https://JOBS.BRAVOTECH.COM/ en-us We are seeking an Enterprise Security Architect to define enterprise security standards, reusable architecture patterns, and secure-by-design frameworks. This role is focused on building the templates, controls, and governance models that help solution architects design secure, scalable, and compliant technology solutions.

This is a strategic architecture role, not a hands-on operational security implementation position. The ideal candidate will translate InfoSec policies into practical architecture patterns, establish security controls by application tier, and guide enterprise adoption of zero-trust principles.
What You’ll Do

• 
  Define enterprise security reference architectures, including zero-trust and defense-in-depth models.
  
• 
  Create reusable security patterns for authentication, authorization, APIs, data protection, network security, application security, secrets management, encryption, and key management.
  
• 
  Establish security controls by application tier, including requirements for Tier 0, Tier 1, Tier 2, and Tier 3 applications.
  
• 
  Build secure design templates for web applications, APIs, microservices, and cloud-based solutions.
  
• 
  Develop threat modeling frameworks using methodologies such as STRIDE and PASTA.
  
• 
  Define security testing standards, including SAST, DAST, penetration testing, DevSecOps, and shift-left security practices.
  
• 
  Create architecture patterns that support compliance frameworks such as SOC 2, ISO 27001, GDPR, and HIPAA.
  
• 
  Review solution architectures for security pattern compliance.
  
• 
  Translate InfoSec policies into practical architecture standards and design templates.
  
• 
  Establish security architecture review criteria, governance processes, and exception procedures.
  
• 
  Train solution architects on security patterns and lead secure design workshops.
  
• 
  Maintain the enterprise security pattern catalog.
  
• 
  Partner with InfoSec, cloud, platform, compliance, audit, and solution architecture teams.
  

Requirements

• 
  Bachelor’s degree in Computer Science, Information Security, or a related field.
  
• 
  7+ years of experience in security architecture, enterprise architecture, or cybersecurity.
  
• 
  5+ years of experience creating enterprise security standards, frameworks, and reusable security patterns.
  
• 
  CISSP certification.
  
• 
  Proven experience with zero-trust architecture and secure design patterns.
  
• 
  Experience establishing security controls frameworks and compliance patterns.
  
• 
  Experience conducting threat modeling and security architecture reviews.
  
• 
  Expert-level knowledge of security pattern library creation, security controls by tier, and zero-trust patterns.
  
• 
  Expert-level experience translating InfoSec policies into practical architecture patterns.
  
• 
  Strong experience with IAM patterns, encryption, key management, API security, and cloud security.
  
• 
  Advanced knowledge of security testing frameworks, including SAST, DAST, and penetration testing standards.
  
• 
  Advanced understanding of DevSecOps patterns and shift-left security practices.
  
• 
  Experience with compliance frameworks such as SOC 2, ISO 27001, GDPR, and HIPAA.
  
• 
  Cloud security experience across AWS, Azure, or Google Cloud.
  

Preferences

• 
  TOGAF certification.
  
• 
  SABSA certification.
  
• 
  Cloud security certification such as AWS Security Specialty, Azure Security Engineer, or Google Cloud Security Engineer.
  
• 
  CISM or CISA certification.
  
• 
  Experience in highly regulated industries such as healthcare, finance, or government.
  
• 
  Background in penetration testing or offensive security.
  
• 
  Experience implementing zero-trust architecture at enterprise scale.
  
• 
  Deep knowledge of compliance frameworks, audit processes, and security governance.
  

What You’ll Deliver

• 
  Enterprise security reference architectures.
  
• 
  Security pattern library and reusable design templates.
  
• 
  Security controls by application tier.
  
• 
  Zero-trust implementation patterns.
  
• 
  IAM patterns and templates.
  
• 
  Encryption, key management, and secrets management standards.
  
• 
  Threat modeling framework.
  
• 
  DevSecOps and security testing standards.
  
• 
  Security architecture review criteria and governance processes.
  

Why This Role
This is an opportunity to shape enterprise-wide security architecture, create reusable patterns that improve consistency and quality, and help teams deliver secure solutions from the start. You will work closely with architecture, InfoSec, cloud, platform, compliance, and audit teams to build practical security standards that can be applied across the organization.
Apply Now
If you are a strategic security architect who enjoys translating policy into practical design patterns, building scalable frameworks, and enabling secure-by-design solutions, we’d love to hear from you. Apply today to learn more.
]]> Fri, 12 Jun 2026 00:00:00 CDT 1 BravoTech a Leader in IT Consulting is seeking a talented Information Security Cloud Engineer / Subject Matter Expert (SME) to lead the design, implementation, and operationalization of a comprehensive cloud security program.
This consultant will establish cloud asset visibility, implement security controls, integrate continuous monitoring capabilities, and strengthen governance, risk, and compliance across enterprise cloud environments.
Required Skills & Experience

• 7+ years of Information Security, Cloud Security, or Security Engineering experience
• Strong expertise securing Azure, AWS, GCP, and/or Oracle Cloud Infrastructure (OCI)
• Experience with cloud security architecture, IAM, network segmentation, vulnerability management, logging, telemetry, and continuous monitoring
• Hands-on experience implementing cloud security baselines and remediation programs
• SIEM/SOC integration experience
• Experience securing Oracle environments including OCI, Oracle ERP/HCM, Oracle databases, and identity/access management
• Strong knowledge of NIST, CIS Controls, Zero Trust, risk management, and compliance frameworks
• Excellent communication, documentation, and stakeholder management skills

Preferred Certifications

• CISSP
• CCSP
• CISM
• GIAC Cloud Security
• Azure Security Engineer
• AWS Security Specialty
• Equivalent cloud security certifications

