Enterprise Security Architect - Senior Security Engineer

Role overview

Architecture and governance

• Define and maintain the enterprise cybersecurity architecture roadmap and develop enterprise reference architectures, standards, patterns, and blueprints.
• Embed security-by-design in technology initiatives; lead architecture reviews and provide governance for major projects.
• Set target-state security architecture for hybrid cloud, digital banking, API ecosystems, AI platforms, and data environments.
• Develop cybersecurity strategy and investment roadmaps; partner with Technology, Risk, Compliance, Audit, and Business stakeholders to manage cyber risk.
• Establish architecture governance processes and review boards; develop policies, standards, controls, and procedures aligned with industry frameworks.

Cloud and identity security

• Design and secure Azure, AWS, and hybrid-cloud solutions; define cloud controls, secure landing zones, Zero Trust architectures, and secure network designs.
• Drive Infrastructure-as-Code security, DevSecOps, and cloud-native security services; review cloud designs and recommend remediation for risks and gaps.
• Define enterprise IAM strategy covering SSO, MFA, PAM, IGA, and CIAM; establish secure identity and access patterns across applications and platforms.

Application, data, and risk

• Establish secure application architecture patterns and secure SDLC practices; drive API, microservices, and application security initiatives.
• Define data protection strategies covering encryption, tokenization, key management, and DLP; assess security implications of emerging technologies.
• Align architectures with banking regulations, cybersecurity standards, and industry frameworks; support internal, external, and regulatory audits.
• Identify security and compliance gaps, develop remediation strategies, and partner with Risk and Compliance to ensure controls are designed and implemented appropriately.

Required skills and experience

• 10+ years in cybersecurity, security engineering, security architecture, or a related field; strong enterprise security architecture and governance experience.
• Extensive Azure, AWS, and hybrid-cloud security experience; strong knowledge of IAM, SSO, MFA, PAM, IGA, and CIAM.
• Experience designing Zero Trust architectures; strong understanding of API security, microservices, application security, and secure SDLC.
• Experience with data security, encryption, tokenization, key management, and DLP; knowledge of DevSecOps and Infrastructure-as-Code security.
• Experience with security policies, standards, controls, and enterprise architecture frameworks.