Cyber Security Architect

Job description

Job Responsibilities Serves as an expert contributor in the development and implementation of cybersecurity architectures, patterns, strategies, and solutions supporting emerging technology and AI-enabled cybersecurity capabilities. Evaluates opportunities to leverage artificial intelligence, agentic AI, automation, orchestration, analytics, and other emerging technologies to enhance cybersecurity capabilities and operating models. Develops current-state, transitional, and future-state cybersecurity architectures that integrate capabilities across multiple cybersecurity domains and technology platforms. Assesses opportunities to improve interoperability and automation across areas including: Vulnerability and Exposure Management Configuration and Security Posture Management Identity and Access Management Endpoint Protection and Detection Security Operations Asset and Technology Inventory Threat Detection and Response Security Analytics and Automation Explores how AI agents and autonomous or semi-autonomous capabilities can securely interact with cybersecurity platforms, enterprise systems, data, and workflows while maintaining appropriate security controls, governance, and human oversight. Identifies opportunities to reduce fragmented security processes through technology integration, consolidation, automation, and intelligent orchestration. Evaluates emerging cybersecurity technologies, platforms, tools, and architectural approaches for potential applicability within the enterprise. Develops reference architectures, architecture patterns, capability models, technical recommendations, and roadmaps supporting future cybersecurity capabilities. Partners with cybersecurity domain architects, engineering teams, security operations, technology teams, and other stakeholders to evaluate cross-domain architecture requirements and integration opportunities. Assesses architectural considerations associated with machine identities, AI agents, privileged access, authentication, authorization, data access, trust boundaries, and automated actions. Evaluates security implications associated with integrating AI capabilities into cybersecurity technologies and operational workflows. Helps establish architectural principles and guardrails for the responsible and secure adoption of emerging AI-enabled cybersecurity capabilities. Identifies dependencies, architectural gaps, integration challenges, technical risks, and opportunities associated with future-state cybersecurity architectures. Develops technical assessments, architecture documentation, recommendations, and executive-level presentations communicating complex concepts to both technical and business stakeholders. Proactively monitors technology developments and industry trends that may materially change cybersecurity architecture, operating models, or defensive capabilities. Works effectively in an environment involving emerging technologies, ambiguity, experimentation, and rapidly changing technical capabilities. Education Minimum B.S. degree or equivalent work experience in Computer Science, Cybersecurity, Information Systems, Engineering, or another relevant technical field. Desired M.S., M.B.A., or advanced technical degree in Computer Science, Cybersecurity, Engineering, Artificial Intelligence, Information Systems, or equivalent field. License/Certification Desired One or more relevant cybersecurity or technology certifications preferred, such as: Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Certified in Risk and Information Systems Control (CRISC) Cloud or security architecture certifications Vendor-specific security or AI certifications Other equivalent cybersecurity, architecture, cloud, or emerging technology certifications Experience Minimum Minimum of 6 years of combined cybersecurity, information technology, architecture, engineering, or related technical experience. Demonstrated experience designing, evaluating, or implementing enterprise cybersecurity architectures and solutions. Experience working across multiple cybersecurity technology domains rather than exclusively within a single security discipline. Experience developing architecture patterns, technical strategies, integration approaches, or future-state technology designs. Demonstrated ability to evaluate complex technologies and translate technical capabilities into practical enterprise use cases. Experience working with multidisciplinary technical teams including architects, engineers, cybersecurity operations, developers, infrastructure teams, and technology vendors. Experience Desired Experience or demonstrated knowledge in the following areas is highly desirable: Generative and agentic AI: LLMs, AI agent architectures, and agent-to-system and machine-to-machine interactions AI security and governance: secure adoption of emerging AI capabilities Enterprise security architecture: reference architectures, design patterns, and defense-in-depth Zero Trust architecture: covering network, platform, and identity Security platform strategy: integration, technology rationalization and consolidation, capability modeling, and roadmapping Vulnerability and exposure management: attack surface management, asset discovery and inventory, and risk prioritization Security configuration and posture management: control assessment and configuration baselines Identity and access management: authentication, authorization, identity governance, and privileged access management Non-human identity management: machine, workload, and AI agent identities Security operations and detection: endpoint protection, EDR/XDR, SIEM/SOAR, telemetry and analytics, threat detection and response, and automated orchestration Knowledge, Skills, Abilities & Technical Competencies Strong knowledge of cybersecurity architecture, enterprise security technologies, and emerging trends, including how AI and automation are changing architectures and operating models. Ability to look past individual products and evaluate security as an integrated ecosystem, including the dependencies across identity, endpoints, infrastructure, applications, data, vulnerability management, security operations, and AI. Strong analytical and problem-solving skills, with the ability to work through complex and ambiguous technical problems. Ability to research and assess emerging technologies on your own, including where no established enterprise patterns exist yet. Ability to turn emerging concepts into practical architecture patterns, use cases, recommendations, and implementation guidance. Sound judgment in telling apart promising capabilities from those not yet mature, secure, or ready for enterprise use. Strong written and verbal communication, including explaining complex security and AI concepts to both technical teams and executives. Ability to influence technical direction and collaborate across organizational boundaries. Ability to work well in a fast-moving, collaborative environment where requirements change. Strong technical curiosity and a willingness to challenge traditional approaches while keeping to sound security, risk, and governance principles. Salary Range $153,520.00 - $242,400.00 USD (Salary) Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit. Further, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors. Astreya offers comprehensive b enefits to all Regular, Full-Time Employees, including: Medical provided through UHC (PPO, HSA, Surest options) / Medical provided through Kaiser (HMO option only) for California employees only Dental provided through UHC Nationwide Vision provided by UHC Flexible Spending Account for Health & Dependent Care Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific) Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera Corporate Wellness Program provided by Goomi Group Employee Assistance Program Wellness Days 401k Plan Basic and Supplemental Life Insurance Short Term & Long Term Disability Critical Illness, Critical Hospital, and Voluntary Accident Insurance Tuition Reimbursement (available 6 months after start date, capped) Paid Time Off (accrued and prorated, maximum of 120 hours annually) Paid Holidays Any other statutory leaves, paid time, or other ancillary benefits required under state and federal law