Infrastructure & Identity Security Architect

• •We are looking for an Infrastructure & Identity Security Architect to define and drive our enterprise security architecture across cloud, infrastructure, networks, endpoints, and identity platforms. You will establish zero-trust security standards, develop reference architectures, and partner with engineering teams to build secure and scalable technology solutions.

+ ' ' + Strong infrastructure and network security experience Strong experience with firewall, WAF, network segmentation and secure connectivity On-prem/datacenter infrastructure security experience Strong experience with enterprise security controls: DLP, PAM, MDM/MAM and Email Security Good understanding of AWS/Azure security concepts and hybrid infrastructure Good understanding of enterprise IAM/IDM: SSO, IdP, PAM, federation and identity lifecycle Familiarity with identity protocols: OAuth2/OIDC, SAML, SCIM Knowledge of NIST CSF/800-53/800-207, CIS and PCI-DSS security principles 8+ years of experience, senior/principal level Working proficiency in English or Russian Nice-to-have: banking/payments security and enterprise security architecture experience Relevant security, cloud or architecture certifications are an advantage + ' ' + Opportunity to learn through workingFamiliarity with a real banking environmentGaining practical knowledge and experienceDevelopment of communication and customer service skillsImproving teamwork abilitiesSupport from a professional mentorChance to build a future career at Bir Ecosysem + ' ' + Define infrastructure security architecture and security baselines across on-prem, datacenter and cloud environments Define network security architecture and patterns: segmentation, secure connectivity, firewall/WAF standards, remote access Define security architecture for enterprise controls including DLP, PAM, MDM/MAM, Email Security Gateway, Firewall and WAF Define on-prem and bare-metal infrastructure security architecture, partnering with infrastructure and network teams Architect hybrid on-prem-to-cloud connectivity security Define enterprise identity and privileged access architecture

• •IDM/SSO, IdP, PAM, federation and access lifecycle Define endpoint and mobile access security patterns using MDM/MAM and conditional access controls Define data protection architecture across endpoint, email, web and cloud channels Recommend infrastructure, network, identity and security solutions and replacements