Senior Information Security Architect (Hybrid) - Symmetrio
Philadelphia, PA
About the Job
Symmetrio is actively recruiting for a Senior Information Security Architect for our customer, a large government organization in Philadelphia, PA. Reporting directly to the Chief Information Security Officer, the Senior Information Security Architect will ensure that organizational security requirements are implemented in all aspects of the enterprise IT architecture.
The ideal candidate will be a subject matter expert in information security, capable of designing, implementing, and maintaining robust security solutions for our customer's environment. This role requires a deep understanding of cloud security, particularly in Azure and AWS environments, as well as experience leading security initiatives in large enterprise organizations.
This is a full-time, hybrid position requiring on-site presence in Philadelphia 2 days per week.
Responsibilities
- Develop/integrate cybersecurity designs for systems and networks with multilevel security requirements
- Employ secure configuration management processes
- Ensure that acquired or developed system(s) and architecture(s) are consistent with organization's cybersecurity architecture guidelines.
- Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.
- Develop and maintain the organization's security roadmap
- Design and implement security architectures for Azure and AWS environments
- Conduct regular security assessments of cloud infrastructure
- Develop and maintain cloud security policies and procedures
- Implement and manage cloud-native security tools and services
- Lead incident response efforts for high-priority security events
- Develop and maintain security monitoring and alerting systems
- Implement and manage SIEM (Security Information and Event Management) solutions
- Perform risk assessments and develop mitigation strategies
- Ensure compliance with relevant industry standards and regulations
- Perform security code reviews and application penetration testing
- Collaborate with executive leadership to align security initiatives with business objectives
- Manage security projects and allocate resources effectively
Requirements
- Bachelor's degree in Computer Science, Information Security, or a related field
- 8+ years of experience in information security roles
- Extensive experience with cloud security, particularly in Azure and AWS environments
- Strong knowledge of security frameworks and best practices (e.g., NIST, ISO 27001, CIS Controls)
- Proficiency in scripting and automation (e.g., Python, PowerShell, Bash)
- Excellent understanding of network protocols and security technologies
- Experience with security tools such as SIEM, EDR, IDS/IPS, and vulnerability scanners
- Strong analytical and problem-solving skills
- Excellent communication skills, both written and verbal
- Ability to work effectively in a fast-paced, dynamic environment
Preferred Qualifications
- Experience with CrowdStrike endpoint detection and response solutions
- Knowledge of Microsoft Entra ID (formerly Azure AD) and its security features
- Experience with implementing and managing conditional access policies
- Familiarity with email security solutions and best practices
- Certifications such as CISSP, CISM, or cloud security certifications (e.g., AWS Certified Security - Specialty, Azure Security Engineer)
Benefits
- Health Care Plan (Medical, Dental & Vision)
- Retirement Plan (401k, IRA)
- Paid Time Off (Vacation, Sick & Public Holidays)