Senior Cyber Security Engineer​/Architect - Remote

Position Summary

The Cybersecurity Engineer/Architect serves as a senior technical leader and subject matter expert working closely with IT teams, business stakeholders, and leadership to assess security risks, develop security architectures aligned with business objectives, and establish security standards and frameworks across the enterprise. This role evaluates existing security controls, identifies gaps and vulnerabilities, and designs solutions that address current and future security challenges in enterprise applications, networks and infrastructure.

This hands‑on role requires a deep understanding of security principles, enterprise architecture, and emerging threats to develop and implement comprehensive solutions that protect UC data, systems, and networks from cyber threats while enabling business operations. Applies secure‑by‑design principles to enterprise platforms and environments (including AWS, People Soft, pension systems, and financial systems), integration technologies such as APIs and middleware, and emerging technologies including artificial intelligence.

Directs the selection of methods, techniques and evaluation criteria to obtain results.

Draws on strong communication, collaboration and analytical skills to resolve Office of the President, institution‑wide and / or multi‑institutional security issues, up to and including the most complex, with little or no precedent where analysis of situations and data requires an in-depth evaluation of various factors. Experience evaluating and securing artificial intelligence and robotic process automation use cases and technologies.

• 🏗️ Security architecture and engineering – implements Office of the President, institution‑wide and / or multi‑institutional security controls, up to and including the most complex, that are broad in scope to prevent unauthorized access or changes to mission‑critical information and to prevent jeopardizing mission‑critical hardware, software and network infrastructure. Designs and implements secure architectures for enterprise applications and AI‑driven systems. Develops and maintains security standards, patterns, and reference architectures.
  
  Collaborates with development teams to embed security practices into the software development lifecycle (SDLC), including Dev Sec Ops . Leads threat modeling, risk assessments, and security reviews for new and existing systems.
• 🤖 AI and advanced technologies – conducts security risk assessments and produces written reports and secure design and configuration recommendations of AI in current products and products under consideration. Evaluates and secures AI/ML models and platforms, ensuring ethical and secure use of data. Collaborates with data science and engineering teams to embed security into AI workflows. Makes recommendations for AI risk reduction factoring in UCOP system architecture, data sensitivity and toolsets.
  
  Designs and implements AI security strategies to protect our systems from potential threats.
• 🔌 Enterprise systems, API, and integration security – architects and secures integrations between People Soft HCM, pension systems, financial platforms, and third‑party services. Ensures compliance with regulatory requirements (e.g., HIPAA, PCI‑DSS, SOC 2) across enterprise systems. Designs secure API gateways and enforces authentication, authorization, and data protection policies. Monitors and responds to security events related to system integrations and data flows.
• 🤝 Governance and collaboration – partners with IT, Dev Ops, and business units to align security strategies with organizational goals. Leads incident response and forensic investigations related to enterprise systems. Partners with requesting business unit, legal and privacy stakeholders. Supports stakeholders in ensuring that recommended controls are implemented.
• 🔧 Additional duties – as required.

• Min 8 years of demonstrated information security architecture and engineering experience in large, complex organizations.
• Min 2 years of proven experience securing enterprise platforms including human capital management systems, pension administration systems,…