VP, Architecture - Security

About the role

Fidelity will not provide immigration sponsorship for this position.

The Role Fidelity Enterprise Security Solution Architecture team is seeking a Vice President of Security Architecture to define and drive secure identity architecture providing cross cutting designs, patterns, standards and guidelines. Modern access paths span workforce users, external customers, privileged administrators, service accounts, APIs, AI agents, cloud roles, SaaS platforms, and machine identities. Decisions about authentication, authorization, privileged access, federation, secrets, identity lifecycle, and access governance will further enhance the security for our customers and platforms. The role will provide a critical bridge between IAM engineering, BU application teams, cloud/platform engineering, risk, compliance, and security operations. This role within the Enterprise Security Architecture team is positioned to evaluate identity as an enterprise domain: how identities are created, trusted, elevated, monitored, and revoked across the environment. The position provides technical and strategic vision and leadership for complex, multi-year initiatives, influencing product roadmaps, guiding the secure integration of our identities and creating enterprise security blueprints. It requires deep expertise in cloud, web, APIs, and modern architecture, along with strong strategic thinking and cross-functional collaboration to advance Fidelity’s cybersecurity innovation, reduce complexity, and strengthen customer protection.

The Team Enterprise Cyber Security Architecture operates within Fidelity Architecture and Engineering and is responsible for laying a solid foundation for the Enterprise to secure customer and associate interactions. The team supports the Enterprise IAM and Digital Security and actively defines the security architecture for customer identity, authentication, authorization, fraud mitigation, cloud security, and data privacy.

Requirements

• Minimum of 10 years of industry experience in architecting distributed systems and applications
• Relevant certifications such as CISSP, CISA, CCSP, AWS Security Specialty, or AWS Certified Solutions Architect preferred

Skills

• Enterprise identity strategy and architecture across workforce, customer, partner, non-human, machine, and AI-agent identities, including governance, lifecycle, trust relationships, and identity security controls.
• Identity data and identifier architecture, including authoritative sources, identity correlation, unique identifier strategies, and secure identity-sharing patterns across enterprise platforms.
• Experience defining enterprise identifier, identity-sharing, and authoritative source strategies to support secure, consistent identity management across platforms and business domains
• Security architecture patterns and governance controls for AI agents, machine identities, service accounts, workloads, APIs, and autonomous systems.
• Identity threat models and risk assessments for high-risk platforms, privileged workflows, critical applications, and cloud environments
• Identity-related security control requirements mapped to regulatory, audit, and internal policy expectations
• Exception review and risk disposition for identity security deviations, compensating controls, and remediation plans
• Partnership model with IAM engineering, application teams, cloud/platform teams, security operations, GRC, audit, and enterprise architecture
• Roadmap input for IAM, PAM, IGA, CIAM, Authorization, secrets management, certificate management, and cloud entitlement management capabilities
• Reusable architecture patterns, guardrails, and decision records that delivery teams can apply consistently
• Ability to translate