Security Solutions Architect

Key Responsibilities:
• Serve as a key delivery partner to the Security Enterprise Architect, applying domain strategy, target-state direction, standards, and roadmaps to initiatives and product solutions.
• Identify solution decisions with enterprise-wide implications and bring them to the Security Enterprise Architect and Architecture Review Board (ARB) for resolution.
• Lead solution architecture from discovery through design, delivery, implementation, and operational readiness for assigned initiatives.
• Translate business capabilities, functional requirements, constraints, and nonfunctional requirements into clear, implementable solution designs.
• Evaluate solution options and document recommendations, tradeoffs, dependencies, risks, assumptions, and Architecture Decision Records.
• Work directly with engineers and delivery teams to clarify designs, resolve implementation issues, and verify that the delivered solution remains aligned with the approved architecture.
• Coordinate cross-domain design decisions involving applications, integrations, data, infrastructure, cloud, security, operations, and third-party services.
Security Solution Design
• Develop security solution architectures across identity, privileged access, secrets and certificate management, application security, cloud and platform security, vulnerability management, adversarial testing, and software supply chain security.
• Perform threat modeling and security design reviews; define solution-level controls, trust boundaries, authentication and authorization flows, logging, monitoring, and evidence requirements.
• Design integrations among privileged access, secrets-management, identity, governance, application, database, cloud, and operational platforms.
Architecture Governance & Assurance
• Apply enterprise and domain standards, approved technologies, reference architectures, reusable patterns, and guardrails within solution designs.
• Prepare architecture materials for design reviews and the ARB; address feedback and maintain decision traceability through implementation.
• Identify deviations from standards, assess their solution impact, and document exceptions, compensating controls, and remediation commitments.
• Perform solution health checks at key delivery points to identify design drift, unresolved risks, operational gaps, or accumulating technical debt.
Cross-Domain Collaboration & Enablement
• Partner with security operations, application and platform engineering, infrastructure, data, cloud, privacy, risk, compliance, and delivery teams to develop feasible and supportable designs.
• Facilitate technical design working sessions and communicate solution decisions clearly to engineers, delivery leaders, business stakeholders, and architecture governance forums.
• Contribute reusable implementation guidance, lessons learned, and candidate patterns to the Enterprise Security Architect and architecture community.
• Mentor engineers and architects on secure design practices and the effective application of security standards.
Required Qualifications
Experience
• Bachelor’s degree in computer science, engineering, information systems, or a related discipline, or equivalent practical experience.
• Eight or more years of experience in solution architecture, engineering, or a related technology discipline, including experience leading the design of complex enterprise solutions.
• Demonstrated experience translating business and technical requirements into solution architectures spanning applications, integrations, data, infrastructure, security, and operations.
• Proven experience producing solution architecture designs, Architecture Decision Records, integration designs, nonfunctional requirements, and implementation guidance.
• Experience partnering with enterprise architects, product leaders, engineers, security, risk, and delivery teams from concept through implementation and operational readiness.
Technical Depth
• Deep solution architecture experience with privileged access-management platforms, with CyberArk strongly preferred, including credential vaulting, rotation, session controls, and just-in-time access.
• Experience designing secrets-management solutions using platforms such as CyberArk Conjur or HashiCorp Vault.
• Working knowledge of identity and access-management platforms such as Okta, PingOne, and SailPoint, including role-based access, lifecycle processes, certification, and least privilege.
• Security solution-design experience across Windows and Linux, major database platforms, cloud environments, APIs, applications, and the software development lifecycle.
• Working knowledge of threat modeling, vulnerability remediation, adversarial testing, software supply chain security, and recognized frameworks such as NIST, CIS, and ISO/IEC 27001.
Preferred Qualifications
• Advanced CyberArk experience, including PSM or CPM configuration, connector development, and enterprise integrations.
• Cloud security solution architecture experience, with AWS preferred, including identity, key and secrets management, network security, and workload protection.
• Experience designing security controls for AI and large language model solutions.
• Relevant certifications such as CISSP, SABSA, AWS Certified Security – Specialty, or CyberArk Defender or Sentry.

Work arrangement
Yes