RemoteLeaf Logo
Log in Sign up

Enterprise Security Architect

4 days, 8 hours ago
United States
Full-time
Lead
Security Engineer
DevOps and Infrastructure
Azure Cybersecurity Git Load Balancing Network Security TLS
Apply Now
Foxtrot Division

Foxtrot Division

Foxtrot Division Military grade software and cyber systems engineering. #Software and #cyber systems engineering firm running on a #DevOps engine. [email protected] MILITARY GRADE SOFTWARE & CYBER SYSTEMS ENGINEERING We create secure systems t...

Internet Software & Services
1-10
Founded 2015
View All Jobs

Description

  • Lead enterprise security strategy, architecture design, and modernization across on-premises, managed hosting, hybrid, and cloud environments.
  • Define layered security architectures, trust boundaries, control placement, and prevention, detection, response, and visibility models.
  • Establish secure ingress and egress patterns for public-facing applications, including F5 BIG-IP, Akamai, cloud-native WAFs, and edge-security controls.
  • Develop migration roadmaps for moving public-facing workloads behind approved application-delivery and security services.
  • Design and optimize firewall, load-balancing, certificate-management, traffic-management, and security service-chaining architectures.
  • Lead enterprise PKI and IAM architecture, including trust models, certificate lifecycle management, authentication, authorization, federation, and privileged access.
  • Develop reusable Azure and AWS security patterns for networking, segmentation, identity, WAF, logging, and hybrid connectivity.
  • Lead architecture for WAN/MPLS modernization, encrypted traffic inspection, packet-brokering, SIEM, logging, and security telemetry.
  • Create architecture diagrams, standards, data-flow diagrams, decision records, implementation guidance, and phased roadmaps.
  • Communicate security risks, tradeoffs, and recommendations to executive, technical, operational, vendor, and service-provider stakeholders.

Requirements

  • Bachelor’s degree in computer science, engineering, information systems, cybersecurity, or a related field, or equivalent professional experience.
  • 8+ years of progressive experience in cybersecurity engineering, network security, cloud security, or enterprise infrastructure, including enterprise-scale architecture responsibility.
  • Experience designing security architectures for complex distributed on-premises, managed-hosting, hybrid, and cloud environments.
  • Hands-on experience with F5 BIG-IP, including application delivery, load balancing, secure ingress/egress, SSL/TLS, certificate management, and traffic policy.
  • Experience with Cisco ASA, Cisco Identity Services Engine, Palo Alto Networks next-generation firewalls, or comparable technologies.
  • Strong knowledge of enterprise networking, including routing, segmentation, MPLS/WAN, high availability, encrypted transport, and traffic-flow analysis.
  • Experience securing externally accessible applications with ADCs, reverse proxies, WAFs, edge-security services, DDoS protection, and centralized certificate management.
  • Experience designing Azure and AWS security architectures, including cloud networking, identity integration, WAFs, logging, segmentation, certificate management, and hybrid connectivity.
  • In-depth PKI and IAM architecture knowledge, including certificate authorities, trust models, TLS, lifecycle automation, federation, privileged access, and workload identities.
  • Experience with SIEM, centralized logging, NDR, threat hunting, telemetry routing, encrypted traffic inspection, and packet-brokering; Gigamon and Cribl experience is highly desirable.
  • Familiarity with infrastructure-as-code, policy automation, configuration management, version control, and repeatable deployment practices.
  • Relevant certification such as CISSP, CCSP, SABSA, TOGAF, or equivalent, plus authorization to work in the United States.

Benefits

  • Competitive salary paid biweekly.
  • $100 monthly cell phone and internet reimbursement.
  • $3,000 annual training budget.
  • Top-tier medical, dental, and vision coverage with 100% of premiums paid by Foxtrot Division.
  • Unlimited PTO, including 11 paid holidays.
  • Parental leave.
  • On-the-spot cash awards.
  • Company-sponsored events and activities.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Lanterncare

Principal IAM Engineer

Lanterncare

Lantern is seeking a remote Principal IAM Engineer to own and strengthen the identity control plane that governs secure access to PHI across its specialty-care platform.

United States Full-time Lead Security Engineer
GitHub HIPAA OpenID Connect PowerShell Python SAML Terraform
6 hours, 3 minutes ago
Laminar Projects

Vigilant IT Security Manager - Portugal/Poland (Remote)

Laminar Projects 51-200 Construction & Engineering

Lead IT security and operations at Laminar Projects, a construction-technology consultancy, to strengthen cybersecurity, maintain compliance, and build a high-performing IT function.

Poland Portugal Romania Full-time Lead Security Engineer
Cybersecurity
8 hours, 48 minutes ago
N-iX

Interim Head of Information Security

N-iX 1001-5000 Internet Software & Services

N-iX is seeking an Interim Head of Information Security for a 4–6-month engagement to lead a client’s security strategy, embed secure-by-design practices, and strengthen audit readiness and resilience.

Europe Ukraine Contract Executive Security Engineer
Cybersecurity
9 hours, 3 minutes ago
FireMon.com

Network Security Engineer

FireMon.com 201-500 Professional Services

FireMon is seeking a hands-on Network Security Engineer to develop, test, and support integrations that help enterprises govern network security policy across on-premises, cloud, and hybrid environments.

United States Full-time Mid Level Security Engineer
Cisco Juniper Network Security
9 hours, 3 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers