Security Architect

About Nexcess

Nexcess provides specialty cloud solutions for organizations where performance and compliance have to coexist. We serve businesses worldwide, from agencies scaling client sites to enterprises running mission-critical operations. We've built our reputation on deep technical expertise and genuine partnership with every client we work with. Behind every environment we manage is a team of people who take the craft seriously and keep showing up when it matters.

Overview

The Information Security Architect is responsible for designing, implementing, and continuously improving the organization’s security architecture across infrastructure, cloud platforms, hosting environments, applications, and operational systems. This role provides technical leadership and strategic guidance to ensure security controls, standards, and practices align with business objectives, regulatory requirements, and operational risk management goals.

The Security Architect partners closely with Infrastructure, Platform Engineering, Development, Compliance, and Operations teams to design scalable and secure solutions while strengthening the organization’s overall security posture. This position plays a critical role in evaluating risk, developing security standards, supporting compliance initiatives, and guiding secure operational and engineering practices across complex hosting and cloud environments.

This role requires deep technical expertise, strong analytical skills, and the ability to communicate security concepts effectively to both technical and non-technical stakeholders.

Compensation: The compensation range for this position is between $140k-$160k

Responsibilities

• Design and maintain enterprise security architecture standards across cloud, infrastructure, network, application, and hosting environments
• Develop secure reference architectures, security baselines, and operational security standards
• Evaluate and recommend security technologies, tools, and controls to improve organizational security posture
• Partner with Infrastructure, Engineering, and Platform teams to ensure secure system design and implementation practices
• Review infrastructure, network, and application designs for security risks, vulnerabilities, and compliance alignment
• Assist with the development and implementation of identity and access management (IAM), segmentation, hardening, encryption, and monitoring strategies
• Support secure cloud adoption and infrastructure modernization initiatives
• Provide technical guidance on security controls for production systems, customer environments, and internal platforms

• Identify, assess, and document security risks across systems, applications, infrastructure, and operational processes
• Partner with Compliance and Governance teams to support PCI-DSS, SOC, ISO, customer audits, and other security-related assessments
• Assist in developing and maintaining security policies, standards, procedures, and technical controls
• Participate in security reviews, risk assessments, vulnerability management, and remediation planning activities
• Support operational maturity initiatives related to governance, access management, logging, monitoring, and security controls
• Evaluate exceptions to security standards and provide documented risk recommendations

• Support incident response activities involving infrastructure, access, operational security, and customer-impacting events
• Assist with threat modeling, security investigations, forensic analysis coordination, and root cause reviews as needed
• Provide guidance on vulnerability remediation priorities and risk mitigation strategies
• Collaborate with operational teams to strengthen monitoring, detection, alerting, and defensive security capabilities
• Participate in security awareness initiatives and promote security best practices throughout the organization

• Serve as a subject matter expert on infrastructure and operational security practices
• Partner cross-functionally with Engineering, Infrastructure, Security Operations, Compliance, and Leadership teams
• Communicate technical risks and recommendations clearly to both technical and business stakeholders
• Mentor technical teams on secure architecture principles and security best practices
• Stay current on emerging threats, vulnerabilities, industry trends, and evolving security technologies
• Additional duties as assigned

Requirements

• 5+ years of experience in Information Security, Infrastructure Engineering, Cloud Engineering, Systems Engineering, or related technical fields
• 3+ years of experience designing or supporting enterprise security architecture and security controls
• Bachelor’s Degree in Information Security, Computer Science, Information Technology, or related field, or equivalent practical experience 
• Strong understanding of infrastructure security principles including networking, systems hardening, identity management, access control, encryption, logging, and monitoring
• Experience working with cloud infrastructure platforms and virtualization technologies
• Experience supporting security compliance frameworks such as PCI-DSS, SOC, ISO 27001, CIS, or NIST
• Strong knowledge of security architecture methodologies, operational risk management, and secure system design
• Experience with vulnerability management, remediation coordination, and security assessment processes
• Excellent analytical, organizational, and problem-solving skills
• Strong written and verbal communication skills
• Ability to manage multiple priorities in a fast-paced operational environment

Preferred Qualifications

• Professional security certifications such as CISSP, CCSP, CISM, Security+, or equivalent
• Experience working within hosting, cloud infrastructure, managed services, SaaS, or enterprise operations environments
• Experience with identity and access management (IAM), SSO, MFA, and privileged access management solutions
• Familiarity with containerization, Kubernetes, infrastructure-as-code, and DevSecOps practices
• Experience with SIEM, EDR, vulnerability scanning, and security monitoring platforms
• Experience supporting customer-facing security reviews or audits

Work Environment

The physical demands described here are representative of those that must be met by an individual to successfully perform the essential duties of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties.

• While performing the essential duties of this job, the individual is regularly required to speak and hear
• While performing the essential duties of this job, the individual is regularly required to use hands for keyboarding, gross manipulation, and fine manipulation
• Works at a desk and computer screen for extended periods of time
• Works in a traditional climate controlled office environment or from home
• Works in a highly stressful environment dealing with a wide variety of challenges, deadlines and diverse employee population

Disclaimer

This job description is only a summary of the typical functions of the position. It is not intended to be an exhaustive or comprehensive list of all job responsibilities, tasks, or duties. Additional duties and tasks may be assigned as part of the job function. Liquid Web Inc. reserves the right to modify, interpret, or apply this job description in a way that best supports the organizational needs. The job description in no way creates or implies an employment contract. The employment contract remains “at will”. 

Equal Employment Opportunity Policy: Liquid Web is committed to offering equal employment opportunity without regard to age, color, disability, gender, gender identity, genetic information, marital status, military status, national origin, race, religion, sexual orientation, veteran status, or any other legally protected characteristic.

#LI-REMOTE