Security Architect

Position Overview

We are seeking an experienced and highly skilled Security Architect to design, implement, and oversee enterprise security architectures that protect the organization's systems, applications, networks, cloud environments, and data assets. This role is responsible for defining security standards, developing secure architecture frameworks, and ensuring that security is embedded into technology solutions from design through deployment.

The ideal candidate possesses deep expertise in cybersecurity architecture, cloud security, application security, identity and access management, risk management, and enterprise security frameworks. They will work closely with Engineering, Infrastructure, DevOps, Product, Compliance, and Executive Leadership teams to build scalable, resilient, and secure technology ecosystems.

Location Requirement

To support collaboration, architecture reviews, and strategic security initiatives, candidates must currently reside in one of the following metropolitan areas in the United States:

• Dallas

• Houston

• Austin

• Atlanta

• Jacksonville

• Miami

• Nashville

• Charlotte

• Phoenix

Candidates residing outside of these locations will not be considered for this position.

Key Responsibilities

Enterprise Security Architecture

• Design and maintain enterprise-wide security architecture frameworks and standards

• Develop secure architecture patterns for cloud, applications, infrastructure, and data platforms

• Ensure security requirements are incorporated throughout the system development lifecycle

• Define security reference architectures, blueprints, and technical standards

• Conduct architecture reviews and security design assessments

• Align security architecture with business objectives and regulatory requirements

Cloud Security Architecture

• Design secure cloud environments across AWS, Azure, and/or GCP

• Develop cloud security controls and governance frameworks

• Architect identity, access management, encryption, and key management solutions

• Evaluate cloud-native security services and technologies

• Implement secure multi-cloud and hybrid-cloud architectures

• Ensure compliance with cloud security best practices and standards

Identity & Access Management (IAM)

• Design enterprise IAM and privileged access management strategies

• Implement Zero Trust security principles and access controls

• Define authentication, authorization, federation, and single sign-on (SSO) architectures

• Architect role-based and attribute-based access control models

• Support identity governance and lifecycle management initiatives

• Collaborate on secure access solutions for employees, partners, and customers

Application & DevSecOps Security

• Establish secure software development and DevSecOps practices

• Review application architectures for security vulnerabilities and risks

• Design secure API, microservices, and distributed system architectures

• Integrate security controls into CI/CD pipelines and development workflows

• Support threat modeling and secure code review initiatives

• Collaborate with Engineering teams on remediation strategies

Network & Infrastructure Security

• Architect secure network segmentation and perimeter security controls

• Design security solutions for enterprise infrastructure and data centers

• Evaluate firewalls, intrusion detection/prevention systems, and security monitoring solutions

• Develop secure connectivity strategies for remote and hybrid workforces

• Support infrastructure hardening and resilience initiatives

• Ensure network architectures align with Zero Trust principles

Security Risk Assessment & Governance

• Conduct architecture risk assessments and security reviews

• Identify security gaps, vulnerabilities, and emerging risks

• Recommend mitigation strategies and security enhancements

• Support cybersecurity governance and risk management programs

• Participate in audit, compliance, and regulatory initiatives

• Develop security policies, standards, and technical guidance

Security Strategy & Innovation

• Evaluate emerging cybersecurity technologies and trends

• Recommend security investments and strategic improvements

• Contribute to enterprise cybersecurity roadmaps

• Drive innovation in security architecture and design practices

• Establish security metrics and architecture performance indicators

• Support long-term technology and security planning initiatives

Collaboration & Technical Leadership

• Partner with Security, Engineering, Infrastructure, Product, and Compliance teams

• Provide security architecture guidance and technical leadership

• Mentor engineers, analysts, and security professionals

• Lead architecture workshops, design reviews, and threat modeling sessions

• Support executive leadership with security strategy recommendations

• Participate in vendor evaluations and technology selection processes

Qualifications

Required

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related field

• 7+ years of experience in cybersecurity, information security, infrastructure security, cloud security, or security engineering

• 3+ years of experience in a Security Architect, Lead Security Engineer, or equivalent architecture-focused role

• Strong knowledge of security architecture frameworks, methodologies, and best practices

• Experience with cloud security architecture (AWS, Azure, and/or GCP)

• Deep understanding of IAM, Zero Trust, network security, and application security

• Experience conducting architecture reviews, threat modeling, and risk assessments

• Knowledge of secure software development and DevSecOps practices

• Strong communication, stakeholder management, and technical documentation skills

• Must currently reside in one of the approved locations listed above

Preferred (Nice-to-Have)

• Professional certifications such as:

  • Certified Information Systems Security Professional (CISSP)

  • Certified Information Security Manager (CISM)

  • Certified Cloud Security Professional (CCSP)

  • SABSA Chartered Security Architect

  • AWS Certified Security – Specialty

  • Microsoft Certified: Cybersecurity Architect Expert

  • GIAC Security Certifications

• Experience with NIST, ISO 27001, SOC 2, CIS Controls, PCI-DSS, HIPAA, or similar frameworks

• Experience with Zero Trust architecture implementation

• Knowledge of container security, Kubernetes, and cloud-native security technologies

• Familiarity with security automation and orchestration platforms

• Experience in highly regulated industries such as financial services, healthcare, insurance, or government

• Enterprise architecture or solution architecture experience

• Experience supporting mergers, acquisitions, or large-scale technology transformations

Key Performance Indicators (KPIs)

Security Architecture & Design

• Security architecture review completion rate

• Security design approval success rate

• Reduction in architecture-related security risks

• Compliance with security architecture standards

Risk Management

• High-risk findings identified and remediated

• Threat modeling completion rate

• Security control implementation effectiveness

• Architecture risk assessment coverage

Cloud & Infrastructure Security

• Cloud security posture improvement metrics

• Infrastructure hardening compliance scores

• Identity and access governance effectiveness

• Security configuration compliance rates

Compliance & Governance

• Audit readiness and compliance results

• Regulatory adherence metrics

• Security policy and standards adoption rates

• Security exception reduction over time

Business Impact & Leadership

• Stakeholder satisfaction scores

• Successful delivery of strategic security initiatives

• Security program maturity improvements

• Technical mentorship and leadership contributions

Reporting To

• Director of Cybersecurity

• Director of Security Architecture

• Head of Information Security

• Chief Information Security Officer (CISO)

• Chief Information Officer (CIO)

• Chief Technology Officer (CTO)

Employment Type & Work Setup

• Full-Time

• Remote (Candidates must reside in approved locations)

• Hybrid opportunities may be available based on business requirements

• Occasional travel for architecture reviews, audits, workshops, and strategic planning sessions

• Agile and collaborative work environment

Work Environment & Conditions

• Enterprise-scale cybersecurity and technology environment

• Close collaboration with Security, Engineering, Cloud, Infrastructure, and Compliance teams

• Strong focus on secure-by-design principles and proactive risk management

• Opportunity to influence enterprise security strategy and technology decisions

• Access to modern cloud, security, and enterprise technology platforms

• Continuous learning and professional development opportunities

• Career progression toward Principal Security Architect, Director of Security Architecture, or CISO leadership tracks