Cyber Security Architect Lead

Job Overview

As a member of the Cybersecurity Architecture team, you will design and oversee secure enterprise architectures that protect ERCOT’s security posture from evolving threats.

• Assess risks, define security requirements and ensure solutions align with business objectives and regulatory requirements.
• Lead and mentor senior-level architects, provide escalation & support.
• Develop and maintain ERCOT’s Cyber Security Architecture Strategy.
• Define SDLC, AI & cloud adoption of security controls for the enterprise.
• Develop and maintain security standards, patterns, and reference architectures.
• Lead the organization’s information security practice as the principal subject matter expert, setting direction and standards for security best practices.
• Partner with project management office and stakeholders to secure enterprise‑wide or multi‑year complex business solutions.
• Process supply chain assessments, software requests, service accounts, purchase requisitions, and firewall changes.
• Collaborate with business units and cross‑functional teams to embed security controls into infrastructure, applications, AI and cloud environments.
• Demonstrate expertise in security principles, technologies, and design of solutions in alignment with security frameworks, best practices, and regulatory requirements.
• Ensure secure configuration baselines for on‑prem, SaaS and cloud solutions.
• Define secure application architectures (microservices, APIs, web apps), identify design‑level gaps or vulnerabilities and define mitigating controls.
• Partner and collaborate with project managers and stakeholders to embed least privilege, secure‑by‑design and zero‑trust principles for projects & operations initiatives.
• Support AI & cloud adoption of applications as they are transformed and modernized.
• Other duties as required.

• Minimum 8 years job‑related work experience in excess of degree requirements.
• Strong knowledge of enterprise security architecture frameworks (SABSA, TOGAF, STRIDE, NIST CSF).
• Experience developing and owning enterprise‑wide security strategy.
• Advanced cloud security experience across multiple platforms and hybrid environments.
• Ability to evaluate and secure emerging technologies and incorporate them into long‑term strategy.
• Strong understanding of business risk, governance, and regulatory compliance (NERC CIP).
• Experience with vendor management and technology road mapping.

• CISSP (Required)
• CISM (Preferred)
• GIAC certification, Security+, CEH or similar (Preferred)

• Bachelor’s Degree in Computer Science, MIS or related field (Required)
• Master’s Degree in Computer Science, MIS or related field (Preferred) or a combination of education and experience that provides equivalent knowledge.

Work location – Taylor, TX; employees required to be on-site at least 2 days per week. Remote work from Texas residence is allowed. Expected salary range: $145,000 – $200,000.

ERCOT is firmly committed to equal employment for all qualified persons without regard to race, sex, medical condition, religion, age, creed, national origin, citizenship status, marital status, sexual orientation, physical or mental disability, ancestry, veteran status, genetic information or any other protected category under federal, state or local law.