Security Architect

Nexcess

4d•$140,000 - $160,000•Hybrid

About The Position

The Information Security Architect is responsible for designing, implementing, and continuously improving the organization’s security architecture across infrastructure, cloud platforms, hosting environments, applications, and operational systems. This role provides technical leadership and strategic guidance to ensure security controls, standards, and practices align with business objectives, regulatory requirements, and operational risk management goals. The Security Architect partners closely with Infrastructure, Platform Engineering, Development, Compliance, and Operations teams to design scalable and secure solutions while strengthening the organization’s overall security posture. This position plays a critical role in evaluating risk, developing security standards, supporting compliance initiatives, and guiding secure operational and engineering practices across complex hosting and cloud environments. This role requires deep technical expertise, strong analytical skills, and the ability to communicate security concepts effectively to both technical and non-technical stakeholders.

Requirements

5+ years of experience in Information Security, Infrastructure Engineering, Cloud Engineering, Systems Engineering, or related technical fields
3+ years of experience designing or supporting enterprise security architecture and security controls
Bachelor’s Degree in Information Security, Computer Science, Information Technology, or related field, or equivalent practical experience
Strong understanding of infrastructure security principles including networking, systems hardening, identity management, access control, encryption, logging, and monitoring
Experience working with cloud infrastructure platforms and virtualization technologies
Experience supporting security compliance frameworks such as PCI-DSS, SOC, ISO 27001, CIS, or NIST
Strong knowledge of security architecture methodologies, operational risk management, and secure system design
Experience with vulnerability management, remediation coordination, and security assessment processes
Excellent analytical, organizational, and problem-solving skills
Strong written and verbal communication skills
Ability to manage multiple priorities in a fast-paced operational environment

Nice To Haves

Professional security certifications such as CISSP, CCSP, CISM, Security+, or equivalent
Experience working within hosting, cloud infrastructure, managed services, SaaS, or enterprise operations environments
Experience with identity and access management (IAM), SSO, MFA, and privileged access management solutions
Familiarity with containerization, Kubernetes, infrastructure-as-code, and DevSecOps practices
Experience with SIEM, EDR, vulnerability scanning, and security monitoring platforms
Experience supporting customer-facing security reviews or audits

Responsibilities

Design and maintain enterprise security architecture standards across cloud, infrastructure, network, application, and hosting environments
Develop secure reference architectures, security baselines, and operational security standards
Evaluate and recommend security technologies, tools, and controls to improve organizational security posture
Partner with Infrastructure, Engineering, and Platform teams to ensure secure system design and implementation practices
Review infrastructure, network, and application designs for security risks, vulnerabilities, and compliance alignment
Assist with the development and implementation of identity and access management (IAM), segmentation, hardening, encryption, and monitoring strategies
Support secure cloud adoption and infrastructure modernization initiatives
Provide technical guidance on security controls for production systems, customer environments, and internal platforms
Identify, assess, and document security risks across systems, applications, infrastructure, and operational processes
Partner with Compliance and Governance teams to support PCI-DSS, SOC, ISO, customer audits, and other security-related assessments
Assist in developing and maintaining security policies, standards, procedures, and technical controls
Participate in security reviews, risk assessments, vulnerability management, and remediation planning activities
Support operational maturity initiatives related to governance, access management, logging, monitoring, and security controls
Evaluate exceptions to security standards and provide documented risk recommendations
Support incident response activities involving infrastructure, access, operational security, and customer-impacting events
Assist with threat modeling, security investigations, forensic analysis coordination, and root cause reviews as needed
Provide guidance on vulnerability remediation priorities and risk mitigation strategies
Collaborate with operational teams to strengthen monitoring, detection, alerting, and defensive security capabilities
Participate in security awareness initiatives and promote security best practices throughout the organization
Serve as a subject matter expert on infrastructure and operational security practices
Partner cross-functionally with Engineering, Infrastructure, Security Operations, Compliance, and Leadership teams
Communicate technical risks and recommendations clearly to both technical and business stakeholders
Mentor technical teams on secure architecture principles and security best practices
Stay current on emerging threats, vulnerabilities, industry trends, and evolving security technologies
Additional duties as assigned