it security architect

City of Orlando

<div><h1 class="jobSectionHeader"><b>Salary Range</b></h1>
$39.40-$50.24<p></p><h1 class="jobSectionHeader"><b>
Job Posting End Date - Applications will no longer be accepted starting</b></h1>
04-03-2026<p></p><h1 class="jobSectionHeader"><b>
Job Summary</b></h1>
Performs technical and administrative work that focuses on designing and developing security architecture patterns that meet regulatory obligations and data protection requirements as well as align with the business and organizational security strategy. Works collaboratively with Information Technology (IT) staff to build security controls and solutions compliant with approved architecture frameworks and standards. Participates in new projects, analysis of new requirements from platform teams, and technical discussions. Suggests best practices in development and operations area including best security practices. Mentors and trains junior staff members on security protocols. Work is performed under limited supervision of the Information Security and Compliance Manager. Work is evaluated while in progress and upon completion through direct observation, discussion, review of established procedures, and achievement of desired results. Minimum Qualifications: Bachelor&rsquo;s Degree in Computer Science, Engineering, or related field and five (5) years progressive IT experience, to include experience in security architecture; or an equivalent combination of education, training, and experience. CISSP, CISA, CISM, or other relevant security-related designation desired. CISSP-ISSAP certifications preferred.<p></p><p><b><i>
Important: To be eligible to proceed forward in the application process, applicants must meet the minimum qualifications listed in the position description.</i></b><i> </i>Please ensure your application provides details of all relevant experience related to the position. If you have questions or need clarification concerning the position or application process, please contact Human Resources at jobs@orlando.gov or 407.246.2062.</p><p></p><p>
If this posting indicates a degree is required, the following experience will apply in lieu of any degree as follows:</p><ul><li>
Two (2) years of direct experience for an associate degree;</li><li>
Four (4) years of direct experience for a bachelor's degree;</li><li>
Six (6) years of direct experience for a master's degree; or</li><li>
Nine (9) years of direct experience for a doctoral degree.</li></ul></div>

