Enterprise Principal Security Architect

Enterprise Security Architect

This role requires associates to be in‑office 1–2 days per week while providing flexibility to support productivity and work‑life balance. The position may consider alternate locations if candidates reside within a commuting distance of an office.

New York, Illinois, Massachusetts.

• Produce executive‑ready, audit‑defensible architecture documentation (standards, reference architectures, patterns, roadmaps, and decision records) that aligns with regulatory, audit, and enterprise architecture governance requirements.
• Own and evolve the enterprise security architecture vision for AI‑enabled, cloud‑first, Zero Trust‑aligned platforms, including principles, standards, reference architectures, and reusable patterns.
• Define and drive Zero Trust architecture patterns aligned to NIST Zero Trust Architecture (SP 800‑207) and CISA Zero Trust Maturity Model (identity, device, network/environment, application/workload, data, and visibility/analytics).
• Maintain, evolve, and expand enterprise AI security architecture and guardrails aligned to NIST AI RMF 1.0 and associated GenAI risk‑management guidance.
• Define and maintain secure‑by‑default cloud reference architectures across AWS, Azure, and GCP.
• Partner with Enterprise Architecture and OCISO stakeholders to operationalize governance through repeatable assessment methods, architecture reviews, and enforcement mechanisms, producing durable artifacts.
• Chair and operate the Security Architecture Review Board (SARB), defining intake, review criteria, decision records, and exception processes; ensure timely decisions and appropriate executive escalation.
• Develop and deliver concise, executive‑ready briefings that translate security architecture tradeoffs into business impact, options, and recommendations for enterprise leadership.
• Recommend new technologies for domains based on business value drivers and return on investment; drive new technologies toward implementation and exploitation.
• Establish overall systems architecture vision and ensure specific components are appropriately designed and leveraged; contribute to the holistic vision of Enterprise Architecture.
• Takes responsibility for the health of overall architecture for the market segment.
• Maintains components of architecture strategy and vision.
• Maintains enterprise‑level blueprints.
• Coordinates all enterprise‑level conceptual architecture components (data architecture, application architecture, technical architecture).
• Monitors usage of architectural components and assumes responsibility for reuse.
• Drives system migration based on roadmaps defined in enterprise and domain blueprints; leads architecture strategy and vision for enterprise.
• Ensures blueprints are refreshed as needs emerge or in accordance with plan of record changes.
• Provides continuous consulting services and direction in projects and architectures.
• Champions and is responsible for enterprise‑level technology and architectural standards, guidelines, principles, frameworks, and reference models.
• Defines systems, technical, and application architectures for new strategic initiatives; develops and maintains an architectural blueprint and evolutionary roadmap that defines and communicates the strategic direction for these architectures in support of business and technical strategies; explains how the roadmap maintains and delivers cost effectiveness, business value, and competitiveness.

Requires a BA/BS degree in Information Technology, Computer Science or related field and a minimum of 8 years experience in architecture/design in relevant technology disciplines; or any combination that provides an equivalent background.

• Demonstrated experience securing AI/ML and GenAI systems in production, including threat modeling and control design aligned to NIST AI RMF.
• Deep expertise implementing Zero Trust designs aligned to NIST SP 800‑207 and mapped to maturity goals such as CISA ZTMM.
• Strong experience in at least one hyperscaler (AWS/Azure/GCP) and cloud‑native platforms (Kubernetes, containers, service mesh, CI/CD).
• 2+ years architecting and…