Cybersecurity Architect - Principal

About the Role

The Cybersecurity Architect – Principal reports to the Cybersecurity Architect Senior Manager and works closely with the Chief Information Security Officer, audit, compliance, security engineering, IT infrastructure, application development, security operations, security audit, and end users. The role designs security solutions that protect business and customer data while enabling business execution and innovation. It also architects solutions for business‑to‑business initiatives, third‑party relationships, outsourced solutions, and vendors. The architect provides expert guidance on current security issues, anticipates industry trends, and delivers proactive secure solutions. The position is roughly 40 % security architecture, 50 % technical leadership, and 10 % research and development. Responsibilities include partnering with product managers and solution architects to set security direction, articulating value propositions, guiding Line of Business CIOs, and serving as the final approver of information security controls on projects.

Responsibilities

• Deliver cybersecurity architecture work associated with project delivery and roadmaps.
• Provide technical leadership to the cybersecurity organization.
• Perform research and development to enable future cybersecurity capabilities.
• Design security solutions that protect data while supporting business innovation.
• Architect security for B2B initiatives, third‑party relationships, outsourced solutions, and vendors.
• Offer expert guidance on current security issues and proactively address emerging threats.
• Think like an adversary to anticipate how solutions must evolve with the threat landscape.
• Partner with product managers and solution architects to define security direction for offerings.
• Guide Line of Business CIOs and act as the final approver of information security controls on projects.
• Collaborate with subject‑matter experts to improve information security patterns and services.

Basic Qualifications

• 4 + years of cybersecurity architecture experience.
• 8 + years of information security experience.
• 10 + years delivering technology solutions in large‑scale, complex organizations.
• Associate’s Degree or 4 + years of equivalent experience.

Preferred Qualifications

• Extensive knowledge of traditional security controls and technologies, including:
  • Security Information and Event Management (SIEM) systems
  • Intrusion detection/prevention systems (IDS/IPS)
  • Public Key Infrastructure (PKI)
  • Identity and Access Management (IDAM) systems
  • Antivirus and firewalls
• Experience with newer offerings such as:
  • Endpoint Detection and Response (EDR)
  • Threat intelligence platforms
  • Security automation and orchestration
  • Deception technologies
  • Application controls
• 5 + years in architecture, governance, risk management, PCI DSS control governance, application security, encryption, key management, and identity & access management.
• Experience with a broad range of mobile and web application design, development, and management principles, practices, and procedures.
• Proven ability to influence management on technical and business solutions.
• Experience in cloud computing technologies (SaaS, IaaS, PaaS) across public, private, and hybrid environments.
• Excellent verbal, written, and interpersonal communication skills.
• Knowledge of data protection technologies and practices.
• Understanding of threat analysis and assessment of information security risk/threats.
• Strong understanding of application/software security, including dynamic application security testing, secure code review, and static code analysis.
• Knowledge of cryptography and key management.
• Understanding of service‑oriented architecture and associated security controls.
• Familiarity with enterprise authentication and authorization technologies such as LDAP, SAML, XACML, and reverse authenticating proxies.
• General understanding of diverse platforms and operating systems, including emerging technologies.
• Certified Information Systems Security Professional (CISSP) certification.
• Experience architecting applications for the financial services industry.

Pay

Compensation Range: $93,000 – $189,000 annual base salary. Actual compensation varies based on location, experience, and education. This position is exempt (not eligible for overtime pay) and is also eligible for an incentive compensation plan.

Benefits

• Health insurance coverage
• Wellness program
• Life and disability insurance
• Retirement savings plan
• Paid leave programs
• Paid holidays
• Paid time off (PTO)