Security Architect - Network/Infrastructure Security

Job description

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results.

Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your role and responsibilities

Owns the end-to-end security architecture for engagements within the tower. Translates IBM Security Policy and client-specific control requirements into deployable architectures spanning identity, data protection, application security, and monitoring. Lead technical authority on security design within the tower.

Key Responsibilities

• Design tower-wide reference architectures for Secure by Default, Secure by Design, and continuous monitoring patterns
• Lead solution security reviews and the Security Architecture Board engagement for tower deliverables
• Define data protection controls across regulated (healthcare), sensitive (finance/HR), and automated solution contexts
• Architect on-/offboarding automation flows integrating IBM AccessHub, CSS shared services, and engagement-specific tooling
• Specify DLP (endpoint, Box, OneDrive), VDI, and work-location-tracking controls for in-scope engagements
• Provide security input to bids, SOWs, and change requests; quantify security cost of delivery
• Coordinate with Identity, App Sec, Data Security, and Network Security SMEs for deep technical inputs
• Maintain the tower's security control catalog and exception register

Required Experience & Skills

8+ years hands-on security architecture in consulting, managed services, or enterprise IT Deep expertise in at least two of: IAM/PAM/ITDR, data protection/DLP, cloud security (AWS/Azure/GCP), application security Experience designing for regulated industries and multi-tenant delivery environments Proven ability to author target-state architectures and gain client and internal governance approval

Preferred Qualifications

• CISSP-ISSAP, SABSA, TOGAF, or equivalent architecture credential
• Familiarity with IBM Security stack (Verify, QRadar, Guardium, X-Force) and enterprise security telemetry pipelines
• Experience with NIE security posture modernization and acquisition integration IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.