Senior Cybersecurity Architect

Job Description:

• Serve as the security architecture review and design authority for new solutions, integrations, and major changes
• Evaluate solution designs at permission-to-build and permission-to-operate gates
• Produce formal InfoSec assessments with risk-rated findings and drive remediation or time-boxed exceptions to closure
• Champion Zero Trust architecture, identity-centric access, least privilege, micro-segmentation, and continuous verification
• Develop enterprise security reference architectures, reusable design patterns, secure-by-design standards, and paved-road guardrails
• Design and review hybrid/multicloud security architecture, with AWS as the primary cloud
• Embed security into CI/CD, infrastructure-as-code, container/Kubernetes, DevSecOps, and secure SDLC practices
• Assess data and AI system protection, classification, human-in-the-loop controls, confidence-threshold gating, audit logging, rollback, and model/vendor data handling
• Review API, integration, and third-party SaaS security, including MuleSoft and Akamai
• Conduct vendor security risk assessments and partner with Legal/Privacy on regulatory determinations
• Map controls and findings to NIST CSF 2.0, NIST 800-53, and ISO 27001 and enforce minimum security baselines
• Enforce Privileged Access Management standards for service accounts and credentials
• Participate in or approve Architectural Review Board and Change Advisory Board activities
• Perform risk analysis across networks, applications, and third-party service providers
• Maintain security architecture documentation, standards, patterns, and procedures
• Provide technical oversight and architecture guidance for incident response, investigation, and remediation, including off-hours support as needed
• Research emerging security technologies, threats, advisories, laws, and regulations
• Coach delivery teams and information security staff on secure design patterns and self-service guardrails

Requirements:

• Bachelor’s degree in information technology, computer science, or a related field, or equivalent work or education-related experience
• 7+ years’ experience in IT Security, including security architecture and solution design review
• Experience designing Zero Trust and secure-by-design architectures, reusable security patterns, and reference architectures
• Hands-on experience securing hybrid/multicloud environments, especially AWS; Azure/GCP a plus
• Experience with IAM, serverless/Lambda, S3, KMS, Secrets Manager, VPC design, and cloud-native security controls
• Experience with DevSecOps and secure SDLC, including CI/CD pipeline security, infrastructure-as-code scanning, and container/Kubernetes security
• Experience with API and integration security, including API gateways, WAF, MuleSoft/Akamai or equivalent, and third-party SaaS integrations
• Exposure to data and AI/ML or automation/agentic systems security
• Experience with security standards development, risk assessment, third-party/vendor risk, and compliance testing
• Familiarity with penetration testing and vulnerability assessment
• Proficient knowledge of NIST CSF 2.0, NIST 800-53, ISO 27001, and PCI DSS
• Working knowledge of cloud security services, IAM, cryptography/encryption and key management, DLP, SIEM, IDS/IPS, endpoint protection, firewalls, and Active Directory
• CISSP required or strongly preferred; Microsoft SC-100, CISSP-ISSAP, CCSP, AWS Certified Security – Specialty, CISM, CISA, CEH, or GIAC certifications preferred or a plus
• Strong analytical, problem-solving, communication, time-management, project-management, and organizational skills
• Ability to work independently and in a team environment, maintain confidentiality, and handle multiple projects within established time constraints

Benefits:

• Annual bonus eligibility: 15%
• Reasonable accommodations for individuals with disabilities
• Equal opportunity employment