Senior Information Security Architect II

Role Overview

Security architect with a specialization in rapid and durable Dev Sec Ops  capabilities. Leads the security posture of the organization’s enterprise architecture, designing resilient, compliant, and scalable solutions that protect critical assets and enable secure application development across teams.

• Contribute to the Enterprise Architecture foundation and framework.
• Partner with Enterprise Architects to articulate and evolve architectural principles, reusable patterns, and technology standards that promote secure design and interoperability.
• Collaborate with Solutions Architects and application leaders to develop and implement durable security controls anchored in OWASP ASVS.
• Evangelize security best practices across the organization, fostering a security‑first culture.
• Conduct risk assessments and threat modeling to identify vulnerabilities and implement mitigation strategies, including encryption and access‑management solutions.
• Partner with IT, Dev Ops, and business units to integrate security into system designs.
• Stay ahead of emerging security threats and trends, advising on innovative solutions such as zero‑trust architecture and secure APIs.

• Thorough understanding of security frameworks and architecture (NIST Cybersecurity Framework, MITRE ATT&CK, Zero Trust, PCI) in a regulated financial services environment.
• Track record of translating security frameworks into repeatable patterns, templates, and copybooks for Azure Dev Ops pipelines and AWS cloud configurations.
• Background in secure system design, API‑based identity, conditional access, fine‑grained authorization, ZKP, PKI, data encryption, and network security.
• Strong knowledge of cloud security principles and automating Dev Sec Ops  practices in Azure Dev Ops and AWS.
• Ability to evangelize security best practices and influence cross‑functional teams.
• Experience delivering software projects in fast‑paced, highly regulated environments (e.g., FDIC).
• Excellent leadership and communication skills to articulate complex security concepts to diverse audiences.
• Strong analytical and problem‑solving skills to assess and mitigate risks.

• Master’s degree in computer science, engineering or related technical field.
• Certifications:
  
  CISSP, CISM, CCSP, AWS Certified Security – Specialty.
• Minimum 10 years of software architecture and design experience.
• 8+ years of cybersecurity experience with at least 5 years in enterprise architecture roles.
• Familiarity with enterprise architecture frameworks (TOGAF, Zachman).

• Competitive base salaries and bonus incentives.
• Generous paid time off, floating holidays, and 12 federal holidays.
• 401(k) with employer match.
• Comprehensive medical, dental, vision, hospital indemnity, critical illness, pet insurance, and more.
• Employer‑paid short‑term and long‑term disability and basic life insurance.
• Flexible hybrid working arrangements.
• Paid parental leave and adoption reimbursement programs.
• Access to on‑site fitness centers (in Delaware) and gym subsidy for other locations.
• Confidential counseling support (EAP), health advocacy services, and wellness program with financial incentives.
• Tuition reimbursement and family scholarship programs.
• Career development and training opportunities.

The Americans with Disabilities Act of 1990 (ADA) prohibits discrimination by employers, in compensation and employment opportunities, against qualified individuals with disabilities who, with or without reasonable accommodation, can perform the “essential functions” of a job.

Sallie Mae is proud to be an equal opportunity (EEO) employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, sexual orientation, national origin, age, genetic information, gender identity, disability, veteran status or any other characteristic protected by federal, state or local law.

Reasonable accommodations are available for applicants with disabilities in all phases of the application and employment process. To request an accommodation please call  and choose option 9. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.