Security Architect

About the role

The Security Architect at Skechers is a subject matter expert across information security domains who helps enable technology teams to design, build, and operate systems with a security-by-design mindset. The role requires balancing strategic planning with hands-on architectural engagement, ensuring that security principles are translated into practical guidance.

Responsibilities

• Define, implement, and continuously improve the Security Architecture operating model, including engagement processes, service definitions, and integration with technology delivery teams
• Develop and maintain practical security roadmaps aligned to business strategy, technology direction, and evolving threat landscape
• Track and define security architecture approaches for emerging technologies, including AI/ML and agentic systems, ensuring appropriate controls, risk management, and alignment with enterprise standards
• Establish and govern enterprise security standards, patterns, and architectural principles, ensuring consistency, accuracy, and ongoing maintenance
• Develop and maintain reusable reference architectures and security design patterns that enable scalable and secure implementation across domains
• Partner with various technology teams to proactively embed security into system design, architecture reviews, and technology selection
• Evaluate proposed architectures, designs, and solutions for alignment with security standards, risk posture, and enterprise security architecture
• Act as a security architecture subject matter expert in business and technology initiatives, ensuring security considerations are addressed early in the design lifecycle
• Provide architectural oversight and guidance for security tooling, ensuring effective integration, coverage, and alignment with enterprise needs
• Maintain awareness of regulatory and compliance requirements (e.g., PCI, SOX, GDPR/CCPA) and ensure security architecture aligns with applicable obligations

Requirements

• 8+ years of experience cumulatively across IT security, systems, network, infrastructure, or software engineering roles
• GIAC, (ISC)2, or equivalent certifications a plus