[Skip to main content](#main-content)

[ OpenNash ](https://opennash.com/) / [Jobs](https://jobs.opennash.com/) [ 01 Search jobs](https://jobs.opennash.com/search/)[ 02 Companies](https://jobs.opennash.com/explore/)[ 03 Hiring report](https://jobs.opennash.com/reports/hiring/)[ 04 AI assistants](https://jobs.opennash.com/connect/)[ 05 How it works](https://jobs.opennash.com/methodology/)

IBM · Brasilia, BRA

# Enterprise Security Architect | Zero Trust, IAM & Cloud Security

Brasilia, BRA Security 

Listed on IBM’s official careers site. Posted October 23, 2026. Check that it is still open and apply there.
[Apply on IBM’s careers site →](https://ibm.dejobs.org/jobs/0962964DA9C94D8689FB580E66108A3D/)

[OpenNash Jobs](https://jobs.opennash.com/) / [IBM](https://jobs.opennash.com/companies/ibm/) / Enterprise Security Architect | Zero Trust, IAM & Cloud Security

## Job description

### Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results.

Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences. Your role and responsibilities
- Define and maintain the enterprise security architecture strategy, roadmap, standards, and reference architectures.
- Design secure architectures for cloud, hybrid, and on-premises environments.
- Lead security assessments, architecture reviews, and threat modeling activities for new and existing solutions.
- Establish and govern security controls across Identity and Access Management (IAM), network security, data protection, application security, and infrastructure security.
- Ensure security requirements are integrated throughout the system development lifecycle (SDLC) and Agile delivery processes.
- Develop and enforce security policies, standards, frameworks, and best practices aligned with industry standards.
- Collaborate with business, application, infrastructure, and cloud teams to ensure security is embedded in technology solutions from design through implementation.
- Conduct risk assessments and recommend mitigation strategies for security vulnerabilities and business risks.
- Guide the implementation of security technologies such as SIEM, IAM, Zero Trust, encryption, endpoint protection, PAM, and cloud security platforms.
- Support Governance, Risk, and Compliance (GRC) initiatives and ensure compliance with regulatory and industry requirements.
- Lead security architecture reviews for major projects, digital transformation initiatives, and cloud migrations.
- Evaluate emerging threats, technologies, and security trends to continuously improve the organization's security posture.
- Partner with incident response and security operations teams to strengthen threat detection, response, and recovery capabilities.
- Provide security leadership, mentoring, and technical guidance to architects, engineers, and project teams.
- Communicate security risks, architecture decisions, and recommendations to technical teams, executives, and stakeholders.

### Business Impact
- Strengthens the organization's cybersecurity posture and resilience.
- Reduces security risks and regulatory exposure.
- Enables secure digital transformation and cloud adoption.
- Protects critical business assets, data, and customer trust.
- Supports business growth by ensuring security measures align with enterprise objectives. [1] [Marlon Costa | PDF] Required Professional and Technical Expertise
- Enterprise Security Architecture
- Zero Trust Architecture
- Identity & Access Management (IAM)
- Cloud Security (AWS, Azure, GCP)

### Security Frameworks
- NIST, ISO 27001, SABSA, TOGAF
- Governance, Risk & Compliance (GRC)
- Network Security and Micro-Segmentation
- Data Security and Encryption Technologies
- Application Security and Secure SDLC
- Threat Modeling and Risk Assessment
- Vulnerability Management
- SIEM, SOAR, EDR/XDR Solutions
- Security Operations and Incident Response
- Security Automation and DevSecOps
- Regulatory Compliance (LGPD, GDPR, PCI DSS, SOX, HIPAA as applicable)
- Strong stakeholder management, communication, and leadership skills References Visible links 1. [https://ibm-my.sharepoint.com/personal/vbgomes\_br\_ibm\_com/Documents/Archive/CVs%20CS&I/Marlon%20Costa.pdf?web=1](https://ibm-my.sharepoint.com/personal/vbgomes\_br\_ibm\_com/Documents/Archive/CVs%20CS&I/Marlon%20Costa.pdf?web=1)

### Required technical and professional expertise

Buscamos um profissional com sólida experiência em Arquitetura de Segurança Corporativa, com forte foco em Cloud Security, responsável por definir estratégias de cybersecurity alinhadas aos objetivos de negócio e programas de transformação digital. O profissional será responsável pelo desenho e evolução de arquiteturas seguras em ambientes AWS, Azure e GCP, liderando iniciativas de segurança em cenários híbridos e multicloud.

O perfil deve possuir experiência em Governança, Riscos e Compliance (GRC), avaliação de riscos, arquitetura Zero Trust, proteção de dados e relacionamento com executivos, stakeholders e equipes técnicas. Também é esperado conhecimento na utilização de Inteligência Artificial para análise de riscos, detecção de ameaças, automação de processos de segurança, geração de insights e apoio à tomada de decisão em cybersecurity.

