Sr. Security Solutions Architect (Pre-Sales) - West Coast

About the role

The Redesign Group is seeking a highly technical Security Solutions Architect with deep hands-on implementation experience across enterprise security domains. This role supports complex pre-sales engagements by leading technical architecture, validating security design decisions, and translating operational realities into scalable, defensible security strategies.

This position is designed for a practitioner who has built, deployed, tuned, and operated security technologies in production environments — not just designed them on paper. You will work closely with Sales, Engineering, and client security teams to architect integrated, defense-in-depth solutions across hybrid infrastructure, cloud, application, and identity environments.

Candidates must live on the West Coast (CA, WA, OR, NV, or AZ). This role requires regular in-person meetings with the sales team and clients at customer sites.

Technical Responsibilities

Security Architecture & Design

• Design layered, defense-in-depth architectures across hybrid, multi-cloud, and on-prem environments
• Lead technical discovery and perform detailed security posture assessments
• Develop phased remediation and modernization roadmaps aligned to enterprise risk

Architect Zero Trust-aligned frameworks spanning identity, endpoint, network, and cloud:

• Application & DevSecOps Security
• Integrate SAST, DAST, SCA, and RASP into CI/CD pipelines
• Architect secure SDLC frameworks and DevSecOps controls
• Design WAF and API protection strategies
• Advise on container security, image scanning, and Kubernetes hardening
• Cloud & Infrastructure Security
• Architect CSPM, CASB, and cloud workload protection solutions

• Design secure hybrid connectivity models (SASE, NGFW, segmentation, NAC)
• Implement Infrastructure-as-Code (IaC) security controls
• Secure containerized and serverless environments

Align architecture with Azure, AWS, and multi-cloud security best practices:

• Identity & Access Management
• Architect enterprise IAM, IGA, PAM, and CIAM solutions
• Design conditional access, MFA, and identity protection strategies
• Implement least-privilege and role-based access control models

• Integrate identity telemetry into broader detection and response ecosystems
• Endpoint, Threat Detection & SOC Architecture

Design EPP, EDR/XDR, and MDR integrations

Architect SIEM and SOAR platforms for centralized logging and automated response

• Develop detection engineering strategies and use-case tuning
• Integrate threat intelligence platforms (TIPs) into SOC workflows
• Support incident response program development and playbook design
• Data & Email Security
• Implement enterprise DLP and data classification programs
• Design encryption, key management, and secure collaboration controls

Architect phishing protection, SEG, DMARC enforcement, and anomaly detection

Governance, Risk & Compliance

• Align architectures to frameworks such as NIST, ISO, CIS, and SOC 2
• Conduct vulnerability management program design and risk prioritization

Support regulatory requirements across healthcare, financial, and global environments

Implement third-party risk management (TPRM) controls

Key Vendor & Platform Experience (Hands-On Preferred)

Deep experience implementing, tuning, and operating one or more of the following ecosystems:

• CrowdStrike, SentinelOne
• Microsoft Security (Defender, Sentinel, Entra)
• Rapid7, Tenable, Qualys
• Palo Alto Networks
• Arctic Wolf
• Zscaler, Netskope
• Proofpoint, Abnormal
• KnowBe4
• Darktrace
• Okta
• Required Experience

• 10+ years of hands-on cybersecurity engineering and architecture experience
• Experience integrating multiple vendor platforms into a unified detection, prevention, and response architecture is strongly preferred.
• Proven experience designing and operating enterprise-scale security environments
• Strong understanding of network protocols, identity systems, cloud architectures, and threat models
• Experience in detection engineering, log analysis, and incident response workflows
• Background supporting regulated enterprise environments
• Ability to communicate technical trade-offs clearly to both technical and executive stakeholders

Preferred Certifications

• CISSP
• CISM
• CCSP

• GIAC (GCIA, GCIH, GPEN, etc.)
• CEH

Security+

Vendor certifications (Microsoft Security, Palo Alto, Okta, CrowdStrike, etc.)

Benefits

We offer a comprehensive benefits package which may include:

• Medical Insurance
• Dental Insurance
• Vision Insurance
• 401(k) plan with a 4% employer match (annual dollar cap applied)
• Flexible time off plan
• 15 paid holidays

Sick leave (amount varies by state requirements and is at least the minimum required by any state)

• Short-term and long-term disability
• Life insurance
• Paid parental leave
• About Company ---