Security Architect / Engineer - Zero Trust Architecture
About the job
- At least 5 years of experience as a Security Architect / Engineer, with expertise evaluating Zero Trust Architecture (ZTA).
- Develop ZTA implementation roadmaps, plans, schedules, and decks; conduct cybersecurity program and architecture risk reviews; and provide architect and engineer support for ZTA implementation activities.
- Experience evaluating, recommending, and implementing commercial hardware and software security products to augment and enhance an enterprise cybersecurity program.
- Experience with system-, device-, and application-level hardening and assessing the cybersecurity posture of software, hardware, and firmware.
- Experience supporting an integrated, dynamic cyber defense and leveraging cybersecurity solutions to deliver cybersecurity operational services.
- Experience researching emerging technology, requisite security requirements, and emerging threats to develop a way forward that meets organizational goals.
- A B.S. degree in Computer Science, Management of Information Systems, Electrical Engineering, or Cybersecurity from an accredited university.
- ISC2 Certified Information Systems Security Professional (CISSP), ISC2 Certified Governance, Risk, and Compliance (CGRC) or Certified Authorization Professional (CAP), ISACA Certified Information Security Manager (CISM), ISACA Certified in Risk and Information Systems Control (CRISC), CompTIA Certified Advanced Security Practitioner (CASAP+), or CompTIA Security+.
About the company
WaveStrong provides information security and data privacy services to organizations across the US and Canada, combining advisory, managed security services, and solution consulting to plan, implement, and run security programs. Its advisory work includes risk assessments and compliance planning (PCI DSS, HIPAA, SOX, NIST), while its managed services offer 24/7 monitoring, co-managed SIEM, endpoint security, and MDR as an extension of a client’s team. Solution consultants bring engineers to help with deployment and integration of security projects across on-premises and cloud environments, covering application, cloud, data protection, and threat detection. The company differentiates itself with an end-to-end approach that unites strategic planning, ongoing operations, and hands-on engineering, focused on unified GRC across diverse industries, with the goal of protecting confidential information, intellectual property, and customer data.
Company Size
11-50
Company Stage
N/A
Total Funding
N/A
Headquarters
null
Founded
2001
Get referred to WaveStrong
See people who can refer or advise you
Simplify's Take
What believers are saying
- WaveStrong hosted IBM-backed PA Security Leaders Round Table in 2026, reinforcing market visibility.
- WaveStrong blog and events pages stayed active through 2026, showing ongoing demand generation.
- Whiteswan partnership in April 2025 expands identity security offerings for enterprise buyers.
What critics are saying
- Khanna v. Walia names WaveStrong in a 2026 Northern California RICO case.
- Court dockets indicate WaveStrong faces counterclaims and cross-claims, distracting leadership through 2026.
- Service-heavy cybersecurity consulting faces margin pressure from larger IBM ecosystem competitors and specialist MSSPs.
What makes WaveStrong unique
- WaveStrong pairs consulting, managed security, and solution engineering for enterprise security operations.
- IBM partnership signals distribution leverage and credibility in complex cybersecurity deals.
- Identity security partnerships like Whiteswan broaden its portfolio beyond traditional advisory services.
Help us improve and share your feedback! Did you find this helpful?