Senior Principal Security Architect

As part of Met Life’s Global Security team, you’ll work alongside world-class experts to protect Met Life, our customers and our colleagues. The team is responsible for managing cybersecurity, IT risks and vulnerabilities, physical security, and more. In this fast-paced, mission-driven environment, you’ll join outstanding teammates to expand your skills, collaborate across the organization and implement innovative approaches to safeguard Met Life when it matters most.

Ready to make an impact? Join us if you want to embrace the rapidly evolving environment and use transformative technology to integrate and build security into the foundation of key initiatives across Met Life.

The Senior Principal Security Architect is the senior technical leader for Security Architecture within Global Security and the primary escalation point for all security architecture matters. This person leads risk-based Security Architecture Reviews (SAR) for enterprise technology and platform initiatives, makes the call on complex or contested design decisions, and mentors a team of security architects across the US and MGCC.

They evaluate proposed architectures, identify material risks, recommend proportionate controls, and steer teams toward target-state architecture, reference patterns and roadmaps. They are also expected to raise the standard of the practice as a whole: setting review standards, building reusable reference architectures, and shaping enterprise security transformation through current-state assessment, maturity modeling and roadmap development.

• Serve as the primary escalation point for all security architecture matters. Resolve contested findings, high-risk or novel designs, and disagreements between delivery teams and reviewers; make the call where appropriate and escalate to Global Security leadership or risk-acceptance forums when required.
• Own the quality and consistency of SAR outcomes. Define review standards, risk-rating criteria and documentation templates, and provide technical review and sign-off on high-risk assessments produced by the team.
• Mentor and develop security architects across the US and MGCC through paired reviews, threat-modeling sessions, design critiques and regular technical feedback, raising the team's capability to handle complex reviews independently.
• Build team depth. Lead knowledge-sharing sessions, curate the security pattern library, support onboarding of new architects, and act as technical delegate for the Security Architecture leader.
• Represent Security Architecture at the Architecture Review Board, in technology governance and risk forums, and with senior leadership.
• Partner with the Securing Emerging Tech team on AI and emerging-technology reviews so that patterns and risk positions remain consistent across both teams.

• Lead and oversee Security Architecture Review (SAR) assessments for enterprise technology initiatives, including applications, platforms, cloud services, infrastructure, AI solutions, integrations and major transformation programs, personally owning the highest-risk and most complex engagements and providing quality oversight across the team's portfolio.
• Perform threat modeling and risk assessments to identify security design gaps, control weaknesses, trust-boundary concerns, attack paths, data exposure risks and operational impacts.
• Evaluate security controls, tools and technologies against architecture requirements, enterprise standards, risk posture and control-effectiveness objectives.
• Design and recommend secure architecture patterns across the five security pillars (IAM, network, devices, applications and data) and across…