IT Security Architect

Brooklyn, United States | Posted on 02/13/2025

Job Location: Brooklyn, NY 11201 (Hybrid)

Note: This position requires local candidates who can work onsite as needed and remotely for the remaining duration.

Job Description:

The City of New York's Office of Technology and Innovation (OTI) is seeking an experienced IT Security Architect to design and implement enterprise security solutions. The ideal candidate will be responsible for developing a strategic firewall security architecture, conducting security assessments, and providing technical leadership in network and cloud security.

Key Responsibilities:

1. Firewall Security Architecture – Develop a strategic vision and implement NextGen firewall designs.
2. Security Assessments – Conduct risk assessments, threat modeling, and vulnerability analyses.
3. Enterprise Security Framework – Define and enforce security policies, standards, and frameworks.
4. Network & Cloud Security – Secure infrastructure, applications, and cloud environments (AWS, Azure, Google Cloud).
5. Identity & Access Management (IAM) – Implement MFA, RBAC, and IAM best practices.
6. Penetration Testing & Risk Mitigation – Identify and mitigate security gaps.
7. Compliance & Governance – Ensure alignment with frameworks such as TOGAF, SABSA, NIST, ISO 27001, and Zero Trust Architecture.
8. Technical Collaboration – Work closely with IT and development teams to integrate security measures.
9. Security Audits & Monitoring – Conduct audits and recommend proactive security solutions.

Required Experience

Information Security & IT Risk Management
12+ years

Firewall Architecture (NGFW, DNS/DNSSEC, Cisco ISE, Proxy)
Expert

Security Frameworks (TOGAF, SABSA, NIST, ISO 27001, Zero Trust)
Advanced

Network Security (SSL, TLS, IPsec, Firewalls, Routers, Switches)
Advanced

Cloud Security (AWS, Azure, Google Cloud)
Proficient

Encryption & Cryptography
Proficient

Identity & Access Management (IAM, MFA, RBAC)
Advanced

Threat Modeling & Risk Assessment
Advanced

Penetration Testing & Vulnerability Assessment
Proficient

Security Controls & Policy Development
Expert

Security Audits & Compliance
Proficient

Strong Communication & Leadership
Required

Desirable Skills & Certifications:

1. Strong business acumen and ability to communicate security measures effectively.
2. Relevant security and networking certifications such as CISSP, CRISC, or CISM.