Overview
Security Architect Jobs in Brooklyn, NY at TechProjects
Title: Security Architect
Company: TechProjects
Location: Brooklyn, NY
JOB TITLE: Security Architect
Location: Brooklyn, NY (Hybrid)
Tasks & Duties:
· Objective:
o Develop and implement zero trust and micro segmentation architectures.
o Eliminate Implicit Trust and Enforce Strict Access Control.
o Audit Zero Trust Environment
o Security Objective – Reduce attack surface and limit reach of attackers.
· Tasks Breakdown:
o Review services in all environments and locations relying on implicit trust.
o Determine if any services or resource have access to elevated privileges and determine controls needed reduce risk while allowing sufficient rights for operations once the data center project is completed.
o Apply Least Privilege Access for applications and services.
o Determine if services and applications with elevated privileges can undergo additional segmentation to limit access and risk.
o Determine impact to agency and risk of compromise for areas with elevated privileges.
o Develop procedures to audit and maintain Implement zero trust and micro segmentation architectures.
o Develop zero trust security patterns to distribute to application team, infrastructure admin and program areas.
o Develop Audit and Remediation tools to monitor and enforce zero trust rules.
Required Skills
• 5+ years of experience in Tiered and Environmental Segmentation / Policy Development
• 5+ years of experience in Application Dependency Mapping
• 5+ years of experience in Dynamic Access Control / Continuous Trust Monitoring
• 5+ years of experience in Micro-Segmentation / Software Defined Networking
• 5+ years of experience in Agile Environment Collaboration
• 5+ years of experience in Project Management
• 5+ years of experience in Cross-Functional Team Collaboration
• 5+ years of experience in Client Engagement & Communication
. 5+ years of experience with Tools: CISCO, Palo Alto, Fortinet, Bluecoat, Web Application Firewall / CDN, Splunk SIEM, MS Defender, Google Sec Ops, Crowdstrike, Powershell, Prowler, Rapid7, STRIDE
