Cyber Security Architect

Job Responsibilities

Serves as an expert contributor in the development and implementation of cybersecurity architectures, patterns, strategies, and solutions supporting emerging technology and AI-enabled cybersecurity capabilities.

Evaluates opportunities to leverage artificial intelligence, agentic AI, automation, orchestration, analytics, and other emerging technologies to enhance cybersecurity capabilities and operating models.

Develops current-state, transitional, and future-state cybersecurity architectures that integrate capabilities across multiple cybersecurity domains and technology platforms.

• Assesses opportunities to improve interoperability and automation across areas including: Vulnerability and Exposure Management
• Configuration and Security Posture Management
• Identity and Access Management
• Endpoint Protection and Detection
• Security Operations
• Asset and Technology Inventory
• Threat Detection and Response
• Security Analytics and Automation

Explores how AI agents and autonomous or semi-autonomous capabilities can securely interact with cybersecurity platforms, enterprise systems, data, and workflows while maintaining appropriate security controls, governance, and human oversight.

Identifies opportunities to reduce fragmented security processes through technology integration, consolidation, automation, and intelligent orchestration.

Evaluates emerging cybersecurity technologies, platforms, tools, and architectural approaches for potential applicability within the enterprise.

Develops reference architectures, architecture patterns, capability models, technical recommendations, and roadmaps supporting future cybersecurity capabilities.

Partners with cybersecurity domain architects, engineering teams, security operations, technology teams, and other stakeholders to evaluate cross-domain architecture requirements and integration opportunities.

Assesses architectural considerations associated with machine identities, AI agents, privileged access, authentication, authorization, data access, trust boundaries, and automated actions.

Evaluates security implications associated with integrating AI capabilities into cybersecurity technologies and operational workflows.

Helps establish architectural principles and guardrails for the responsible and secure adoption of emerging AI-enabled cybersecurity capabilities.

Identifies dependencies, architectural gaps, integration challenges, technical risks, and opportunities associated with future-state cybersecurity architectures.

Develops technical assessments, architecture documentation, recommendations, and executive-level presentations communicating complex concepts to both technical and business stakeholders.

Proactively monitors technology developments and industry trends that may materially change cybersecurity architecture, operating models, or defensive capabilities.

Works effectively in an environment involving emerging technologies, ambiguity, experimentation, and rapidly changing technical capabilities.

Education

Minimum

B.S. degree or equivalent work experience in Computer Science, Cybersecurity, Information Systems, Engineering, or another relevant technical field.

Desired

M.S., M.B.A., or advanced technical degree in Computer Science, Cybersecurity, Engineering, Artificial Intelligence, Information Systems, or equivalent field.

License/Certification Desired

One or more relevant cybersecurity or technology certifications preferred, such as:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• Cloud or security architecture certifications
• Vendor-specific security or AI certifications
• Other equivalent cybersecurity, architecture, cloud, or emerging technology certifications
• Experience Minimum
• Minimum of 6 years of combined cybersecurity, information technology, architecture, engineering, or related technical experience.
• Demonstrated experience designing, evaluating, or implementing enterprise cybersecurity architectures and solutions.
• Experience working across multiple cybersecurity technology domains rather than exclusively within a single security discipline.
• Experience developing architecture patterns, technical strategies, integration approaches, or future-state technology designs.
• Demonstrated ability to evaluate complex technologies and translate technical capabilities into practical enterprise use cases.
• Experience working with multidisciplinary technical teams including architects, engineers, cybersecurity operations, developers, infrastructure teams, and technology vendors.
• Experience Desired
• Experience or demonstrated knowledge in the following areas is highly desirable: Generative and agentic AI: LLMs, AI agent architectures, and agent-to-system and machine-to-machine interactions
• AI security and governance: secure adoption of emerging AI capabilities
• Enterprise security architecture: reference architectures, design patterns, and defense-in-depth
• Zero Trust architecture: covering network, platform, and identity
• Security platform strategy: integration, technology rationalization and consolidation, capability modeling, and roadmapping
• Vulnerability and exposure management: attack surface management, asset discovery and inventory, and risk prioritization
• Security configuration and posture management: control assessment and configuration baselines
• Identity and access management: authentication, authorization, identity governance, and privileged access management
• Non-human identity management: machine, workload, and AI agent identities
• Security operations and detection: endpoint protection, EDR/XDR, SIEM/SOAR, telemetry and analytics, threat detection and response, and automated orchestration
• Knowledge, Skills, Abilities & Technical Competencies
• Strong knowledge of cybersecurity architecture, enterprise security technologies, and emerging trends, including how AI and automation are changing architectures and operating models.
• Ability to look past individual products and evaluate security as an integrated ecosystem, including the dependencies across identity, endpoints, infrastructure, applications, data, vulnerability management, security operations, and AI.