IT Security Architect

GovCIO

<div>Overview:
<div>
GovCIO is currently hiring for a Security Architect to support modernization effort. This position will be located in Hampton, VA on Joint Base Langley-Eustis and will be a fully onsite position.</div>
Responsibilities:
<div>
We are seeking a Security Architect to lead the design and implementation of enterprise-grade security strategies, frameworks, and systems. You will guide architectural decisions, influence security posture across the organization, and ensure that our technological environment is protected against current and emerging threats. This position is located at Langley Air Force Base, Hampton, Virginia.</div><p></p><p><br>
 Key Responsibilities</p><ul><li>
Design and Implement
<ul><li>Create and implement robust security architecture that aligns with business objectives and compliance requirements</li></ul></li><li>
Risk Assessment
<ul><li>Conduct thorough risk assessments and vulnerability analyses to identify potential threats to the organization&rsquo;s systems and data
</li><li>Prioritize risks and develop mitigation strategies</li></ul></li><li>
Policy Development
<ul><li>Develop, implement, and enforce security policies, standards, and procedures to ensure compliance with industry regulations and practices</li></ul></li><li>
Collaboration
<ul><li>Work closely with IT teams, cybersecurity professionals, and management to integrate security measures into all phases of the software development lifecycle (SDLC) and operational processes
</li></ul></li><li>Incident Response
<ul><li>Lead or participate in security incident response planning and exercises, and investigate security breaches to provide detailed reports and corrective actions</li></ul></li></ul>
Qualifications:
<div>
High School with 9+ years (or commensurate experience)</div><div><br>
Required Skills and Experience</div><ul><li>
Clearance: TS/SCI</li><li>
Technical expertise
<ul><li>Strong understanding of complex IT systems, networks, and security technologies, including firewalls, intrusion detection systems, and encryption solutions</li></ul></li><li>
Problem-solving skills
<ul><li>Excellent analytical and problem-solving abilities to detect and resolve security issues promptly</li></ul></li><li>
Communication skills<ul><li>
Ability to translate complex security concepts into understandable terms for various stakeholders</li></ul></li><li>
Experience with STIGs, ACAS, HBSS/Trellix, vulnerability management, and secure configuration baselines</li><li>
DOD 8140 IAM Level III (CISSP, CISM, CCISO)</li></ul><div>
Preferred Skills and Experience</div><ul><li>
Adaptability to the constantly evolving cybersecurity landscape to help stay ahead of emerging threats and adjust strategies accordingly</li><li>
The ability to think strategically about security architecture and its alignment with organizational objectives.</li><li>
Experience with DOD networks (NIPR, SIPR, JWICS)</li></ul><p></p><div><br>
#DSG #NSS #MAVERICK #TM #TMK</div>
Company Overview:
<div>
GovCIO is a team of transformers-people who are passionate about transforming government IT. Every day, we make a positive impact by delivering innovative IT services and solutions that improve how government agencies operate and serve our citizens.<br>
<br>
But we can't do it alone. We need great people to help us do great things - for our customers, our culture, and our ability to attract other great people. We are changing the face of government IT and building a workforce that fuels this mission. Are you ready to be a transformer?</div><div></div><div><b><br>
What You Can Expect</b></div><div></div><div><b><br>
Interview &amp; Hiring Process</b></div><div>
If you are selected to move forward through the process, here&rsquo;s what you can expect:</div><ul><li>
During the Interview Process</li><li><ul><li>
Virtual video interview conducted via video with the hiring manager and/or team</li><li>
Camera must be on</li><li>
A valid photo ID must be presented during each interview</li></ul></li></ul><ul><li>
During the Hiring Process</li><li><ul><li>
Enhanced Biometrics ID verification screening</li><li>
Background check, to include:</li><li><ul><li>
Criminal history (past 7 years)</li><li>
Verification of your highest level of education</li><li>
Verification of your employment history (past 7 years), based on information provided in your application</li></ul></li></ul></li></ul><div><b>
Employee Perks</b></div><div>
At GovCIO, we consistently hear that meaningful work and a collaborative team environment are two of the top reasons our employees enjoy working here. In addition, our employees have access to a range of perks and benefits to support their personal and professional well-being, beyond the standard company offered health benefits, including:</div><ul><li>
Employee Assistance Program (EAP)</li><li>
Corporate Discounts</li><li>
Learning &amp; Development platform, to include certification preparation content</li><li>
Training, Education and Certification Assistance*</li><li>
Referral Bonus Program</li><li>
Internal Mobility Program</li><li>
Pet Insurance</li><li>
Flexible Work Environment</li><li>Available to full-time employees</li></ul><div></div><div><br>
Our employees&rsquo; unique talents and contributions are the driving force behind our success in supporting our customers, which ultimately fuels the success of our company. Join us and be a part of a culture that invests in its people and prioritizes continuous enhancement of the employee experience.</div><div></div><div><b><br>
We are an Equal Opportunity Employer.</b> All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, disability, or status as a protected veteran. EOE, including disability/vets.</div><div></div><div><b><br>
Posted Pay Range</b></div><div>
The posted pay range, if referenced, reflects the range expected for this position at the commencement of employment, however, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, education, experience, and internal equity. The total compensation package for this position may also include other compensation elements, to be discussed during the hiring process. If hired, employee will be in an &ldquo;at-will position&rdquo; and the GovCIO reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, GovCIO or individual department/team performance, and market factors.</div>
Posted Salary Range: USD $145,000.00 - USD $155,000.00 /Yr.</div>

