Senior Enterprise Security Architect (Cyber Protection)

Phia LLC• US,

14h•Remote

About The Position

phia is hiring a Senior Enterprise Security Architect to support cyber protection architecture, engineering, and operations at a large Federal agency. The role provides strategic technical and operational expertise to support leadership vision, planning, and implementation, with a focus on enterprise infrastructure, network technologies, and security architecture. The position offers remote work flexibility. Candidates must be U.S. citizens located in the United States and able to obtain Public Trust vetting approval. The architect serves as the primary security architecture advisor to agency infrastructure security leadership and helps translate technical risks and structural vulnerabilities into business-risk metrics. The position leads collaborative design, threat modeling, remediation, and architectural reviews across agency offices, engineering teams, and external partners. It develops an enterprise security architecture roadmap aligned with department goals and business needs, covering edge and network defense, cloud and transport security, endpoint protection, certificate lifecycle management, and security automation using SI and LLM capabilities. The role also identifies and mitigates security gaps across a hybrid environment consisting of physical data centers and multi-cloud platforms; establishes and enforces infrastructure security governance and policies; advises on agency engineering security edge workstreams; monitors the global hybrid footprint for structural weaknesses; and provides status reporting and plans to management. The position requires extensive enterprise security architecture, cybersecurity engineering, and IT operations experience, including hands-on expertise across network, endpoint, cloud, identity, and security monitoring technologies.

Requirements

15+ years of experience in enterprise security architecture, cybersecurity engineering, and IT operations.
10+ years of progressive experience in cybersecurity and infrastructure, including 5+ years in a dedicated architecture role directly influencing architectural decisions and priorities.
15+ years of experience with edge and perimeter protection solutions and designs, including IDS/IPS, WAF/WAAP, and SD-WAN remote security.
Strong experience with SASE/SSE convergence, including SD-WAN, CASB, secure web gateways (SWG), and Zero Trust Network Access (ZTNA).
Strong experience with network service security and infrastructure, including DNS security, PKI and CAOps, and proxy.
Strong understanding of Zero Trust principles and their practical application.
In-depth understanding of security framework alignment, including mapping infrastructure patterns to NIST CSF, NIST SP 800-53, and CIS Critical Security Controls.
Experience assessing and securing large, complex hybrid enterprises spanning multiple physical data centers and multi-cloud environments, including AWS, GCP, and Azure.
15+ years of hands-on architectural experience across PKI, NDR, NGFW, WAAP, EDR/XDR, SIEM, IDS/IPS, DNS protection, proxy, web proxy, PAC, load balancers, IP routing, and data center designs.
Experience developing and applying governance policies and standards for security tools, and managing security governance processes or workstreams while leveraging SI to automate processes.
Experience with security incident response activities.
Understanding of AI application development methodology.
Ability to work independently in a fast-paced environment, with attention to detail.
Excellent communication, organizational, and interpersonal skills.
U.S. citizenship and location in the United States.
Ability to obtain Public Trust security vetting approval.

Nice To Haves

Cisco Certified Internetwork Expert (CCIE), or similar certification.
Certified Information Systems Security Professional (CISSP), or similar certification.
Certifications in cloud platforms, including Microsoft Azure, GCP, or AWS.
Certifications or knowledge in artificial intelligence platforms, technologies, and concepts.

Responsibilities

Serve as the primary security architecture advisor to agency infrastructure security leadership, translating technical risks and structural vulnerabilities into business-risk metrics.
Lead collaborative design, threat modeling, and remediation sessions with agency offices, Network Engineering and Endpoint Management teams, and external vendor and partner organizations.
Develop and author the Enterprise Security Architecture roadmap, aligning security technology investments with department goals and business needs.
Support security architecture across edge and network defense, cloud security, transport security, endpoint protection, and certificate lifecycle management, while advancing security automation using SI and vendor products.
Collaborate with internal and external stakeholders to align initiatives with cyber defense strategies.
Preserve and continuously enhance the agency’s security posture as infrastructure evolves toward its architectural end state.
Identify structural security gaps across hybrid environments involving physical data centers and multiple cloud environments, and engineer resilient mitigations using SI and LLM.
Establish and enforce infrastructure governance and security policies.
Manage or advise on planning and operation of agency engineering security edge workstreams.
Conduct proactive architectural reviews and continuous monitoring of the global hybrid footprint to identify structural weaknesses.
Provide status and activity reporting and plans to management.
Apply security governance processes and standards to security tools and leverage SI to automate processes.
Participate in security incident response activities.