Information Security Architect

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full-Time FORT SMITH, AR, US

4 days ago Requisition

Join our Growing Team and see why Summit Utilities, Inc was named as one of the Fastest Growing Denver Area Private Companies 2019 and 2020;
Best Places to Work in Maine 2019, 2020, 2021, 2022 and 2023; and Best Places to Work in Arkansas 2020 and 2023, Oklahoma 2022 and 2023 and Missouri 2023. Summit was also recently named one of Forbes 2023 America’s Best Small Employers.

Summit is a growing natural gas utility company providing safe, reliable and clean burning natural gas service to homes and businesses in Arkansas, Colorado, Maine, Missouri and Oklahoma. Being part of the Summit team means embracing excellence, diversity and innovation, committing to safety each and every day, and doing all that we can to serve each other, our customers and the communities where we live.

We aim to bring warmth and energy to everything we do.

We have an exciting opportunity for a hybrid Information Security Architect in Fort Smith, AR.

The Information Security Architect is a senior technical leader responsible for defining and governing the enterprise security architecture at Summit Utilities. This role designs security frameworks, reference architectures, and technical standards that protect Summit’s digital assets, operational technology, and data across on‑premises and cloud environments.

The Information Security Architect translates business and regulatory requirements into security architecture patterns, leads architecture reviews, conducts threat modeling, and ensures that security is designed into every system, application, and integration. This role partners closely with IT, engineering, compliance, and business leadership to balance risk mitigation with operational agility.

This position requires deep technical breadth across multiple security domains, a strategic mindset, strong communication skills, and the ability to influence across all levels of the organization.

• Lead architecture reviews for all major IT and engineering projects, ensuring security requirements are embedded from design through deployment.
• Conduct threat modeling and architecture risk assessments to identify design-level vulnerabilities and recommend mitigations.
• Develop and enforce security standards, guidelines, and design patterns for identity and access management (IAM), network segmentation, data protection, encryption, and API security.
• Own the security technology roadmap, evaluating emerging tools, platforms, and frameworks to strengthen Summit’s security posture.
• Partner with the Director of Information Security and GRC team to map technical controls to compliance frameworks (NIST CSF, C2M2, ISO 27001, SOC 2, PCI DSS, HIPAA).
• Advise on secure cloud architecture, including landing zone design, cloud security posture management (CSPM), and infrastructure-as-code (IaC) security guardrails.
• Design and govern Zero Trust architecture strategies, including micro‑segmentation, least‑privilege access, and continuous verification.
• Collaborate with enterprise architects, application teams, and infrastructure engineers to integrate security into CI/CD pipelines and Dev Sec Ops  practices.
• Mentor security engineers and analysts on architecture principles, secure design, and technical standards.
• Represent the security function in enterprise architecture governance boards, change advisory boards, and vendor evaluations.
• Stay current on threat landscape, emerging technologies (AI/ML security, quantum‑safe cryptography), and evolving regulatory requirements to inform architecture decisions.

• Bachelor’s degree in computer science, Information Security, Engineering, or a related field is required. Master’s degree in Cybersecurity, Information Systems, or related discipline is strongly preferred.
• 10+ years of progressive experience in information security, with at least 5 years focused on security architecture, engineering, or infrastructure…