Security Architect

Funavry Technologies

<div>
 <p>
  <strong>
   The Role:
  </strong>
  We are seeking an experienced
  <strong>
   Security Architect with a strong DevSecOps mindset
  </strong>
  to lead security architecture, automation, and operational security
  <strong>
   for a blockchain-powered AI and Agentic infrastructure platform.
  </strong>
 </p>
 <p>
  This role goes beyond traditional security architecture and focuses
  <strong>
   on embedding security into the entire software development lifecycle
  </strong>
  , including
  <strong>
   CI/CD pipelines, AI model deployment, agentic AI systems, blockchain infrastructure, and cloud-native workloads.
  </strong>
 </p>
 <p>
  The Security Architect will design and implement
  <strong>
   secure-by-design development processes
  </strong>
  , protect
  <strong>
   AI agents and blockchain infrastructure
  </strong>
  , and ensure the platform achieves enterprise-grade security, resilience, and compliance.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Responsibilities:
  </strong>
 </p>
 <p>
  <strong>
   DevSecOps &amp; Secure Development
  </strong>
 </p>
 <ul>
  <li>
   Design and implement DevSecOps frameworks integrating security controls directly into CI/CD pipelines.
  </li>
  <li>
   Implement automated security testing, including SAST, DAST, dependency scanning, and infrastructure scanning.
  </li>
  <li>
   Secure the software supply chain, including artifact signing, SBOM generation, container scanning, and integrity validation.
  </li>
  <li>
   Establish secure coding standards and practices across engineering teams.
  </li>
  <li>
   <strong>
    Blockchain Infrastructure Security
   </strong>
  </li>
  <li>
   Architect security for blockchain nodes, validators, and distributed network infrastructure.
  </li>
  <li>
   Implement secure key management systems, including HSM-based signing and validator protection.
  </li>
  <li>
   Design controls to protect consensus mechanisms, node infrastructure, and smart contract interaction layers.
  </li>
  <li>
   Lead smart contract and protocol-level security reviews in collaboration with blockchain engineers.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Agentic AI &amp; AI Workload Security
  </strong>
 </p>
 <ul>
  <li>
   Design security controls for AI agents, autonomous workflows, and multi-agent systems.
  </li>
  <li>
   Protect against prompt injection, model manipulation, agent privilege escalation, and tool misuse.
  </li>
  <li>
   Implement safeguards for model integrity, inference security, and AI system trust boundaries.
  </li>
  <li>
   Define secure architecture for AI pipelines, training environments, and model deployment infrastructure.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Cloud &amp; Kubernetes Security
  </strong>
 </p>
 <ul>
  <li>
   Design and implement cloud-native security architecture across AWS infrastructure.
  </li>
  <li>
   Secure Kubernetes clusters, including workload isolation, pod security policies, runtime protection, and network segmentation.
  </li>
  <li>
   Implement zero-trust architecture, identity-based access controls, and secrets management.
  </li>
  <li>
   Enforce least-privilege IAM policies across cloud and internal systems.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Monitoring, Threat Detection &amp; Incident Response
  </strong>
 </p>
 <ul>
  <li>
   Implement security monitoring frameworks for blockchain, AI, and cloud infrastructure.
  </li>
  <li>
   Build dashboards and alerting systems using Prometheus, Grafana, and security monitoring tools.
  </li>
  <li>
   Develop and maintain incident response playbooks for blockchain attacks, AI misuse, and infrastructure breaches.
  </li>
  <li>
   Conduct regular threat modeling, penetration testing, and security assessments.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Cross-Team Security Leadership
  </strong>
 </p>
 <ul>
  <li>
   Work closely with AI engineers, blockchain architects, DevOps teams, and product leadership to embed security throughout the platform lifecycle.
  </li>
  <li>
   Provide guidance on security architecture for new product features and AI capabilities.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Basic Qualifications:
  </strong>
  We are seeking a senior security professional with strong DevSecOps experience and expertise in securing modern distributed systems.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Required experience:
  </strong>
 </p>
 <ul>
  <li>
   8+ years of experience in cybersecurity
  </li>
  <li>
   3+ years in security architecture or DevSecOps leadership roles
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Technical expertise:
  </strong>
 </p>
 <ul>
  <li>
   Strong experience implementing DevSecOps practices and secure CI/CD pipelines
  </li>
  <li>
   Deep knowledge of cloud security (AWS preferred) including IAM, audit logging, and infrastructure security
  </li>
  <li>
   Experience securing blockchain infrastructure, including validator nodes, key management, and decentralized architectures
  </li>
  <li>
   Understanding of cryptography, PKI, distributed trust models, and blockchain security principles
  </li>
  <li>
   Expertise in Kubernetes and container security
  </li>
  <li>
   Experience with software supply chain security and artifact integrity
  </li>
  <li>
   Familiarity with AI/ML system security, including model integrity and inference environments
  </li>
  <li>
   Understanding of AI/LLM security risks, including prompt injection and agent misuse
  </li>
  <li>
   Proficiency in automation and scripting using Python, Go, or Rust
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Educational Qualifications
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Cybersecurity, or Information Security.
  </li>
  <li>
   Certifications such as CISSP, CISM, CKA/CKS, AWS Security Specialty, DevSecOPs certifications are a strong plus.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Important Note:
  </strong>
  Clearly indicate the job title
  <strong>
   &ldquo;Security Architect&rdquo;
  </strong>
  in your job application. Our hiring process is extremely competitive, and we will only respond to shortlisted candidates. We offer industry-leading compensation and a world-class work environment.
 </p>
</div>


