出海雷达

IT安全架构师

IT Security Architect

开发工程限定地区(需当地身份)
公司Conduent
薪资$130,000 - $160,000/年
工作地点United States
地域资格限定地区(需当地身份)
时区要求日间重叠约 9 小时,基本正常作息
用工类型Full Time
发布时间18 天前
数据来源Himalayas
前往 Himalayas 查看并投递 →
注意地域限制:该职位明确限定在 United States 招聘。如果你是位于中国大陆的求职者,通常需要当地工作身份才能投递,或需与雇主确认是否接受独立合同(Contractor)形式合作。

IT 安全架构师
职位概述
Conduent 正在构建一个负责定义企业技术标准的架构团队,涵盖身份、基础设施、云和安全平台。
IT 安全架构师定义并管理安全架构,决定企业技术平台在本地、混合和云环境中的设计方式。该角色建立技术标准、参考架构和安全控制措施,指导组织内工程团队和现代化项目。
主要职责

  • 设计、维护并推动执行覆盖本地、混合和云环境的安全架构框架和路线图,符合监管和行业框架(NIST、ISO 27001、SOC 2、NYDFS),并转化为可执行的架构控制措施。
  • 在 Active Directory 和 Microsoft Entra ID 上定义企业身份和认证架构,包括 Tier-0 保护、特权访问模型、认证协议标准(Kerberos、OAuth、SAML、OIDC)以及跨租户身份集成模式。
  • 领导领域、森林和租户整合计划的安全架构,确保强化的信任模型、安全的混合身份边界和可靠的认证基础设施。
  • 建立基础设施/技术平台的安全架构标准,包括数据中心环境、服务器平台、混合连接和管理权限边界。
  • 在企业云平台中定义云安全架构标准,包括 Azure 安全基线、RBAC 模型、策略执行、工作负载身份控制以及多租户环境中的安全集成模式。
  • 定义云、容器和 DevSecOps 安全标准,包括镜像治理、运行时保护以及在基础设施即代码和 CI/CD 流水线中的嵌入式控制。
  • 建立数据保护和加密架构标准,包括数据分类、加密、密钥管理、PKI、DLP 模式和数据驻留。
  • 定义网络和混合连接安全架构,包括分割策略、私有连接模型、微分割和爆炸半径控制模式。
  • 定义安全遥测、日志和审计架构标准,以支持可衡量的控制执行、SIEM/XDR 集成和按设计的事件准备。
查看英文原文

IT Security Architect
Role Summary
Conduent is building an architecture function responsible for defining enterprise technology standards across identity, infrastructure, cloud, and security platforms.
The IT Security Architect defines and governs the security architecture that shapes how enterprise technology platforms are designed across on-site, hybrid, and cloud environments. The role establishes technical standards, reference architectures, and security guardrails that guide engineering teams and modernization initiatives across the organization.
Key Responsibilities

  • Design, maintain, and drive execution of security architecture frameworks and roadmaps spanning on-premises, hybrid, and cloud environments, aligned to regulatory and industry frameworks (NIST, ISO 27001, SOC 2, NYDFS) and translated into enforceable architectural controls.
  • Define enterprise identity and authentication architecture across Active Directory and Microsoft Entra ID, including Tier-0 protections, privileged access models, authentication protocol standards (Kerberos, OAuth, SAML, OIDC), and cross-tenant identity integration patterns.
  • Lead security architecture for domain, forest, and tenant consolidation initiatives, ensuring hardened trust models, secure hybrid identity boundaries, and resilient authentication infrastructure.
  • Establish security architecture standards for infrastructure/technology platforms including datacenter environments, server platforms, hybrid connectivity, and administrative privilege boundaries.
  • Define cloud security architecture standards across enterprise cloud platforms, including Azure security baselines, RBAC models, policy enforcement, workload identity controls, and secure integration patterns across multi-tenant environments.
  • Define cloud, container, and DevSecOps security standards including image governance, runtime protection, and embedded controls within infrastructure-as-code and CI/CD pipelines.
  • Establish data protection and cryptographic architecture standards including data classification, encryption, key management, PKI, DLP patterns, and data residency.
  • Define network and hybrid connectivity security architecture including segmentation strategies, private connectivity models, micro-segmentation, and blast-radius containment patterns.
  • Define security telemetry, logging, and audit architecture standards to support measurable control enforcement, SIEM/XDR integration, and incident readiness by design.
  • Lead security architecture reviews, threat modeling, and risk assessments for major initiatives and emerging technologies, identifying systemic control gaps and defining mitigation patterns and measurable security architecture KPIs.

Required Experience

  • 10+ years in enterprise security or infrastructure architecture
  • Deep expertise in identity architecture (Active Directory, Entra ID, privileged access models)
  • Strong experience designing hybrid enterprise technology security models
  • Experience defining enterprise technology architecture standards and security guardrails
  • Familiarity with NIST CSF and enterprise regulatory frameworks

PreferredExperience

  • CISSP
  • Azure security or architecture certifications (AZ-500, AZ-305)
  • Experience supporting large-scale domain, identity, or tenant consolidation initiatives

Success in This Role

  • Enterprise technology security architecture standards adopted across identity, infrastructure, and cloud platforms
  • Hardened privileged access and Tier-0 posture across enterprise identity systems
  • Consistent security baselines implemented across cloud and hybrid environments
  • Security embedded into early planning phases of modernization initiatives
  • Reduced architectural risk findings across technology & enterprise programs

Flexible Working
At Conduent, we value individuality and flexible working arrangements. In this role, you can expect:
· Remote Work: Enjoy the flexibility of working from home while optimizing your work-life balance.
We offer perks and rewards designed to support you:

  • Health & Welfare Benefits: Comprehensive plans tailored to your needs, effective from day one.
  • Retirement Savings: Robust programs to help you secure your financial future.
  • Employee Discounts: Access to a wide range of discounts on merchandise, services, travel, and more.
  • Career Growth Opportunities: Paths for advancement within a global organization.
  • Paid Training: Learn while you earn with award-winning learning platforms.
  • Paid Time Off: Competitive PTO packages to help you recharge.
  • Great Work Environment: Join an award-winning culture that values diversity and inclusion.

Pay Transparency Laws in some locations require disclosure of compensation and/or benefits-related information. For this position, actual salaries will vary and may be above or below the range based on various factors including but not limited to location, experience, and performance. In addition to base pay, this position, based on business need, may be eligible for a bonus or incentive. In addition, Conduent provides a variety of benefits to employees including health insurance coverage, voluntary dental and vision programs, life and disability insurance, a retirement savings plan, paid holidays, and paid time off (PTO) or vacation and/or sick time. The estimated salary range for this role is $130K - 160K annually.
Originally posted on Himalayas

本页面信息整理自 Himalayas,版权归原发布方所有。职位可能随时关闭,投递请以原始页面为准。 本站只做信息聚合展示,不参与招聘流程,也不向求职者收取任何费用。

该公司其他在招职位

福利热线代表

ConduentUnited States$38,640 - $48,300/年Full Time昨天
其他限定地区(需当地身份)

rebate产品项目主管

ConduentUnited States$173,750 - $200,000/年Full Time5 天前
职能支持限定地区(需当地身份)

← 返回全部职位