Senior Enterprise IT Security Architect
A
AHEADIT security
United StatesFull-TimeSenior
Salary180,000 - 200,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- Minimum 10 years of relevant enterprise IT security architecture, infrastructure, or cyber recovery experience.
- Required Skills
- AWSGCPAzure
Requirements
- Minimum 10 years of relevant enterprise IT security architecture, infrastructure, or cyber recovery experience.
- Hands-on experience designing and deploying isolated, air-gapped, or highly segmented recovery environments.
- Practical knowledge of network segmentation, firewalling, VLANs, routing controls, and isolation techniques across on-premises and cloud platforms.
- Deep understanding of Active Directory, including isolated forest recovery, DNS and time dependencies, and identity separation.
- Experience with virtualization platforms such as VMware or Hyper-V; cloud infrastructure on AWS, Azure, or GCP; storage; and core networking services.
- Architectural knowledge of backup and cyber recovery platforms such as Rubrik and Cohesity.
- Demonstrated ability to lead technical teams on complex infrastructure and security projects.
- Strong consulting and client communication skills.
- Experience with Privileged Access Management, phishing-resistant MFA, or Privileged Access Workstation design is preferred.
- Relevant certifications such as CISSP, CISM, or platform-specific VMware, Microsoft, or cloud credentials are preferred.
Responsibilities
- Lead the architecture, design, and hands-on deployment of Isolated Recovery Environments for on-premises, cloud, and hybrid environments.
- Design isolation controls, including network segmentation, air-gapping, one-way replication paths, and firewall and VLAN strategies.
- Architect independent compute, storage, networking, DNS, DHCP, monitoring, and virtualization services within the IRE.
- Design and guide Active Directory forest recovery processes within the isolated environment.
- Define secure administration models using privileged access workstations, restricted access methods, just-in-time access, and PAM integration considerations.
- Design immutable storage and backup ingestion, including clean data transfer into the IRE.
- Develop recovery runbooks, validation procedures, and testing approaches for restoring, scanning, and promoting workloads.
- Lead and mentor delivery teams of typically 3–15 consultants or engineers, providing technical direction and quality oversight.
- Engage client stakeholders to translate cyber resilience requirements into implementable IRE designs.
- Document architectures, standards, and recommendations for client environments.
View Full Description & ApplyYou'll be redirected to the employer's site