BambooHR

<div><div><p><i>Please Note: This is a Utah-based hybrid position which will require some regular in-office days each week. Additionally, employment with BambooHR is contingent on passing both a background and credit check.</i></p>
<p></p>
<p><b>AI at BambooHR</b><br>
At BambooHR, we&rsquo;re all about setting people free to do great work, and we believe AI is a powerful partner in that mission. We&rsquo;re leaning into intelligent tools to streamline our workflows, giving us more time for high-impact innovation. We look for curious, forward-thinking people who are ready to explore how AI can elevate their work and help us reimagine the future of HR.</p>
<p></p>
<p><b>Essential Job Duties</b></p>
<p>
The Information Security Architect will lead hands-on security architecture design across BambooHR&rsquo;s cloud environment and corporate information systems, partnering with engineering, IT, and security teams to embed security into platforms, processes, and day-to-day technology decisions. A typical day includes leading architecture and design reviews, defining secure cloud and corporate security patterns, advising on identity and data protection strategies, and guiding teams through complex security tradeoffs to enable secure, scalable delivery.</p>
<p>
The Information Security Architect will own outcomes across cloud and corporate security architecture, delivering scalable designs, standards, and measurable risk reduction. This role operates with a high degree of autonomy and influence, partnering across engineering, IT, product, and security to embed security into how BambooHR designs, builds, and operates.</p>
<p>
You will:</p>
<ul>
<li><div>Lead the design and evolution of security architecture across cloud infrastructure, SaaS platforms, and corporate information systems, ensuring solutions are secure-by-design, scalable, and operationally sustainable.</div>
</li><li><div>Own and maintain security architecture standards, reference architectures, and secure design patterns spanning identity and access management, data protection, logging/telemetry, endpoint security, and third-party integrations.</div>
</li><li><div>Conduct and lead security architecture reviews for new systems, material changes, vendor tools, and integrations; document decisions, required control outcomes, and implementation guidance that teams can execute.</div>
</li><li><div>Drive threat modeling and architectural risk assessments for strategic initiatives; translate findings into prioritized remediation plans and architecture improvements that balance risk reduction with usability and delivery velocity.</div>
</li><li><div>Define and validate cloud security control expectations, including IAM, network segmentation, encryption and key management, secrets management, centralized logging, and least-privilege access models; validate adoption through partnership with engineering and IT.</div>
</li><li><div>Influence detection and response architecture in collaboration with SecOps to improve visibility, telemetry quality, and response effectiveness; support investigations by providing architectural context and remediation guidance as needed.</div>
</li><li><div>Partner with Security Engineering, Application Security, Security Operations, and GRC to ensure security controls are consistently designed and implemented across prevention, detection, response, and governance/audit domains (e.g., SOC 2, ISO 27001, and customer requirements).</div>
</li><li><div>Create clear and accessible architecture documentation (standards, diagrams, patterns, decision records) and communicate security tradeoffs effectively to both technical and non-technical stakeholders.</div>
</li><li><div>Mentor and guide security practitioners and cross-functional partners by improving shared understanding, raising architectural maturity, and promoting consistent adoption of security patterns and secure-by-default approaches.</div>
</li><li><div>Demonstrate an AI-forward mindset and proficiency by actively using AI tools to improve productivity, quality, and decision-making in security architecture and engineering workflows, and be able to speak to real-world examples of using AI to conduct work and to design and implement practical, secure solutions (e.g., accelerating architecture documentation, threat modeling, control validation, detection logic development, policy/standard drafting, or automating analysis).</div>
</li>
</ul><p><b>What You Need to Get the Job Done</b></p>
<ul>
<li><div>Bachelor&rsquo;s degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent professional experience.</div>
</li><li><div>6&ndash;7+ years of hands-on experience in information security, security engineering, cloud security, or closely related roles.</div>
