise technology standards across identity, infrastructure, cloud, and security platforms.

The IT Security Architect defines and governs the security architecture that shapes how enterprise technology platforms are designed across on-site, hybrid, and cloud environments. The role establishes technical standards, reference architectures, and security guardrails that guide engineering teams and modernization initiatives across the organization.

Requirements

• 10+ years in enterprise security or infrastructure architecture
• Deep expertise in identity architecture (Active Directory, Entra ID, privileged access models)
• Strong experience designing hybrid enterprise technology security models
• Experience defining enterprise technology architecture standards and security guardrails
• Familiarity with NIST CSF and enterprise regulatory frameworks

Nice To Haves

• CISSP
• Azure security or architecture certifications (AZ-500, AZ-305)
• Experience supporting large-scale domain, identity, or tenant consolidation initiatives

Responsibilities

• Design, maintain, and drive execution of security architecture frameworks and roadmaps spanning on-premises, hybrid, and cloud environments, aligned to regulatory and industry frameworks (NIST, ISO 27001, SOC 2, NYDFS) and translated into enforceable architectural controls.
• Define enterprise identity and authentication architecture across Active Directory and Microsoft Entra ID, including Tier-0 protections, privileged access models, authentication protocol standards (Kerberos, OAuth, SAML, OIDC), and cross-tenant identity integration patterns.
• Lead security architecture for domain, forest, and tenant consolidation initiatives, ensuring hardened trust models, secure hybrid identity boundaries, and resilient authentication infrastructure.
• Establish security architecture standards for infrastructure/technology platforms including datacenter environments, server platforms, hybrid connectivity, and administrative privilege boundaries.
• Define cloud security architecture standards across enterprise cloud platforms, including Azure security baselines, RBAC models, policy enforcement, workload identity controls, and secure integration patterns across multi-tenant environments.
• Define cloud, container, and DevSecOps security standards including image governance, runtime protection, and embedded controls within infrastructure-as-code and CI/CD pipelines.
• Establish data protection and cryptographic architecture standards including data classification, encryption, key management, PKI, DLP patterns, and data residency.
• Define network and hybrid connectivity security architecture including segmentation strategies, private connectivity models, micro-segmentation, and blast-radius containment patterns.
• Define security telemetry, logging, and audit architecture standards to support measurable control enforcement, SIEM/XDR integration, and incident readiness by design.
• Lead security architecture reviews, threat modeling, and risk assessments for major initiatives and emerging technologies, identifying systemic control gaps and defining mitigation patterns and measurable security architecture KPIs.

Benefits

• Health & Welfare Benefits: Comprehensive plans tailored to your needs, effective from day one.
• Retirement Savings: Robust programs to help you secure your financial future.
• Employee Discounts: Access to a wide range of discounts on merchandise, services, travel, and more.
• Career Growth Opportunities: Paths for advancement within a global organization.
• Paid Training: Learn while you earn with award-winning learning platforms.
• Paid Time Off: Competitive PTO packages to help you recharge.
• Great Work Environment: Join an award-winning culture that values diversity and inclusion.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed