Security Architect - Network/Infrastructure Security

Introduction

A career with IBM Consulting is grounded in long-lasting client partnerships and close collaboration across geographies. You’ll work with leading organizations spanning multiple industries, supporting their hybrid cloud and AI transformation. Backed by strategic partners, trusted IBM technology, and Red Hat, you’ll gain the capabilities needed to drive impactful change and help clients accelerate outcomes. At IBM Consulting, curiosity powers progress. You’ll be encouraged to question conventional approaches, experiment with new ideas, and build innovative solutions that produce measurable results. Our growth- and empathy-centered culture supports your long-term career development while recognizing the value of your individual skills and perspectives.

Your Role And Responsibilities

Owns end-to-end security architecture for engagements within the tower. Converts IBM Security Policy and client-specific control requirements into deployable architectures across identity, data protection, application security, and monitoring. Serves as the lead technical authority for security design within the tower.

Key Responsibilities

• Create tower-wide reference architectures for Secure by Default, Secure by Design, and continuous monitoring patterns
• Lead solution security assessments and participate in the Security Architecture Board engagement for tower deliverables
• Establish data protection controls for regulated (healthcare), sensitive (finance/HR), and automated solution scenarios
• Architect on-/offboarding automation workflows integrating IBM AccessHub, CSS shared services, and engagement-specific tooling
• Define DLP controls (endpoint, Box, OneDrive), VDI, and work-location-tracking controls for in-scope engagements
• Provide security guidance for bids, SOWs, and change requests; quantify the security cost of delivery
• Collaborate with Identity, App Sec, Data Security, and Network Security SMEs to deliver deep technical insights
• Maintain the tower’s security control catalog and exception register
  
  

Preferred Education

Master's Degree

Required Technical And Professional Expertise

Required Experience & Skills

• 8+ years of hands-on security architecture experience in consulting, managed services, or enterprise IT
• Strong expertise in at least two areas: IAM/PAM/ITDR, data protection/DLP, cloud security (AWS/Azure/GCP), application security
• Experience architecting solutions for regulated industries and multi-tenant delivery environments
• Demonstrated ability to develop target-state architectures and secure client and internal governance approval
  
  

Preferred Qualifications

Preferred technical and professional experience

• CISSP-ISSAP, SABSA, TOGAF, or equivalent architecture credential
• Knowledge of the IBM Security stack (Verify, QRadar, Guardium, X-Force) and enterprise security telemetry pipelines
• Experience with NIE security posture modernization and acquisition integration