Senior Security Architect

AEGIS•Jersey City, NJ

5d•Hybrid

About The Position

AEGIS Insurance Services, Inc. (“AEGIS”) has an immediate opening for a Senior Security Architect responsible for defining, designing, implementing, and maintaining the enterprise security architecture of AEGIS. This role serves as the senior technical authority for cybersecurity and provides leadership across security architecture, engineering, operations, infrastructure security, cloud security, identity and access management, application security, data protection, and security technology modernization. The Senior Security Architect partners closely with the Chief Information Security Officer, Vice President, IT Infrastructure, infrastructure team, application teams, business stakeholders, risk management, legal, and external vendors to ensure technology solutions align with regulatory requirements and cybersecurity best practices.

Requirements

Minimum 10 years of progressive experience in cybersecurity, security engineering, infrastructure security, network security, cloud security, or related technical disciplines
Undergraduate degree in Information Systems, Management Systems, Cybersecurity or related discipline or equivalent certification or work experience
Demonstrated experience designing and implementing enterprise security architectures
Extensive hands-on experience administering and supporting security technologies
Demonstrated experience in security operations, incident response, vulnerability management, and security architecture
Experience with Microsoft 365 security, cloud security, identity and access management, endpoint security, and data protection technologies
Experience evaluating and selecting cybersecurity technologies and vendors

Nice To Haves

CISSP, GIAC Certified Enterprise Defender (GCED), GIAC Certified Incident Handler (GCIH), GIAC Cloud Threat Detection (GCTD) certifications desired
Insurance industry experience desired

Responsibilities

Define and maintain enterprise security architecture, standards, policies, design patterns, and technical control requirements
Develop security roadmaps aligned with business objectives, regulatory requirements, and risk management priorities
Lead security architecture reviews for infrastructure, cloud, application, network, endpoint, and third-party technology initiatives
Identify security gaps and recommend strategic remediation plans
Define secure reference architectures and implementation standards
Design, implement, configure, administer, and maintain security technologies and controls
Perform advanced troubleshooting of security, network, cloud, server, endpoint, and identity-related technologies
Lead implementation activities for new security technologies, upgrades, migrations, and modernization projects
Maintain responsibility for day-to-day operation of key cybersecurity platforms
Participate directly in incident response, investigation, containment, eradication, recovery, and lessons learned activities
Conduct technical security assessments, architecture reviews, and risk analyses
Develop and maintain security technical documentation, standards, procedures, implementation guides, and architectural diagrams
Support vulnerability management and IT’s remediation efforts
Perform security monitoring, threat analysis and control validation activities
Develop and govern enterprise security hardening requirements for operating systems, network devices, servers, cloud services, and supporting infrastructure; collaborate with IT and Infrastructure teams to implement secure configurations, remediate security gaps, and continuously improve cybersecurity resilience across the technology environment
Participate in maintenance windows, emergency response activities, and after-hours support as required
Maintain deep technical expertise across a broad range of security disciplines within a lean security organization
Provide architecture and operational support for Microsoft 365 security capabilities including Entra ID, Intune, Defender, Purview, SharePoint Online, OneDrive, Exchange Online, Teams, and Microsoft Copilot
Develop security controls protecting sensitive information, collaboration platforms, and AI-enabled technologies
Evaluate security risks associated with cloud adoption, data sharing, AI technologies, and third-party integrations
Support Zero Trust initiatives across identity, device, application, and data layers
Provide architectural and engineering leadership for network security, firewalls, secure web gateways, remote access, endpoint protection, server security, segmentation, and monitoring solutions
Review infrastructure designs for security
Lead security reviews of system upgrades, migrations, and infrastructure modernization initiatives
Evaluate cybersecurity products, managed services, and third-party technologies
Perform technical due diligence and security assessments during procurement activities
Develop security requirements for vendor selection and solution design
Lead proof-of-concept activities and security architectural reviews for new technologies
Serve as the senior technical escalation point for cybersecurity matters
Mentor security, infrastructure, and application teams on secure design and operational best practices
Communicate technical risks and recommendations to technical and non-technical audiences
Influence technology decisions across the enterprise through expertise and leadership
Maintain awareness of emerging threats, technologies, regulations, and industry best practices