Security Domain Architect

Job Description

s a security Domain Architect, you will be a key member of the Enterprise Architecture team, responsible for advancing the enterprise’s information security strategy. This role focuses on securing enterprise applications, APIs, data platforms, cloud services, and emerging AI technologies advancing the enterprise’s information security strategy across modern digital and AI-driven platforms. This position requires a strong engineering background and hands-on experience in designing, building, or securing modern technology solutions. You will define and drive security architecture standards, reference architectures, and design patterns that enable secure, scalable adoption of technology while aligning with enterprise architecture principles, regulatory requirements, and business objectives. You will collaborate closely with business, engineering, information security, and technology teams, providing architecture leadership across applications, data, and AI domains, and representing security in governance forums such as the Architecture Standards Board (ASB) and Technology Review Board (TRB). Responsibilities include but are not limited to: -Act as an advocate & evangelist of architecture principles, standards, and patterns across the organization, helping the business and delivery leaders understand the business value realized through standardization, reuse, and modularity inherent in a robust enterprise architecture. -Become a trusted strategic partner for your delivery organization's leader and senior engineers. Identify, propose, & lead opportunities to advance, & make more effective, capabilities for the data and application security domains through use of new technology, reuse of existing products, services or platforms, while helping incorporate those opportunities into application and platform roadmaps. Facilitate proof of concepts and pilots on new/emerging technology particularly in AI and data security to gauge value and assess implementation complexity. -Utilize a broad understanding of Application, Infrastructure, or Security capabilities and/or solutions to represent to Architecture peers in discussions with other IT and Business leaders. Develop a point of view based on problems or opportunities in the domain to clearly articulate options and recommendations. -Lead Information Security architecture with primary focus on application security, data security, and AI security across enterprise platforms. -Drive adoption and implementation of security controls, architecture patterns, and governance practices across modern applications, data, cloud, and AI solutions. -Provide guidance on threat modeling, risk assessment, and architecture trade-offs. -Partner with engineering teams to embed security into DevSecOps, CI/CD, and cloud platforms. Track emerging threats, vulnerabilities, and technology trends to ensure security strategies remain current and effective. -Define and implement security controls and architecture guidance for AI platforms, AI agents, and generative AI solutions, including governance and risk management practices. -Act as a security SME within EA domains, influencing architecture decisions and ensuring secure design principles and best practices are integrated early in the solution lifecycle.

Skills and Requirements

-10+ years of experience in Information Security, combining architecture leadership with at least 5 years of hands-on engineering experience. -Bachelor's degree in related field required. -Intermediate knowledge of applicable regulatory and legal compliance obligations, rules and regulations, industry standards and practices. -Advanced experience working in an architecture function with knowledge & experience developing reference architectures & patterns and supporting governance functions related to: Application Development, Cloud Compute, Storage and Networking technologies. IaaS, PaaS, SaaS, Serverless, Containers, Automation, Security. -Advanced understanding of product management, agile principles and development methodologies and capability of supporting agile and DevOps teams by providing advice and guidance on opportunities, impact and risks, taking account of technical and architectural debt. -Strong engineering background with hands-on experience designing, building, or securing enterprise applications, APIs, data platforms, or cloud services. -Strong experience in data security and information protection, including DLP and data governance. -Experience in DevSecOps, CI/CD security, Infrastructure as Code (IaC), and software supply chain security. -Strong experience with data governance, data classification, data protection, and DLP technologies, including Microsoft Purview and Microsoft 365 security capabilities. -Strong experience with AI security, including securing AI platforms, generative AI solutions, and implementing AI governance and risk management controls. -Strong communication and stakeholder management skills, with the ability to influence both technical and business audiences. -Security architect-level Certifications (e.g., CISSP, CCSP, Microsoft Cybersecurity Architect Expert).

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].