Security Architect Job Requirements

Enterprise Security Architect's job description is similar to those of Security Engineer. A Security Architect designs, builds and oversees the implementation of security controls in an organization's IT infrastructure (e.g. networks, operating systems, databases and applications). They are usually part of all system development projects where they are expected to embed security controls at the design stages of system projects to prevent costly retrofitting of controls when the system is moved to production. Being an architectural function, a security architect is responsible for defining security requirements for all systems and IT infrastructure in use within an organization. They also define and gather security requirements for all system development or acquisition projects of an organization. With the gathered requirements, a security architect can roll out security baseline for all technologies, systems or IT infrastructure used or to be deployed within an organization. Some of the responsibilities of the Security Architect are not limited to researching security standards, frameworks, systems, technologies and protocols, develop requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, switches, databases, operating systems, design and integration of public key infrastructures (PKIs) into the organization systems including use of digital signatures and encryption technologies, design, implement and test security structures and methodologies for adoption, develop, implement and maintain security policies (physical security policy, password policy, IT security policy), involved in enterprise security awareness programs and training among others.

Reporting line of a Security Architect

A Security Architect could reports to the CISO or CIO.

Professional Certifications for Security Architect

To be endorsed as an Security Engineer, practitioners must acquire certification such as TOGAF (The Open Group Architecture Framework) certification, Certified Information Systems Security Professional (CISSP) by ISC2, Certified Ethical Hacker (CEH) by EC-Council.