</li><li><div>Demonstrated experience leading security architecture or design decisions for production cloud and/or corporate environments.</div>
</li><li><div>Strong working knowledge of at least one major cloud platform (AWS, Azure, or GCP), including IAM, networking, encryption, key management, and logging.</div>
</li><li><div>Practical experience across corporate security domains such as identity and access management, endpoint security, SaaS governance, and data protection.</div>
</li><li><div>Ability to independently assess risk, define security control objectives, and translate them into clear architectural guidance and implementation requirements.</div>
</li><li><div>Ability to drive architectural consistency across diverse cloud and corporate systems with varying ownership and constraints.</div>
</li><li><div>Experience balancing security risk reduction with delivery speed, usability, and operational realities.</div>
</li><li><div>Excellent written and verbal communication skills, with the ability to influence and align technical and non-technical stakeholders.</div>
</li><li><div>Strong organizational and prioritization skills; ability to manage multiple initiatives in a fast-paced environment.</div>
</li><li><div>Experience in a SaaS or cloud-first organization.</div>
</li>
</ul><p><b>What Will Make Us REALLY Love You</b></p>
<ul>
<li><div>Experience supporting SOC 2, ISO 27001, and customer security assessments.</div>
</li><li><div>Familiarity with infrastructure-as-code, CI/CD pipelines, and cloud-native architectures.</div>
</li><li><div>Experience with SSO/IdP platforms, MDM/endpoint management tools, and modern SaaS security controls.</div>
</li><li><div>Security certifications such as AWS Security Specialty, CCSK, SSCP, CISSP (Associate or full), or equivalent.</div>
</li>
</ul><p><b>What You'll Love About Us</b></p>
<ul>
<li>A Great Company Culture that has been recognized by multiple organizations like Inc, and Salt Lake Tribune</li>
<li>Comprehensive health, life, and disability insurance</li>
<li>Generous leave policies that include 4 weeks of vacation, 12 company holidays, parental leave, and volunteer time off so you can enjoy quality of life</li>
<li>401k plans with up to 6% company match</li>
<li>$2000 Paid-Paid Vacation bonus</li>
<li>EAP through Headspace</li></ul></div><p></p><div><br>
<p><b>
About Us</b></p>
<p>
At BambooHR, we're building something different: we're building a people intelligence platform that transforms HR and sets people free to do great work! We're a proven market leader driving innovation while building lasting success through thoughtful, sustainable growth. Here, you'll find a place that champions growth: both professional and personal, both individual and collective.</p>
<p>
We invest in potential, giving you the space to stretch your capabilities and turn good ideas into reality while providing the safety net of a supportive, values-driven culture. Our approach combines meaningful work with meaningful lives, offering competitive benefits, professional development, and the flexibility to thrive both in and outside the office.</p>
<p>
What sets us apart isn't just what we do, but how we do it: with openness, integrity, and a shared commitment to doing the right thing. Join us in creating HR software that makes work better for everyone, while we make work better for you.</p>
<p></p>
<p><b><i>BambooHR is committed to the full inclusion of all qualified individuals and will ensure that persons with disabilities are provided reasonable accommodations throughout the hiring process. If you would like to request accommodations, please let your recruiter know.</i></b></p>
<p><b><i>
BambooHR is An Equal Opportunity Employer-M/F/D/V</i></b><br>
<b><i>Because our team members are trusted to handle sensitive information, we require all candidates that receive and accept employment offers to complete a background check before being hired.</i></b></p><br>
<p></p>
<p><b><i>
Our process utilizes AI as an assistant to efficiently process and analyze candidate data. Recruiters and hiring managers maintain full oversight and accountability, ensuring that all final selection and rejection decisions are human-made and based solely on objective job qualifications. Please see our </i></b><b><i>General Privacy Notice</i></b><b><i> and </i></b><b><i>California Privacy Notice</i></b><b><i> for more details.</i></b></p>
<p><b><i>
See our </i></b><b><i>AI Guidelines for Candidates</i></b><b><i> for details on how BambooHR uses AI in recruiting, how we expect candidates to use AI, and what is not allowed.</i></b></p></div></div>

