IT Security Architect

IT Security ArchitectRole Summary

Conduent is building an architecture function responsible for defining enterprise technology standards across identity, infrastructure, cloud, and security platforms.

The IT Security Architect defines and governs the security architecture that shapes how enterprise technology platforms are designed across on-site, hybrid, and cloud environments. The role establishes technical standards, reference architectures, and security guardrails that guide engineering teams and modernization initiatives across the organization.

Key Responsibilities

• Design, maintain, and drive execution of security architecture frameworks and roadmaps spanning on-premises, hybrid, and cloud environments, aligned to regulatory and industry frameworks (NIST, ISO 27001, SOC 2, NYDFS) and translated into enforceable architectural controls.
• Define enterprise identity and authentication architecture across Active Directory and Microsoft Entra ID, including Tier-0 protections, privileged access models, authentication protocol standards (Kerberos, OAuth, SAML, OIDC), and cross-tenant identity integration patterns.
• Lead security architecture for domain, forest, and tenant consolidation initiatives, ensuring hardened trust models, secure hybrid identity boundaries, and resilient authentication infrastructure.
• Establish security architecture standards for infrastructure/technology platforms including datacenter environments, server platforms, hybrid connectivity, and administrative privilege boundaries.
• Define cloud security architecture standards across enterprise cloud platforms, including Azure security baselines, RBAC models, policy enforcement, workload identity controls, and secure integration patterns across multi-tenant environments.
• Define cloud, container, and DevSecOps security standards including image governance, runtime protection, and embedded controls within infrastructure-as-code and CI/CD pipelines.
• Establish data protection and cryptographic architecture standards including data classification, encryption, key management, PKI, DLP patterns, and data residency.
• Define network and hybrid connectivity security architecture including segmentation strategies, private connectivity models, micro-segmentation, and blast-radius containment patterns.
• Define security telemetry, logging, and audit architecture standards to support measurable control enforcement, SIEM/XDR integration, and incident readiness by design.
• Lead security architecture reviews, threat modeling, and risk assessments for major initiatives and emerging technologies, identifying systemic control gaps and defining mitigation patterns and measurable security architecture KPIs.

Required Experience

• 10+ years in enterprise security or infrastructure architecture