Infrastructure Security Architect (PID0650)

This is a remote position.

We are seeking a seasoned Senior Infrastructure Security Architect on a freelance basis to strengthen the global infrastructure security of a major energy client.

Responsibilities

• Convert security policies, operational risks, and system requirements into practical architecture designs, security controls, and engineering principles.
  

• Lead comprehensive security evaluations and technical reviews for core infrastructure and enterprise platforms.
  

• Author and maintain foundational architecture documentation, risk assessments, security baselines, and governance frameworks.
  

• Define strategic security roadmaps aligned with business priorities, system vulnerabilities, and release schedules.
  

• Perform structured threat assessments and security modelling across enterprise services and platform components.
  

• Present complex technical risks and strategic trade-offs clearly to executive stakeholders to support informed decision-making.
  

• Facilitate architecture reviews, guide technical discussions, and build consensus among multi-disciplinary teams with competing priorities.
  

• Collaborate with engineering, operations, and cross-domain security teams to drive end-to-end alignment across the organisation.
  

• Make decisive architectural rulings, prioritising high-impact controls over theoretical security improvements.
  

Requirements

Must-Have Experience

• Broad, senior-level experience across infrastructure architecture (compute, networking, storage) and software security.
  

• Proven track record of designing or overseeing security architecture for large-scale enterprise environments.
  

• Strong stakeholder management skills, with experience working alongside senior leadership, engineering teams, operational leads, and external auditors.
  

• Hands-on experience designing centralized identity, authentication, and access management architectures across complex distributed systems.
  

• Demonstrated ability to resolve critical trade-offs between security controls, platform usability, system availability, and project deadlines.
  

• Experience managing security incidents, vulnerability remediation programs, and regulatory or compliance audits.
  

• Proven experience conducting formal threat modeling for enterprise systems.
  

• Practical expertise integrating enterprise platforms with third-party Identity Providers (IdPs) and modern authentication standards.
  

• Expertise designing access control flows for standard users, API-to-API communication, privileged administrative roles, and emergency access procedures.
  

• Advanced knowledge and practical experience with secrets management, PKI, key management systems, and certificate lifecycles.
  

• Practical knowledge of container security and cloud-native platform architectures.
  

• Language: Advanced proficiency in English (at least C1 level).
  

Preferred Experience

• Familiarity with software-defined networking, virtualization platforms, distributed storage systems, or bare-metal infrastructure.
  

• Experience with workload identity framework implementations.
  

• Background operating within highly regulated, sovereign, or security-sensitive environments.
  

• In-depth platform security experience, particularly with custom or self-managed container orchestrators.
  

• Exposure to modern development stacks, modern web frameworks, and relational databases.
  

• Recognized industry certifications (such as CISSP, CCSP, SABSA, or CKS).
  

Eligibility

• Eligibility Residency in the EU, EEA, UK, or Switzerland.
  

Benefits