Information Security Architect

Job Summary Provides technical leadership and is responsible for determining the direction for the IT architecture, standards, design and implementation approaches for the company’s application systems, infrastructure and/or network‑based cloud product systems. Creates, evaluates and implements plans and design proposals for high impact IT solutions and their use involving leading edge technologies and methods considering key factors such as their long‑term effectiveness (service delivery and cost), practicality, technical limitations and criticality. This is an expert‑level role requiring independent action to establish methods and procedures on new and/or special assignments. Essential Duties and Responsibilities Lead and perform architecture security reviews based on relative and applicable information security standards, policies and regulatory requirements. Conduct risk assessments and threat analyses to identify information security risks and vulnerabilities within complex IT and manufacturing applications and systems. Drive standardization and utilization of TOGAF adoption of cybersecurity building blocks. Provide cybersecurity guidance and support to both IT and manufacturing solutions. Influence the integration of application security principles in the solution design, processes, and standards, based on business, regulatory or customer requirements. Provide architectural and design guidance, analysis and direction for enterprise‑wide key projects and strategic initiatives related to information security and privacy; resolve conflicts and provide process improvements. Support and guide development and infrastructure teams on complex application security designs and vulnerabilities. Leverage risk management solutions such as OneTrust. Leverage AI agentic technologies (e.g., Kiro, Amazon Q, Amazon Bedrock). Knowledge Know and understand the company’s business strategy and IT strategy & objectives. Define overall solution architecture consistent with the organization’s methodology. Provide leadership for customers, project managers, domain architects, domain specialists and application engineers to advance and deliver solutions. Consult and inform Enterprise Architects and Senior IT Architects to design and deliver solutions. Earn trust of clients and management. Assess merits of alternative technical approaches and gain consensus for best approach. Promote recognized methodologies to design and deliver solutions. Ensure non‑functional requirements such as security, disaster recovery, availability and performance are satisfied. Research technology and industry trends to sharpen personal and organizational competitive edge. Validate solutions through modeling or prototyping before full implementation. Develop expertise in one of the following disciplines: Enterprise Architecture, Business Architecture, Information Architecture, Application Architecture, or Technology Infrastructure Architecture. Mentor IT professionals. Management Practices Develop project plans and influence project organization. Apply recognized system sizing methodology. Vet changes with respect to scope, schedule, cost, and risk. Cross‑train staff to reduce delivery risk. Define processes and methods to support delivery and deployment. Define management tools to support production environment. Continuous Improvement Utilize Lean Six Sigma or other methods to identify and provide guidance on organizational improvement opportunities. Perform root‑cause analysis and remediation actions. Contribute to intellectual property through development and submission of patents. Policy and Procedures Comply with IT policy, procedure and process. Adhere to all safety and health rules and regulations associated with this position. Follow all procedures within the company security policy. Training and Development Define technical job content and qualifications of key roles required to support technical infrastructure. Work closely with management to assess and aid the development of staff skill sets. Assist management in assessing and resolving staffing knowledge gaps. Communication Publish and present to customers, IT leaders and business executives. Engage with vendors and third parties as needed. Organize verbal and written ideas clearly and use an appropriate business style. Ask questions and encourage input from staff. Develop peer relationships with Senior IT Architects. Management and Supervisory Responsibilities Reports to management. The role is not primarily managerial and does not directly manage employees (e.g., hiring, pay decisions, or performance management). Job Qualifications Knowledge and experience in designing secure IT and manufacturing applications and systems. Knowledge and experience in architecture risk reviews. Knowledge and experience in adoption and standardization of TOGAF. Strong knowledge of threat modeling (OWASP, MITRE). Understanding of all architectural components and their interrelationships. Knowledge of Software Engineering and Architectural Principles and methods. Knowledge of identification and mitigation of cyber security gaps within internally developed LLM, GenAI and Agentic AI models. Experience performing risk assessments of LLM, GenAI and Agentic AI models. Deep understanding of application design, data, and infrastructure environments; experience across security competencies such as Identity and Access Management, Cloud Security, Data Security, and Application Security. Strong understanding of secure software development practices and technologies, including vulnerability detection, identification and remediation. Knowledge of compliance and application security standards across the enterprise IT landscape; experience driving enterprise risk management. Solid presentation and written communication skills. Good judgment and the ability to handle stressful situations. Team lead experience in application development. Knowledge of one or more languages (e.g., Java, C#, etc.). Knowledge of server‑side technologies. Knowledge of client‑side technologies (e.g., Node, Angular). Experience with Agile methodology. Knowledge of SOA, including REST, SOAP, API Management and other integration patterns (e.g., ESB, EIP). Knowledge of relational databases and SQL. Knowledge of UML or ArchiMate. Knowledge of cloud technologies. Ability to define problems, collect data, establish facts, and draw valid conclusions. Education and Experience Requirements Bachelor’s degree required. Post‑graduate degree in Computer Science or Management Information Systems expected. Minimum 12 years of experience in a related discipline. or equivalent combination of education, training, or experience. Preferred Certifications Certified Cloud Security Professional (CCSP) Certificate of Cloud Security Knowledge (CCSK) Cloud Security Essentials (GCLD) Cloud Security Automation (GCSA) Certified Web Application Defender (GWEB) Public Cloud Security (GPCS) Certified Cloud Penetration Tester (GCPN) Other Preferred Certifications Certified Information Systems Security Professional (CISSP) Certified Information Systems Auditor (CISA) Certified Information Security Manager (CISM) Open CA Level 1: Certified or Level 2 Master TOGAF 9 Foundation ArchiMate 3 Practitioner Pay and Benefits Pay range: $126,100 – $227,000. Short‑term incentive based on performance. Benefits include medical, dental, and vision insurance plans; paid time off accruing at a rate of 3.07 hours during the first year of employment; 4 weeks of paid parental leave; in 2026, 11 company‑paid holidays (9 fixed holidays and 2 optional floating holidays); 401(k) retirement plan; and employee stock purchase plan. #J-18808-Ljbffr