Job Title: Cyber Security Solution Architect Job Location: Houston, TX Job Type: Direct Hire 100% Onsite Cyber Security Solution Architect delivers security architecture expertise and best practices oversight across complex multi-cloud, multi-partner environments. This role involves deep-level architecture reviews, crafting advisory and design reference architectures, and secure design patterns. The individual is responsible for designing, architecting, and supporting the administration and management of IT/OT security infrastructure, protecting data and assets in accordance with established information security policies and industry best practices. **Responsibilities:** - Ensure delivery of an enterprise-level cybersecurity program. - Develop reference architectures to address common requirements or mitigate trends in security findings in a repeatable way, following (and identifying) recommended best practices. - Lead threat modeling and collaborate with technical delivery teams to integrate security requirements and practices into solutions. - Conduct security architecture reviews of platforms and applications in complex multi-tenant, multi-provider, and vendor-cloud environments. - Deliver strategic roadmaps by researching and investigating new effective methods for delivering security as code, automating existing security architecture assessments and processes, and optimizing other service deliveries. - Partner with IT teams to track progress on strategic platform initiatives. Proactively manage oversight and pace for architecture reviews, promptly addressing any critical issues that may create risk. - Ensure assessments are known, documented, and properly performed to produce consistent, timely, high-quality deliverables. Develop and maintain technical proficiency and related certifications for core products and solution areas. - Experience designing and implementing security solutions for cloud-based systems, including IAM, network security, data protection, DevSecOps, and compliance is preferred. - Experience in a role that has designed and implemented NIST 800-53, FISMA, and FedRAMP Moderate/High controls is required. - Strong understanding of cloud security best practices, controls, policies, encryption, authentication, authorization, and audit capabilities. **Qualifications:** - Bachelor's degree or equivalent experience in business, computer science, or management information systems. - 10 or more years of professional experience solving business problems with technology solutions at an energy facility or related industry. - Preferred industry-recognized experience in security (e.g., CISSP, CCSK, CISA, CISM, CEH). - Minimum of 5 years of experience in IT security risk assessments and related frameworks (e.g., NIST 800 series, ISO 27000 series, IT General Controls). - Knowledge of Identity and Access Management (IAM), cryptography/key management, access controls and security protocols, secrets modernization, and secrets management (e.g., multi-factor authentication, SAML, OAuth, OIDC). - Strong knowledge of Azure/AWS infrastructure services. - Superior written and oral communication skills. - Strong analytical and system design skills. - Self-motivated and directed, with the ability to effectively prioritize and execute tasks in a high-pressure environment. About Petroplan Petroplan is the trusted, specialist global Talent Solutions partner of choice for employers and professionals in the Energy sector. Since 1976, Petroplan has been here to help people like you make the most of the opportunities available and find the best fit for you as an individual. Over 10,000 placements in more than 55 countries for over 550 clients across 65 disciplines. In an industry where skilled and experienced professionals are increasingly sought after resource, we appreciate the true value of what you have to offer. What's more, we understand that different things are important to different people in today's world of work - it's about making exactly the right connections for you as an individual. Our reputation for contractor and candidate care, understanding what makes you tick, and finding you the best match is second-to-none. We understand the industry inside-out and seek to understand YOU and your motivations in the same way. We take the time to evaluate your individual strengths, understand the most important things to you, and establish exactly what you're looking for from your next role.
