Security Architect

At SitusAMC, we are on a mission to transform businesses and foster career growth for our employees. If you are a real estate veteran, a passionate technologist, or someone looking to launch their career, we invite you to join us as we create opportunities for our clients and ourselves. We value authenticity, advocacy for others, adaptability, ambition, and a global mindset combined with local actions. Essential Job Functions:Implement secure architecture patterns in AWS and Microsoft Azure environments.Deploy and operationalize a CNAPP/CSPM platform.Enhance cloud security by integrating CNAPP with cloud-native tools (e.g., GuardDuty, Security Hub, IAM, KMS, CloudTrail) and Azure security capabilities.Collaborate with Security Operations to automate integrations with MSSP and SOAR response principles.Partner with engineering and development teams to embed application security controls into development and deployment pipelines.Manage vulnerability and patching programs across infrastructure and applications.Contribute to security architecture reviews, threat modeling, and design validation.Support the implementation of IAM, PAM, and least-privilege access models.Work alongside the SecOps team to integrate telemetry into SIEM platforms for effective monitoring and detection.Develop and maintain secure configuration baselines and reference architectures.Drive the patching strategy for servers, endpoints, and cloud workloads.Conduct architecture reviews and document security requirements.Collaborate directly with engineering leaders to integrate security into product roadmaps.Stay informed on the latest security trends, threats, and technologies to continuously strengthen our security posture.Cultivate a culture of zero trust security within engineering, development, and product teams.Qualifications / Requirements:Bachelor's degree in a technical field or equivalent experience.Minimum of 6+ years in the industry, with at least 1 year at a Senior Associate level or in a similar role.Experience in cybersecurity, cloud security, or security engineering is essential.Relevant certifications such as CISSP, CEH, GIAC, or ISSAP are preferred.Hands-on experience securing AWS and/or Azure environments.Familiarity with CNAPP/CSPM platforms.Knowledge of vulnerability scanning, remediation tracking, and patch management processes.Understanding of application security principles including SAST, DAST, secure SDLC, and threat modeling.Experience with IAM, PAM, and access governance concepts.Exposure to SIEM and security monitoring integrations.Knowledge of Zero Trust architecture principles.Understanding of network segmentation, VPN, Conditional Access, and cloud networking fundamentals.Proficiency in automation and scripting languages (e.g., Python, PowerShell, Terraform).Familiarity with container security technologies (Docker, Kubernetes) and infrastructure as code (IaC) tooling.Knowledge of encryption and key management practices.Strong communication skills, able to engage with both technical and non-technical stakeholders.Highly motivated self-starter comfortable managing multiple deliverables in a fast-paced environment.The annual full-time base salary for this role ranges from $115,000.00 to $135,000.00, with specific compensation determined through interviews, education, experience, skills, and market data. Eligible positions may receive discretionary bonuses based on program guidelines and senior management approval.

Create an account to see the full posting, access our search engine, and more.