Info Security Architect

Job Description

Job Description

We are seeking an experienced Information Security Architect to join a growing enterprise security organization. This is a highly technical architecture role focused on designing secure, scalable solutions across cloud, infrastructure, identity, applications, data, and emerging technologies.
The position will work closely with cloud, infrastructure, application development, platform engineering, and cybersecurity teams to ensure security is incorporated into new platforms and modernization initiatives from the beginning.
This is an excellent opportunity for someone who enjoys solving complex technical security problems and wants to remain close to the technology while influencing broader enterprise security strategy.

Responsibilities

• Design enterprise security architectures, reference patterns, technical standards, and secure implementation approaches across cloud and on-premises environments.
• Review proposed applications, platforms, infrastructure solutions, and technology integrations to identify security risks and recommend practical design improvements.
• Conduct threat modeling and technical risk assessments for applications, cloud platforms, APIs, infrastructure, and emerging technologies.
• Develop secure architecture patterns for AWS, Azure, hybrid cloud, containers, Kubernetes, and Infrastructure as Code environments.
• Establish cloud security controls around identity, network segmentation, logging, secrets management, workload protection, and secure configuration.
• Help advance Zero Trust architecture, including ZTNA, micro-segmentation, least privilege, secure remote access, and identity-centric security controls.
• Partner with Identity teams on authentication, authorization, SSO, MFA, federation, PAM, RBAC/ABAC, and identity governance.
• Work with development and DevOps teams to incorporate security into the SDLC and CI/CD process, including application security, API security, software supply chain security, and secrets management.
• Support secure adoption of Generative AI and AI-enabled technologies, including evaluating AI platforms, development tools, data exposure risks, model governance, and secure-use patterns.
• Contribute to enterprise data protection architecture involving encryption, key management, classification, DLP, and tokenization.
• Evaluate security technologies across areas such as CSPM, CWPP, EDR/XDR, SIEM, CASB, vulnerability management, and cloud-native security.
• Partner with engineering teams to automate security controls and improve visibility, resiliency, scalability, and operational efficiency.

Qualifications

• 8+ years of experience across cybersecurity, security architecture, cloud security, infrastructure security, or related technical disciplines.
• Strong hands-on background designing and implementing enterprise security architectures and technical security standards.
• Deep technical knowledge of AWS and/or Azure, including cloud-native security controls and hybrid-cloud environments.
• Experience with Zero Trust, network security, segmentation, ZTNA, endpoint security, and enterprise connectivity.
• Strong understanding of identity security, including IAM, SSO, MFA, federation, PAM, RBAC/ABAC, and least privilege.
• Experience supporting Application Security and DevSecOps, including threat modeling, CI/CD security, API security, and secure SDLC practices.
• Familiarity with container/Kubernetes security and Infrastructure as Code security.
• Understanding of modern enterprise security technologies including EDR/XDR, SIEM, DLP, CASB, CSPM, vulnerability management, and workload protection.
• Familiarity with AI/GenAI security, including the security considerations associated with enterprise AI platforms and AI-assisted development.
• Strong ability to translate complex security requirements into practical technical solutions and communicate effectively with both engineering teams and business stakeholders.
• Bachelor's degree in a technical or related discipline

Preferred Experience

• Experience within financial services or another highly regulated enterprise environment is highly desirable. Certifications such as CISSP, CCSP, CISM, SABSA, AWS Security Specialty, Azure security certifications, or GIAC are beneficial but not required.
  Exposure to security frameworks and regulatory standards such as NIST, ISO 27001, CIS Controls, SOX, GLBA, NYDFS, or PCI-DSS is also valuable, along with experience in scripting, automation, Infrastructure as Code, cloud transformation, secure platform engineering, or enterprise AI initiatives.