Principal Cybersecurity Engineer- Architecture

Position Overview

Principal Cybersecurity Engineer – Ideally based in Baltimore, MD (also considered in Irving, TX, Evansville, IN, and Fort Mill, SC). Responsible for designing, documenting, and reviewing security controls across on‑premises and cloud environments.

Collaborate across business and technology organizations to provide technical guidance, ensuring alignment with regulatory and organizational standards. Create conceptual and technical design artifacts focused on long‑term technology planning, risk reduction, and regulatory compliance. Evaluate enterprise IT designs for alignment with the enterprise security architecture and NIST 800.53 controls. Demonstrated mastery in multiple security and non‑security platforms, leading and advising on overall designs and strategies.

• Collaborate with and mentor enterprise architects in security best practices.
• Prepare architectural designs and strategies for key security investments.
• Provide subject‑matter expertise in evaluating enterprise security technology platforms and products.
• Maintain and update the enterprise security architecture and relevant cybersecurity standards.
• Collaborate with stakeholders to perform tool rationalization, capability mapping, and gap analysis.
• Gather requirements and develop comprehensive security solutions that meet business needs.
• Review and evaluate solution designs and deployments for proper security capability implementation.
• Ensure inclusion of security standards and alignment with technical and reference architectures.
• Manage, develop, and collaborate on threat models to identify and assess potential security risks.
• Ensure threat models are regularly updated and integrated into the solution design process.
• Develop and implement metrics to measure the effectiveness, efficiency, coverage, and maturity of the enterprise security architecture and its processes.

• Excellent verbal and written communication skills.
• Ability to organize and facilitate planning and demonstrations.
• Ability to track, manage, and ensure project tasks are completed in a timely manner.
• Ability to prioritize multiple simultaneous projects.
• Self‑motivated to discover security gaps or weaknesses in existing implementations.
• Deep working knowledge of NIST 800.53 controls, NIST CSF, and other industry security best practices.
• Demonstrated knowledge of secure build and configuration standards in a highly regulated environment.
• Formalized training in industry‑standard architectural frameworks and techniques (e.g., NIST, GDPR, CCPA, PCI/DSS).
• Experience designing or developing Cardholder Data Environments to ensure compliance with PCI/DSS standards.
• Certified Information Systems Security Professional certification (CISSP) or equivalent certification.

• Experience with Zero Trust Architecture and modern security models.
• Familiarity with Dev Sec Ops  and infrastructure‑as‑code security in Cloud Architecture (AWS, Azure).
• Certified Cloud Security Professional certification (CCSP).
• AWS Certified Security – Specialty (SCS-C02).
• Microsoft Cybersecurity Architect – SC‑100.

• Minimum of 8 years’ experience in the cybersecurity field.
• Minimum of 8 years’ experience as an engineer or enterprise IT solutions architect.

• Bachelor’s Degree in Computer Science or similar field of study.

• Limited to none.

One Main Financial (NYSE: OMF) is the leader in offering nonprime customers responsible access to credit and is dedicated to improving the financial well‑being of hardworking Americans. Since 1912, we’ve looked beyond credit scores to help people get the money they need today and reach their goals for tomorrow. Our growing suite of personal loans, credit cards and other products help people borrow better and work toward a brighter future.

Driven collaborators and innovators, our team thrives on transformative digital thinking, customer‑first energy and flexible work arrangements that grow lives, careers and our company. At every level, we’re committed to an inclusive culture, career development and impacting the communities where we live and work. Getting…