Cybersecurity Enterprise Architect

Nelnet is a diversified and innovative company committed to enriching lives through the power of service as a student loan servicer, professional services company, consumer loan originator and servicer, payments processor, renewable energy solutions, and K-12 and higher education expert. For over 40 years, Nelnet has been serving its customers, associates, and communities.The perks of working at Nelnet go beyond our benefits package. When you join the Nelnet team, you're part of a community invested in the success of each individual. That support comes through in our work, as we are united by our mission of creating opportunities for people where they live, learn, and work.Work with a team of experts to architect, design, and lead the implementation of enterprise-scale cybersecurity solutions that protect critical infrastructure, data, and AI-enabled systems across complex, multi-cloud environments (AWS, Azure, GCP). This role serves as a key architect and evangelist for secure digital transformation, ensuring consistent and scalable protection strategies across traditional, cloud-native, and AI-driven platforms. Provides both deep technical leadership and strategic influence across the organization, mentoring teams and driving innovation in both security architecture and emerging technology adoption.This position requires work in support of the Company’s contract with the United States Department of Education (“ED”). As such, the United States Government requires that any applicant for this position must complete United States Government security clearance. Effective June 1, 2018, ED has informed Nelnet that security clearance applications for foreign nationals are not being accepted or processed. In light of this direction from ED, Nelnet will be unable to hire applicants without United States citizenship for such positions.This position offers a hybrid work option. Nelnet values flexibility and understands the importance of work-life integration. Our hybrid work environment allows associates within 30 miles of an office to work remotely for part of the week, while also fostering collaboration and team connection through in-office presence. Please note that we are unable to provide visa sponsorship for this position. To be considered, candidates must already be authorized to work in the United States without the need for current or future sponsorship as security clearance is required.JOB RESPONSIBILITIES:Architect and implement secure-by-design cybersecurity components in enterprise-wide systems, including those incorporating AI/ML technologies across cloud platforms (AWS, Azure, GCP), hybrid environments and on-prem infrastructure.Define and enforce architectural standards for secure cloud adoption, container security, identity and access management (IAM), network segmentation, and integration of AI models, services, and data pipelines into business processes and products.Design cybersecurity strategies that integrate AI/ML components securely, addressing risks such as model poisoning, adversarial inputs, and data exposure.Lead the secure integration of AI into cloud-native platforms and DevSecOps pipelines, including AI model deployment, governance, and monitoring.Address complex challenges in security, integration, interoperability, and multi-cloud or hybrid platforms, including secure AI lifecycle management.Act as a technical expert on security architecture for traditional systems and next-gen platforms using generative AI, large language models (LLMs), and machine learning.Serve as a technical expert in security architecture, including cloud workload protection, cloud security posture management (CSPM), and compliance alignment.Collaborate with IT, CloudOps, Security, Data Science, and business units to ensure secure system design aligned to enterprise goals.Lead security architecture reviews and cloud adoption efforts, including migrations, SaaS evaluations, and third-party integrations.Influence strategic direction by communicating the value and necessity of cybersecurity architecture—including emerging AI risk—across leadership, IT, and business lines.ADDITIONAL RESPONSIBILITIES:Define reference architectures and security patterns for securing AI/ML pipelines on cloud platforms.Guide the application of Zero Trust principles to multi-cloud environments, identity management, and federated data systems.Contribute to the development and enforcement of enterprise cloud security policies, standards, and compliance controls (e.g., NIST, ISO, FedRAMP, SOC 2).Stay ahead of evolving cloud and AI security trends, regulatory requirements (e.g. NIST), and best practices.Coach and mentor both engineers and architects on secure development practices for cloud-native and AI-enabled applications.EDUCATION: Bachelor's degree in Information Security or related field and/or equivalent combination of education and experience.EXPERIENCE: At least 10 years of experience in an information technology or security engineering department, preferably as a Lead Engineer.10+ years of experience in cybersecurity or information security roles, with at least 5 years in a leadership or architecture capacity.5+ years of hands-on experience with cloud platforms (AWS, Azure, GCP), including native security tools and cloud infrastructure design.Experience securing large-scale, mission-critical enterprise environments, including hybrid and multi-cloud architectures.Demonstrated experience with AI security or machine learning governance is strongly preferred.Strong technical experience with the implementation of cybersecurity technologies in diverse, enterprise environments to include IDS, IPS, EDR, DLP.Ability to obtain and maintain security clearance is required.COMPETENCIES – SKILLS/KNOWLEDGE/ABILITIES:Effectively manage objectives, priorities, tradeoffs and risks for the organization.Ability to foster an environment of experimentation and continual improvement.Provide both technical leadership and mentorship of people managers.Organize, plan, prioritize and follow through on work.Use good judgement, problem-solving and decision-making skills.Work in a fast-paced environment where deadlines are essential.Strong communication and interpersonal skills with technical & non-technical clients as well as executive staff.Build strong relationships between cybersecurity, IT and business users.A working knowledge of industry security best practices.Compensation range for this position is - $125,000 - $150,000 annually, depending on experience.#LI-Hybrid#LI-CW1Our benefits package includes medical, dental, vision, HSA and FSA, generous earned time off, 401K/student loan repayment, life insurance & AD&D insurance, employee assistance program, employee stock purchase program, tuition reimbursement, performance-based incentive pay, short- and long-term disability, and a robust wellness program. Click here to learn more about our benefits: Benefits & Perks - Nelnet Inc.Nelnet is committed to providing a welcoming and respectful workplace where all associates have the opportunity to succeed. As an Equal Opportunity Employer, we ensure that all qualified applicants are considered for employment. Employment decisions are made without regard to race, color, religion/creed, national origin, gender, sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by federal, state, or local law. We value the unique contributions of every team member and believe that a positive work environment benefits everyone. Qualified individuals with disabilities who require reasonable accommodations in order to apply or compete for positions at Nelnet may request such accommodations by contacting Talent Acquisition at View phone number on click.appcast.io or View email address on click.appcast.io is a Drug Free and Tobacco Free Workplace.Use of Artificial Intelligence in Hiring We may use automated or artificial intelligence enabled tools to assist with the initial review of applications, such as identifying relevant skills or experience. These tools are used to support human review and do not make hiring decisions. A recruiter reviews applications and determines which candidates move forward in the hiring process. For more information, see our Privacy Policy and Pre-Use Notice: Automated Tools in HiringSummaryLocation: Centennial, CO; Lincoln, NE; Remote; Sidney, NE; Madison, WIType: Full time