Senior Information Security Architect

Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system (DNS) services. We are a mission focused, values driven company where each individual can contribute to building a stronger, more secure internet. We offer a dynamic and flexible work environment with competitive benefits and the ability to grow your career.The mission of the Security Architecture Team is to define and advance secure, resilient architecture across Verisign’s systems, networks, applications, cloud platforms, data environments, and emerging technologies. The team combines deep technical expertise with enterprise strategy to reduce risk, enable innovation, and establish security patterns that scale across the organization.We have an exciting opportunity for a Senior Information Security Architect. This senior individual-contributor role shapes enterprise security strategy, reference architectures, standards, and technical requirements across the entire company. The architect will lead high-impact design decisions, resolve complex cross-domain security challenges, and advise engineering and executive leaders on risk, tradeoffs, and long-term technology direction.Working across security engineering, infrastructure, application development, cloud, data, and AI teams, this role ensures security is built into critical services from concept through implementation in production. The Senior Information Security Architect will authoritatively guide the defense of a diverse hybrid technology ecosystem - safeguarding mission essential on-premises architecture, modern cloud platforms, secure application pipelines, and emerging enterprise AI workloads.Key ResponsibilitiesDefine enterprise security architecture strategy, principles, reference architectures, reusable patterns, and multi-year roadmaps across network, endpoint, identity, application, cloud, container, data, and detection and response domainsLead security architecture engagement for complex, high-risk, and cross-functional programs; translate business objectives, threat intelligence, and risk appetite into scalable technical controls and design requirementsEstablish architecture and security requirements for AI/ML systems, including secure MLOps, model and data lifecycle protection, identity and authorization, platform isolation, model provenance, monitoring, privacy, and responsible-use guardrailsReview generative and agentic AI designs—including retrieval-augmented generation, vector databases, third-party models, APIs, plugins, tools, and autonomous actions—and address controls to mitigate the risks of prompt injection, data leakage, excessive agency, insecure output handling, and AI supply-chain compromisePerform threat modeling, architecture reviews, and security design assessments for critical systems and emerging technologies; document risk decisions and guide remediation or compensating controlsIdentify systemic gaps in the security posture, develop prioritized recommendations and investment roadmaps, and communicate technical risk and tradeoffs clearly to executive leadershipEvaluate security technologies and vendors, guide proofs of concept, and ensure proposed solutions are interoperable, supportable, measurable, and aligned with strategic architectureRequirementsBachelor’s degree in computer science, cybersecurity, engineering, or a related technical field, or equivalent practical experience10+ years of broad information security experience, including significant experience with security architecture and design for complex enterprise environmentsDemonstrated expertise across security architecture and secure networking, cloud, identity (both on premises and cloud), endpoint, application security, data protection, and detection and responseProven ability to lead threat modeling and architecture reviews, and to make consequential technical decisions for high-value or high-availability systemsWorking knowledge of AI/ML architecture and security, including secure MLOps, model and data governance, generative AI, RAG, AI agents, prompt injection, model supply-chain risk, sensitive-data exposure, access controls, and monitoringAbility to translate complex technical risk into clear recommendations for engineering teams, business stakeholders, and executive leadersStrong cross-functional leadership, facilitation, written communication, and mentoring skills, with a record of influencing decisions without direct authorityPreferred:Advanced experience with vulnerability assessment, security risk analysis, and risk-based prioritizationExpertise in application security, secure software development, and the OWASP Top 10 and OWASP Top 10 for Large Language Model ApplicationsExperience designing security for public cloud, hybrid environments, infrastructure as code, and CI/CD pipelinesFamiliarity with frameworks such as NIST CSF, NIST AI RMF, MITRE ATT&CK, or MITRE ATLASRelevant certifications such as CISSP, CCSP, SABSA, or equivalentThis position is based in our Reston, VA office and offers a hybrid work schedule.The pay range is $164,300 - $222,300.The anticipated annual base salary range for this position is noted above, however, base pay offered may vary depending on job-related knowledge, skills, experience. Verisign offers a discretionary bonus which is based on individual and company performance, and certain roles may be eligible for discretionary stock awards.Verisign is an equal opportunity employer. That means we recruit, hire, compensate, train, promote, transfer, and administer all terms and conditions of employment without regard to their race, color, religion, national origin, sex, sexual orientation, gender identity, age, protected veteran status, disability, or other protected categories under applicable law.Additional Information:Our Careers PageOur Benefits SummaryVerisign in the CommunityOur EEO StatementOur Privacy Notice for Job Applicants/CandidatesReasonable AccommodationsStaffing agency policy: No fees will be paid for unsolicited resumes submitted to Verisign or our employees by third parties.