Architecture & Solution Design Develop enterprise-wide security architectures aligned to NIST standards (e.g., NIST CSF, SP 800-53, SP 800-171, SP 800-207). Design scalable, secure solutions that address identified risks and business objectives across cloud, on-premises, and hybrid environments. Translate business and technical requirements into secure solution blueprints.
Contribute to the development of reference architectures and security patterns. Leverage hands on engineering implementation experience to provide prescriptive guidance on best practices and possible pitfalls. Solution Review & Risk Mitigation Lead architecture and security reviews for new technologies, applications, and systems.
Identify gaps and weaknesses in proposed solutions and advise on appropriate risk mitigation strategies. Collaborate with engineering and infrastructure teams to ensure secure deployment of systems and services. Provide technical guidance to project and product teams throughout the system development lifecycle.
Governance & Standards Develop and maintain security architecture standards, policies, and control frameworks in alignment with NIST and industry best practices. Participate in or lead internal security governance boards and architecture review boards. Ensure solutions meet internal risk, compliance, and regulatory requirements (e.g., CCPA, NYDFS, PCI DSS).
Contribute to maturity assessments and continuous improvement efforts for cybersecurity architecture. Collaboration & L