Cybersecurity Architect - Principal

About the Role

The Cybersecurity Architect – Principal reports to the Cybersecurity Architect Senior Manager and works closely with the Chief Information Security Officer, audit, compliance, and a wide range of teams including security engineering, IT infrastructure, application development, security operations, security audit, and end users. The role designs security solutions that protect business and customer data while enabling business execution and innovation. It also architects security for business‑to‑business initiatives, third‑party relationships, outsourced solutions, and vendors. The architect provides expert guidance on current security issues, anticipates industry trends, and thinks like an adversary to evolve solutions as the threat landscape changes. The position is roughly 40 % security architecture, 50 % technical leadership, and 10 % research and development, partnering with product managers, solution architects, and Line‑of‑Business CIOs to set security direction and approve information security controls.

Responsibilities

• Deliver cybersecurity architecture work associated with project delivery and roadmaps.
• Provide technical leadership to the cybersecurity organization.
• Perform research and development to enable future cybersecurity capabilities.

Basic Qualifications

• 4+ years of cybersecurity architecture experience.
• 8+ years of information security experience.
• 10+ years delivering technology solutions in large‑scale, complex organizations.
• Associate’s degree or 4+ additional years of equivalent experience.

Preferred Qualifications

• Extensive knowledge of traditional security controls and technologies, including SIEM, IDS/IPS, PKI, IDAM, antivirus, and firewalls.
• Familiarity with newer offerings such as EDR, threat‑intelligence platforms, security automation and orchestration, deception technologies, and application controls.
• 5+ years in architecture, governance, risk management, PCI DSS control governance, application security, encryption, key management, and identity & access management.
• Experience with mobile and web application design, development, and management principles.
• Proven ability to influence management on technical and business solutions.
• Experience with cloud computing technologies (SaaS, IaaS, PaaS) across public, private, and hybrid environments.
• Excellent verbal, written, and interpersonal communication skills.
• Knowledge of data‑protection technologies and practices.
• Understanding of threat analysis and assessment of information‑security risks.
• Strong grasp of application/software security, including dynamic testing, secure code review, and static analysis.
• Knowledge of cryptography and key management.
• Understanding of service‑oriented architecture and associated security controls.
• Familiarity with enterprise authentication and authorization technologies such as LDAP, SAML, XACML, and reverse authenticating proxies.
• General understanding of diverse platforms and operating systems, current and emerging.
• Certified Information Systems Security Professional (CISSP).
• Experience architecting applications for the financial services industry.

Compensation

Annual salary range: $93,000 – $189,000. Eligible for an incentive compensation plan; actual compensation varies based on location, experience, and education.

Benefits

• Health insurance coverage
• Wellness program
• Life and disability insurance
• Retirement savings plan
• Paid leave programs, paid holidays, and paid time off (PTO)

Work Arrangement

Office‑based role with the possibility of flexible work arrangements, allowing a blend of in‑office and remote work as determined by the hiring team.