Senior Security Architect

KEY RESPONSIBILITIES AND DUTIES:

• Define enterprise security architecture standards, reference architectures, technical roadmaps, and security strategies aligned with business objectives.
• Lead security architecture and design reviews across cloud, applications, infrastructure, networks, data, and third-party technology solutions.
• Provide security design guidance for major technology initiatives, ensuring security is embedded early in the solution lifecycle.
• Develop and maintain security patterns, standards, principles, reference architectures, and reusable security frameworks.
• Drive Secure by Design initiatives across enterprise technology and application development programs.
• Lead threat modeling, security assessments, and risk analysis for critical technology initiatives and enterprise solutions.
• Evaluate emerging technologies, platforms, and architectural approaches to identify security risks, opportunities, and required controls.
• Define and oversee security controls across AWS, Azure, IAM, network security, application security, and cloud environments.
• Partner with enterprise architects, engineering teams, application teams, infrastructure teams, and third-party providers to ensure security architecture alignment.
• Facilitate architecture review boards, security design reviews, technical workshops, and architecture governance discussions.
• Communicate security risks, architectural trade-offs, recommendations, and mitigation strategies to director-level and executive stakeholders.
• Ensure security architecture decisions align with enterprise policies, regulatory requirements, risk appetite, and business objectives.

MUST HAVE SPECIFIC KNOWLEDGE AND SKILLS:

• 10+ years of experience in cybersecurity, information security, or security engineering, with 5+ years in security architecture roles.
• Strong experience working within enterprise-scale organizations and complex technology environments.
• Proven experience defining enterprise security architecture, security standards, reference architectures, and technology roadmaps.
• Strong hands-on knowledge of AWS and Azure security architecture and cloud security services.
• Deep understanding of Identity and Access Management (IAM), authentication, authorization, privileged access, and identity governance.
• Strong knowledge of network security, application security, cloud security, and infrastructure security principles.
• Proven experience conducting architecture reviews and providing security guidance for enterprise technology initiatives.
• Strong experience with threat modeling, risk assessment, security controls, and Secure by Design methodologies.
• Ability to evaluate emerging technologies and identify associated security risks and architectural considerations.
• Strong understanding of security governance, architecture frameworks, policies, standards, and risk management.
• Excellent executive communication skills with the ability to explain complex security risks and technical trade-offs to senior stakeholders.

ADDITIONAL SKILLS AND OTHER REQUIREMENTS:

• Experience participating in or leading Enterprise Architecture / Security Architecture Review Boards.
• Strong ability to connect security controls and architecture decisions to business objectives and organizational risk.
• Experience influencing architects, engineering teams, technology leaders, and business stakeholders without direct authority.
• Experience developing security principles, design patterns, reference models, and architecture governance processes.
• Strong stakeholder management skills with experience presenting recommendations to director and executive-level audiences.
• Ability to balance security requirements, business priorities, technology constraints, cost, and delivery timelines.
• Experience embedding security requirements early in the solution and application lifecycle.
• Strong analytical, problem-solving, documentation, presentation, and communication skills.