Principais Competências Técnicas
- Cloud Security (AWS, Azure e GCP) (principal requisito)
- Enterprise Security Architecture e Zero Trust
- Identity and Access Management (IAM), PAM e Federation
- GRC (Governance, Risk & Compliance)
- NIST CSF, NIST 800 Series, ISO 27001/27002, SABSA, TOGAF e CIS Controls
- Data Security, Data Protection, Privacy e DLP
- Encryption e Key Management
- Network Security Architecture e Secure Connectivity
- Application Security e Secure SDLC
- DevSecOps e Security Automation
- Threat Modeling e Security Design Reviews
- Vulnerability Management e Security Assessments
- Incident Response e Threat Protection
- SOC, SIEM, SOAR e XDR
- Endpoint Protection e Container Security
- Cloud-Native Security Controls
- Compliance (LGPD, GDPR, PCI-DSS e SOX)
- Experiência utilizando ferramentas de IA Generativa e AI Assistants para análise de segurança, avaliação de riscos, investigação de incidentes, automação e melhoria da eficiência operacional em Cybersecurity. Preferred technical and professional experience

### Deep Understanding of Security Domains
- Experience with various security domains, including network security, application security, data security, identity management, threat management, and security governance, to develop comprehensive security architectures.

### Knowledge of Emerging Trends
- Exposure to emerging trends and technologies in cybersecurity to stay up-to-date with industry best practices and provide effective security solutions.

### Multi-Cloud Environment Expertise
- Experience working with hybrid and multi-cloud environments to design and implement comprehensive security architectures that protect business processes.

### Preferred Certifications
- CISSP (Certified Information Systems Security Professional)
- CCSP (Certified Cloud Security Professional)
- SABSA Practitioner or Chartered Security Architect
- TOGAF Certification
- CISM (Certified Information Security Manager)
- CRISC (Certified in Risk and Information Systems Control)
- AWS Security Specialty

### Microsoft Certified
- Cybersecurity Architect Expert (SC-100)
- Google Professional Cloud Security Engineer IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

## At a glance
- Posted by the employer: Oct 23, 2026
- First seen by OpenNash: Oct 26, 2026
- Last checked: Oct 26, 2026
- Listed for: 3 days
- Location: Brasilia, BRA[Apply on IBM’s careers site →](https://ibm.dejobs.org/jobs/0962964DA9C94D8689FB580E66108A3D/)

## More jobs at IBM

### [AI Security Architect | Threat Detection & Cyber Defense](https://jobs.opennash.com/companies/ibm/jobs/a48dc14ce0e24a8a7a29/)

Brasilia, BRA

### [2026 - Intern Conversion - Associate Consultant, Cybersecurity X-Force](https://jobs.opennash.com/companies/ibm/jobs/cdb30423c685d632b060/)

Austin, TX

### [AI Security Architect](https://jobs.opennash.com/companies/ibm/jobs/d1d7de89f6c9a8c39344/)

Sydney, AUS

### [AI/ML Security Architect and Engineer](https://jobs.opennash.com/companies/ibm/jobs/9126d64984d3adfee64d/)

Melbourne, AUS

### [Application and ERP Security Services Leader](https://jobs.opennash.com/companies/ibm/jobs/41be05c210df860144d3/)

Charlotte, NC

## Similar jobs at other companies

### [Enterprise Security Architect](https://jobs.opennash.com/companies/ntt/jobs/714bf75d2696d766f81e/)

NTT · London, United Kingdom

### [Senior Enterprise Security Architect - Telecoms Design](https://jobs.opennash.com/companies/ntt/jobs/838660cd94d812447f3d/)

NTT · London, United Kingdom

### [Enterprise Security Architect – Identity and Access Management (m/f/d)](https://jobs.opennash.com/companies/deutsche-post/jobs/9de5f7cb6b60d0064117/)

Deutsche Post · Bonn, Nordrhein-Westfalen, Germany

### [Cyber Security Enterprise Architect](https://jobs.opennash.com/companies/siemens-energy/jobs/4dbdb41c25f7b8876074/)

Siemens Energy 

### [Zero Trust Enterprise Architect](https://jobs.opennash.com/companies/leidos/jobs/03eb5764348fcbd0880e/)

Leidos · Stuttgart, Germany

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

[ OpenNash ](https://opennash.com/)

AI-native services firm that builds custom software and 24/7 AI agents.

OpenNash Jobs is an OpenNash Applied AI project.
[Book time with OpenNash](https://calendly.com/opennash/new-meeting?hide_gdpr_banner=1)

Jobs
- [Search jobs](https://jobs.opennash.com/search/)
- [Companies](https://jobs.opennash.com/explore/)
- [Hiring report](https://jobs.opennash.com/reports/hiring/)
- [AI assistants](https://jobs.opennash.com/connect/)
- [How it works](https://jobs.opennash.com/methodology/)

OpenNash
- [opennash.com](https://opennash.com/)
- [Services](https://opennash.com/ai-agent-consulting/)
- [OpenNash CX](https://opennash.com/cx/)
- [AI Tools](https://opennash.com/ai-tools/)
- [Blog](https://opennash.com/blog/)
- [About](https://opennash.com/about/)

Contact
- [hello@opennash.com](mailto:hello@opennash.com)

- [LinkedIn](https://www.linkedin.com/company/opennash)

- [Support](https://jobs.opennash.com/support/)

- [Privacy](https://jobs.opennash.com/privacy/)

- [Terms](https://jobs.opennash.com/terms/)

© 2026 OpenNash, Inc. Company names and public job postings belong to their respective owners. Employers control source availability and application decisions.