Senior Security Architect
Designs and maintains enterprise security solutions, leads incident response, and ensures compliance with frameworks like PCI-DSS and ISO 27001 in a cloud-heavy environment.
- Compensation
- $112K–$130K / yr
- Location
- Remote - United States
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Full time
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor’s degree in Computer Science, Information Security, Information Technology, Engineering, Mathematics, or a related field, or equivalent relevant experience.
- 8+ years of cybersecurity experience, including significant responsibility for security architecture and the design and review of secure enterprise solutions.
- Designed and reviewed security architectures for complex enterprise environments spanning cloud security, identity and access management, Zero Trust, data protection, network security, threat modeling
- Designed cloud security architectures in Microsoft Azure and/or AWS, including multi-cloud and hybrid-cloud environments.
- Designed or governed security controls for cloud identity and privileged access, CSPM/CWPP, network segmentation, containers and Kubernetes, serverless services, encryption, key and secrets management
- Conducted security architecture or risk assessments for AI/ML and generative AI solutions, including LLM applications, RAG, AI agents, model APIs, gateways, AI data flows, and third-party AI services.
- Translated business, technology, risk, privacy, and compliance requirements into security architectures, standards, reference patterns, guardrails, and actionable technical requirements.
- Led or contributed to threat modeling and risk analysis and incorporated secure SDLC, DevSecOps, defense in depth, least privilege, and security architecture governance into solution designs.
- Applied security frameworks and controls to solution designs, including NIST CSF, NIST SP 800-53, NIST SP 800-160, NIST SP 800-207, NIST AI RMF, CSA CCM, CIS Controls and Benchmarks, ISO/IEC 27001, an
Nice to have
- Experience implementing cloud landing-zone security, policy-as-code, DevSecOps controls, and architecture review processes.
- Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Purview, Entra ID, Azure Policy, AWS Organizations, Security Hub, GuardDuty, Config, CloudTrail, or comparable capabilities.
- Knowledge of AI-specific threats and controls, including prompt injection, sensitive-data disclosure, excessive agency, insecure tool use, model and data poisoning, adversarial testing, model theft, o
- Familiarity with ISO/IEC 42001, OWASP guidance for LLM and generative AI applications, and AI governance or model risk management practices.
- Relevant certifications such as CISSP, CCSP, SABSA, AWS Security Specialty, Microsoft Cybersecurity Architect Expert, Azure Security Engineer Associate, or comparable architecture and cloud security c
Full description
At Ensono, our Purpose is to be a relentless ally, disrupting the status quo and unleashing our clients to Do Great Things! We enable our clients to achieve key business outcomes that reshape how our world runs. As an expert technology adviser and managed service provider with cross-platform certifications, Ensono empowers our clients to keep up with continuous change and embrace innovation.
We can Do Great Things because we have great Associates. The Ensono Core Values unify our diverse talents and are woven into how we do business. These five traits are the key to achieving our purpose. Honesty, Reliability, Collaboration, Curiosity, PassionAbout the role and what you'll be doing: The Senior Security Architect is a senior technical leader responsible for defining and advancing secure architecture across Ensono’s enterprise technology environment, with primary emphasis on cloud platforms and artificial intelligence. The role translates business, technology, risk, privacy, and compliance requirements into practical security principles, reference architectures, design patterns, standards, and guardrails. This architect partners with Enterprise Architecture, Cloud Engineering, Application Development, Infrastructure, Security Operations, Risk and Compliance, Privacy, and business stakeholders to ensure solutions are secure by design, resilient, scalable, and support business growth.
The architect provides hands-on design leadership across Azure, AWS, GCP, SaaS, hybrid infrastructure, AI-enabled applications, generative AI platforms, AI agents, model and data pipelines, and third-party integrations. The role also supports broader security architecture domains, including identity, network, application security, data protection, Zero Trust, logging and monitoring, vulnerability management, resilience, and third-party risk.
What You Will Do:
- Own and evolve enterprise cloud and AI security architecture principles, roadmaps, reference architectures, reusable design patterns, and technical standards.
- Lead security architecture reviews for new solutions, material changes, cloud deployments, AI use cases, AI agents, SaaS platforms, applications, APIs, and third-party integrations.
- Translate business and technical requirements into risk-informed security requirements and designs that balance protection, usability, scalability, cost, and delivery speed.
- Design and review secure multi-cloud and hybrid architectures, including cloud identity, privileged access, network segmentation, private connectivity, workload protection, containers, serverless services, data protection, key and secrets management, logging, monitoring, resilience, and recovery.
- Define cloud governance guardrails using policy-as-code, infrastructure-as-code security, secure baselines, configuration standards, posture management, workload protection, and continuous compliance capabilities.