Key Responsibilities

• Assess cloud environments and security posture
• Establish enterprise cloud asset inventory and ownership mapping
• Develop and implement cloud security standards and hardening controls
• Integrate cloud environments into SOC and continuous monitoring platforms
• Define and report cloud security KPIs and risk metrics
• Support audit, compliance, and governance initiatives
• Create operational runbooks and provide knowledge transfer to internal teams

This role will establish enterprise-wide cloud asset visibility, implement standardized cloud security controls, and integrate continuous monitoring capabilities into the broader information security program. The consultant will serve as a hands-on technical leader focused on reducing cloud security risk, improving governance, strengthening compliance readiness, and enabling long-term operational sustainability.
The ideal candidate brings deep expertise across cloud security architecture, governance, monitoring, risk management, and Oracle-centric enterprise environments.
Job Responsibilities
Cloud Security Assessment & Asset Visibility

• Assess cloud environments, configurations, security posture, and billing structures, providing recommendations aligned to industry best practices
• Identify, document, and maintain a comprehensive inventory of cloud assets including:
  • Accounts, subscriptions, and tenants
  • Compute, storage, database, and networking resources
  • Identity objects, service principals, and managed identities
  • Security tooling integrations and logging sources
• Define asset ownership, business purpose, data classification, and production/non-production tiers
• Implement automated discovery and reconciliation processes where feasible
• Align inventory management practices with enterprise configuration management standards

Security Baseline & Cloud Hardening

• Develop and implement cloud security baseline standards aligned with:
  • Enterprise security policies
  • Regulatory and compliance requirements
  • Industry frameworks including NIST and CIS
• Establish and validate:
  • Secure configuration standards
  • Identity and access controls
  • Logging, monitoring, and telemetry requirements
  • Network segmentation and exposure controls
• Identify, prioritize, and remediate high-risk cloud misconfigurations
• Partner with Infrastructure, Engineering, Application, and Security teams to implement scalable and sustainable security controls

Continuous Monitoring & Detection

• Integrate cloud environments with approved security monitoring and SOC platforms
• Enable continuous monitoring for:
  • Configuration drift
  • Unauthorized or insecure deployments
  • Risky user and identity activity
  • High-risk assets and sensitive workloads
• Establish centralized logging, alerting, escalation criteria, and detection use cases
• Tune monitoring capabilities to reduce noise while maintaining effective risk coverage

Governance, Risk & Compliance

• Integrate cloud security findings into enterprise risk management and audit processes
• Define and report cloud security KPIs/KRIs including:
  • Inventory accuracy and coverage
  • Misconfiguration trends
  • Remediation velocity
  • Monitoring and detection effectiveness
• Produce documentation suitable for audit, regulatory, and executive review
• Support audits, tabletop exercises, and risk briefings as needed

Knowledge Transfer & Operational Sustainability

• Develop operational runbooks, standards, and procedures for cloud inventory management, secure deployment practices, and monitoring escalation
• Provide knowledge transfer and mentoring to Information Security, SOC, IT, and Engineering teams
• Dedicate scheduled time weekly to enhance internal cloud security knowledge and operational maturity
• Ensure the cloud security program is scalable and sustainable beyond the engagement

Deliverables

• Cloud asset inventory and ownership mapping
• Cloud environment security assessment
• Cloud security baseline standards and hardening documentation
• Risk-ranked remediation roadmap
• Monitoring architecture and SOC integration documentation
• Cloud security metrics and reporting framework
• Audit-ready documentation packages
• Operational runbooks and knowledge transfer materials

Success Criteria
The engagement will be considered successful when:

• A complete and accurate cloud asset inventory is established and maintained
• Cloud security baselines are implemented and enforced
• Continuous monitoring is operational and integrated into security workflows
• Cloud security risks are measurable, reportable, and actionable at the executive level
• Internal teams are equipped to sustain cloud security operations after the engagement

 
Job Qualifications

• 7+ years of experience in Information Security, Cloud Security, or Security Engineering roles
• Strong expertise securing enterprise cloud environments across Azure, AWS, GCP, and/or Oracle Cloud Infrastructure (OCI)
• Experience implementing cloud security controls including IAM, network segmentation, secure configuration standards, logging/telemetry, vulnerability management, and continuous monitoring
• Proven ability to establish cloud asset visibility, security baselines, remediation programs, and SOC/SIEM integrations
• Experience securing Oracle environments including OCI, Oracle ERP/HCM platforms, Oracle databases, and related identity/access controls
• Strong understanding of NIST, CIS, Zero Trust, risk management, and audit/compliance frameworks
• Ability to work cross-functionally with Infrastructure, Engineering, Security Operations, and Application teams
• Strong communication, documentation, and stakeholder management skills
• Hands-on technical expertise with the ability to balance strategic guidance and tactical execution

Preferred Certifications
CISSP, CCSP, CISM, GIAC Cloud Security, Azure Security Engineer, AWS Security Specialty, or equivalent cloud/security certifications preferred.

Candidates should reside in or near North Texas Or Durant, OK area OR within commuting distance from the following Texas cities:

• Sherman, TX
• Denison, TX
• Tom Bean, TX
• Anna, TX
• Melissa, TX
• Frisco, TX
• McKinney, TX
• Gainesville, TX
• Howe, TX

Requirements: 

• Able to work Hybrid onsite 2 days a week.
• Must provide a valid Driver's License
• Ability to work a 6 month - 12 month contract via W2  

#LI-AH1 ]]> Tue, 09 Jun 2026 00:00:00 CDT 1