Security Architect

King & Spalding•Columbia, WA

6d•Onsite

About The Position

King & Spalding is a leading global law firm with a commitment to excellence, innovation, and the seamless delivery of legal services. We harness innovative technology and exceptional talent to meet the complex needs of our clients in a fast-paced and dynamic legal landscape. We are seeking a skilled Security Architect to design, implement, and oversee security solutions that protect our organization’s infrastructure, applications, and data. The ideal candidate will have expertise across security domains and be skilled in designing enterprise-level technology and security solutions to meet current and future threat and risk imperatives. This individual will have deep expertise in cloud computing and cloud security and have hands-on experience across the breadth of Microsoft security and infrastructure stack. You will collaborate closely with IT teams, business stakeholders, and security and risk specialists to design and develop robust security frameworks and approaches, and to ensure that applications, infrastructure, identity, access, and networking plans are based in sound security standards and consideration of business objectives. You will participate in development and execution of future-state cloud and security design and implementation activities to ensure consistency and standardization of security across our technology infrastructure.

Requirements

Bachelor’s Degree in a related field (or equivalent experience).
5+ years of experience in cybersecurity, with a focus on security tools, architecture, and cloud security.
Expertise in Microsoft Azure Security Services, including Azure Security Center, Azure Sentinel, Azure AD, and Azure Firewall.
Familiarity with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).
Knowledge of Microsoft Defender suite, including Defender for Endpoint, Defender for Cloud, and Defender for Office 365.
Experience with Zero Trust Security models and frameworks.
Proficiency in security tools such as SIEM, EDR, IAM, DLP, and network security solutions.
Understanding security frameworks such as MITRE ATT&CK, NIST CSF, and CIS Controls.
Strong problem-solving skills with the ability to assess and mitigate security risks effectively.
Excellent communication and stakeholder management skills.

Nice To Haves

Security certifications such as CISSP, CCSP, or Azure Cloud Security certifications are preferred.
Experience with automating security controls and scripting (PowerShell, Python, etc.) preferred.
Knowledge of cloud automation templates, container security and securing modern application architectures in public cloud environments preferred.

Responsibilities

Design and implement security architectures and solutions with a focus on Microsoft Azure environments, and in concert with our full stack of security tools.
Develop security documentation and best practices to support the protection of enterprise assets and data.
Integrate and optimize solutions for secure web gateways, zero trust access, cloud security posture management, data protection, and other areas of security significance.
Collaborate with IT, Security, and business stakeholders to ensure that IT projects and security solutions work in support of business objectives, while also reducing and managing technology and security risk.
Participate in security and technology troubleshooting and analysis efforts.
Work with Cyber Risk and Operations organizations to design solutions in response to security assessments and risk analyses to identify vulnerabilities and build/implement remediation strategies.
Ensure compliance with industry standards and regulations, such as NIST, ISO 27001, SOC 2, and GDPR.
Stay updated on the latest security trends, technologies, and threat landscapes to continuously improve security posture.