Security Architect - Network/Infrastructure Security

Owns the end-to-end security architecture for engagements within the tower. Translates IBM Security Policy and client-specific control requirements into deployable architectures spanning identity, data protection, application security, and monitoring. Lead technical authority on security design within the tower.

Key Responsibilities:

· Design tower-wide reference architectures for Secure by Default, Secure by Design, and continuous monitoring patterns

· Lead solution security reviews and the Security Architecture Board engagement for tower deliverables

· Define data protection controls across regulated (healthcare), sensitive (finance/HR), and automated solution contexts

· Architect on-/offboarding automation flows integrating IBM Access Hub, CSS shared services, and engagement-specific tooling

· Specify DLP (endpoint, Box, One Drive), VDI, and work-location-tracking controls for in-scope engagements

· Provide security input to bids, SOWs, and change requests; quantify security cost of delivery

· Coordinate with Identity, App Sec, Data Security, and Network Security SMEs for deep technical inputs

· Maintain the tower's security control catalog and exception register