Senior Security Architect – 100% Remote Contract
We're looking for a contract Senior Security Architect to lead security design across our IT estate. The role builds reusable security patterns and reference architectures, and gets security requirements into IT projects at the design stage instead of at go-live. It's a design role, not a build or operational support role.
Engagement- Three months to start, with intent to renew
- 40-50 hours per week
- 100% Remote
- Reports to the Director of Information Security, working alongside our internal cyber engineer
Must have- Entra ID architecture - conditional access, PIM, workload and application identity
- Privileged access design experience against a PAM platform. We use Delinea.
- Has personally authored reference architectures and security patterns that other engineers built from. Reviewing other people's designs isn't the same thing.
- Can take a high-level design or architecture diagram and produce specific, buildable security requirements
- Applied threat modeling on live projects, with an example of a design that actually changed as a result
- Azure landing zone and M365 tenant security design
- Comfortable with hybrid and legacy. We have on-prem systems that aren't going away.
- Defender for Endpoint, Sentinel, and Purview at a design level
- SaaS and vendor integration patterns
- Data classification and DLP design intent, not administration
Just as important- Can land a technical position in a cross-IT forum without positional authority. The teams building to these designs don't report to this role.
- Gets productive fast. Three-month term means real output by week three.
- Documents everything so it's usable by our staff after the engagement ends
- Will pair with engineer on the first couple of pattern deliverables
- Talks about security in business terms with IT leadership
Nice to have- Agentic AI and connector architecture - agent identity, tool permissioning, data boundaries
- Law firm, professional services, or another regulated environment with client-imposed security obligations