Senior Infrastructure Security Architect

Overview

Edward Jones is seeking a Senior Security Architect to lead strategic alignment of infrastructure security tools, processes, and capabilities across all security domains. This role is pivotal in ensuring that security architecture supports the firm’s broader technology and business strategy, including cloud transformation, operational resilience, enterprise encryption standards, and risk reduction.

• Own and maintain templates for security artifacts (e.g., Patterns, Baseline Control Documents, Procedures, Architecture Decision Records, and Standards) and manage a repository of completed, approved versions.
• Provide expert infrastructure security guidance and oversight during security reviews and the development of security artifacts.
• Define and govern infrastructure security standards, including cryptographic controls for data in transit and at rest across hybrid environments.
• Provide architectural guidance on encryption, key management, and certificate usage as part of security reviews and standards development.
• Lead strategic alignment of infrastructure security capabilities and processes with enterprise architecture and other technical domains.
• Serve as a senior technical leader across the Information Security Division, influencing infrastructure security strategy and execution.
• Collaborate with cross‑functional teams to ensure infrastructure security solutions are scalable, resilient, and aligned with cloud‑native and hybrid environments.
• Monitor industry trends and emerging threats to inform infrastructure security strategy and tooling.
• Engage with vendors and external partners to evaluate solutions, negotiate contracts, and represent the firm in technical forums.
• Drive maturity of infrastructure security practices across cloud platforms (Azure, OCI, AWS, GCP) and on‑premises environments.
• Live within a commutable distance from the Tempe, AZ or St. Louis, MO home office locations and be expected to work in the office four days per week.

• Bachelor’s degree in Computer Science, Engineering, or related field; or equivalent work experience.
• 10+ years of experience in infrastructure security architecture within a complex, matrixed organization.
• Deep understanding of infrastructure security domains including network security, endpoint protection, identity and access management, servers and containerization, applications, and cloud security, including encryption, key management, and certificate-based controls.
• Experience designing and implementing secure infrastructure architectures across hybrid cloud environments.
• Experience defining or applying enterprise encryption standards, including data‑at‑rest, data‑in‑transit, and key lifecycle management requirements.
• Extensive experience in securing endpoint devices (e.g., laptops, mobile devices, servers) through technologies such as EDR/XDR, antivirus, device hardening, and policy enforcement.
• Familiarity with security frameworks and standards (e.g., NIST, CIS, ISO 27001).
• Strong knowledge of security tooling such as SIEM, vulnerability management, configuration management, and cloud‑native security services.
• Proven ability to lead cross‑functional initiatives and influence technical direction at the enterprise level.
• Excellent communication and interpersonal skills; able to build trust and credibility across technical and business teams.
• Ability to assess and integrate proposed standards and technologies across interdependent systems.
• Demonstrated experience in risk management and incident response within infrastructure environments.

• Relevant security certifications such as CISSP, CISM, CCSP, advanced network vendor certifications, ISC2 certifications, or SANS certifications.
• Experience supporting advanced encryption solutions, certificate management, and post‑quantum readiness.
• Experience securing AI/ML systems, including model governance, data pipeline protection, and secure deployment strategies.
• Technology background in the financial sector.
• Understanding of various regulatory requirements and laws, including but not limited to NYDFS Cybersecurity Regulations and FINRA Regulations.