Cybersecurity Architect

Required Qualifications

• 7–10 years of experience in cybersecurity, with 3+ years in a security architecture or similar role.
• Deep working knowledge of NIST frameworks (CSF, SP 800-53, 800-171, 800-207 Zero Trust).
• Demonstrated experience designing and reviewing secure architectures for enterprise systems and cloud environments (e.g., AWS, Azure).
• Practical experience translating security architecture requirements into implemented controls, technical configurations, and operational procedures.
• Strong understanding of cybersecurity domains including identity and access management (IAM), network security, data protection, and application security.
• Strong understanding of LLMs, AI, and GenAI solutions including agentic AI and MCP hardening.
• Experience validating control effectiveness through testing, monitoring, evidence collection, or audit support.
• Experience working in a regulated environment and aligning technical controls to compliance frameworks. Excellent communication, collaboration, and documentation skills.
• Preferred
• Industry certifications such as CISSP, CISM, CISA, SABSA, or AWS Certified Security.
• Experience with Zero Trust Architecture and modern security models.
• Experience with security automation, control orchestration, policy-as-code, or continuous control monitoring.
• Experience implementing security controls in cloud-native, hybrid, and complex enterprise-scale environments.
• Familiarity with DevSecOps and infrastructure-as-code security.
• OneMain Holdings, Inc. is an Equal Employment Opportunity (EEO) employer. Qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship status, color, creed, culture, disability, ethnicity, gender, gender identity or expression, genetic information or history, marital status, military status, national origin, nationality, pregnancy, race, religion, sex, sexual orientation, socioeconomic status, transgender or on any other basis protected by law.