Security Architect

Role: Security ArchitectDuration: Long TermLocation: Brooklyn, NYTasks & DutiesObjective: Develop and implement zero trust and micro segmentation architectures.Eliminate Implicit Trust and Enforce Strict Access Control. Audit Zero Trust Environment Security Objective - Reduce attack surface and limit reach of attackers. Tasks Breakdown: Review services in all environments and locations relying on implicit trust. Determine if any services or resource have access to elevated privileges and determine controls needed reduce risk while allowing sufficient rights for operations once the data center project is completed. Apply Least Privilege Access for applications and services. Determine if services and applications with elevated privileges can undergo additional segmentation to limit access and risk. Determine impact to agency and risk of compromise for areas with elevated privileges. Develop procedures to audit and maintain Implement zero trust and micro segmentation architectures.Develop zero trust security patterns to distribute to application team, infrastructure admin and program areas.Develop Audit and Remediation tools to monitor and enforce zero trust rules.Required Skills5+ years of experience in Tiered and Environmental Segmentation / Policy Development5+ years of experience in Application Dependency Mapping5+ years of experience in Dynamic Access Control / Continuous Trust Monitoring5+ years of experience in Micro-Segmentation / Software Defined Networking5+ years of experience in Agile Environment Collaboration5+ years of experience in Project Management5+ years of experience in Cross-Functional Team Collaboration5+ years of experience in Client Engagement & Communication5+ years of experience with Tools: CISCO, Palo Alto, Fortinet, Bluecoat, Web Application Firewall / CDN, Splunk SIEM, MS Defender, Google Sec Ops, Crowdstrike, Powershell, Prowler, Rapid7, STRIDE