- Company Name
- MPower Plus
- Job Title
- Application Architect
- Job Description
-
**Job Title:** Application Architect
**Role Summary:**
Design, document, and govern enterprise network segmentation and application security architecture to contain threats, meet regulatory requirements, and enable secure application deployment across all environments.
**Expectations:**
- Deliver reference architecture artifacts (standards, patterns, roadmaps) approved by governance.
- Present solutions to design authorities and senior leadership.
- Maintain evidence‑based, data‑driven decision making and stay current with industry frameworks.
**Key Responsibilities:**
- Architect end‑to‑end network segmentation (micro‑segmentation, isolation) and application segmentation.
- Develop architecture artifacts (standards, patterns, strategies, roadmaps, recommendation papers).
- Conduct threat modeling, risk assessments, and document findings.
- Lead design reviews, present solutions, and provide technical thought leadership.
- Collaborate with cross‑functional stakeholders and secure governance approvals.
- Support migration and refactoring initiatives.
- Ensure compliance with global regulatory bodies and audit readiness.
**Required Skills:**
- Deep expertise in network segmentation, micro‑segmentation, application security, SDLC security, and lower environment security.
- Practical knowledge of legacy and modern networking infrastructure, NGFWs, NIPS/NIDS, WAAP, DDoS protection, API gateways, reverse proxies, AuthNZ.
- Experience with threat modeling, risk assessment, and evidence‑based decision making.
- Familiarity with frameworks: NIST, SANS, ITU, SABSA, TOGAF.
- Strong communication skills with technical SMEs and non‑security stakeholders.
- Proficiency in architectural tools (BizzDesign, Archi, UML) and project/documentation tools (Jira, Confluence).
**Required Education & Certifications:**
- Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Software Engineering, or a related scientific or mathematical field.
- SABSA or TOGAF certification preferred.
- Network infrastructure certification (e.g., CCNA/CCNP) and application security certification (e.g., CEH) or equivalent.