Information Security Architect

The Linux Foundation

<div><h6 class="jobSectionHeader"><b>Company Description
</b></h6><p>The Linux Foundation is a 501(c)(6) non-profit that provides a neutral, trusted hub for developers and organizations to code, manage, and scale open technology projects and ecosystems. The Open Source Security Foundation (OpenSSF) is a cross-industry organization at the Linux Foundation that brings together the industry&rsquo;s most important open source security initiatives and the individuals and companies that support them. The OpenSSF is committed to collaboration and working both upstream and with existing communities to advance open source security for all.
</p><h6 class="jobSectionHeader"><b>Job Description
</b></h6><p>We are looking for a Security Architect specializing in AI, Machine Learning, Large Language Models (LLMs), and Agentic Systems to help secure the next generation of open source software and AI-enabled systems. This role will provide technical leadership and architectural guidance across the OpenSSF ecosystem, focusing on emerging security risks introduced by AI/ML pipelines, foundation and open-weight models, autonomous agents, and their integration into modern software supply chains. Additionally, the Security Architect will provide leadership for the OSS-CRS (Open Source Software Cyber Reasoning System) project: a standardized infrastructure for building, running, and evaluating Cyber Reasoning Systems (CRS) that perform automated vulnerability discovery and remediation in open source software.
</p><p>The ideal candidate operates at the intersection of deep technical expertise, open source collaboration, and global risk management, helping translate cutting-edge AI security challenges into practical, adoptable guidance for maintainers, enterprises, and regulators.
</p><h6 class="jobSectionHeader"><b>Responsibilities</b></h6><ul><li><p>
Develop reference architectures, threat models, and security design patterns for AI/ML/LLM and agentic systems used in open-source software</p></li><li><p>
Identify and analyze security risks across the full AI lifecycle, including: Data sourcing, curation, and training; Model development, fine-tuning, and evaluation; Deployment, inference, and runtime operation Agent-to-agent and agent-to-tool interactions;
</p></li><li><p>OSS-CRS project leadership including: Collaborate with maintainers on project roadmap; Testing and end-user guidance on operation of OSS-CRS tools; Participate in Coordinated Vulnerability Disclosure process for issues discovered with OSS-CRS tools; Encourage project adoption with security engineers, software developers, Open Source Program Offices and open source project maintainers;
</p></li><li><p>Serve as a technical advisor to OpenSSF working groups and initiatives: Collaborate with maintainers and contributors to ensure guidance is practical, scalable, and aligned with open-source realities;
</p></li><li><p>Support the development of community-driven guidance, tooling recommendations, and best practices
</p></li><li><p>Standards, Policy, and Ecosystem Alignment
</p></li><li><p>Align OpenSSF AI security guidance with relevant frameworks and standards, including: NIST Secure Software Development Framework (SSDF); NIST AI Risk Management Framework (AI RMF); ISO/IEC 27000-series and emerging AI standards; EU AI Act
</p></li><li><p>Help translate regulatory and policy expectations (e.g., product security and software assurance requirements) into actionable technical controls
</p></li><li><p>Engage with industry, academia, and government stakeholders to promote consistent, interoperable AI security approaches
</p></li><li><p>Thought Leadership &amp; Education: Author whitepapers, technical reports, and architectural guidance for public release; Present OpenSSF AI security work at conferences, workshops, and community events; Help educate developers, maintainers, and security teams on secure-by-design AI practices
</p></li><li><p>Travel: up to 20%
</p></li></ul><h6 class="jobSectionHeader"><b>Qualifications Prerequisites:
</b></h6><ul><li><p>10+ years of experience in software, cloud, or systems security with a focus on architecture/leadership
</p></li><li><p>Hands-on experience securing AI/ML systems
</p></li><li><p>Deep understanding of ML pipelines and infrastructure; LLMs, prompt engineering, and retrieval-augmented generation (RAG); Agentic and autonomous system architectures; Experience securing cloud-native and distributed systems commonly used for AI workloads
</p></li></ul><h6 class="jobSectionHeader"><b>Desirable Skills and Background:
</b></h6><ul><li><p>Security Architecture &amp; Risk Management</p></li><li><p>
Threat modeling complex systems</p></li><li><p>
Designing security architectures and controls
</p></li><li><p>Applying secure SDLC practices in modern environments
</p></li><li><p>Strong understanding of identity, access control, secrets management, and isolation in AI contexts
</p></li><li><p>Open Source &amp; Collaboration: Demonstrated experience working with open-source communities or foundations; Ability to balance security rigor with developer usability and community sustainability; Experience producing vendor-neutral, ecosystem-wide guidance
</p></li><li><p>Communication &amp; Influence: Excellent written and verbal communication skills; Ability to explain complex technical risks to non-technical audiences; Comfortable leading through influence in a collaborative, multi-stakeholder environment
</p></li></ul><h6 class="jobSectionHeader"><b>Additional Information
</b></h6><p>Salary $170,000 - $185,000 USD
</p><p>All your information will be kept confidential according to EEO guidelines.</p></div>

Security Architect – AI / ML / LLM / Agentic Systems

Sumitomo Group

<div><p>SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG&rsquo;s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.</p><p></p><p><br>
In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization&rsquo;s extensive global network. The Group&rsquo;s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.</p><div><div><div><h2 class="jobSectionHeader"><b>
Role Description</b></h2></div><div><p>
The Vice President, Cloud Security Architecture will be responsible for ensuring that Information Security systems and Cloud infrastructures are configured, deployed, and maintained in accordance with SMBC&rsquo;s polices and security standards. This position requires participation in technical research and development to enable continuing innovation for Cyber Security and Information Risk management.</p><p><br>
This role is part of a team responsible for administering security projects designed to safeguard SMBC&rsquo;s Cloud infrastructures which is made up of Azure, AWS and GCP. The Vice President of Cloud Security Architecture focuses on implementing and engineering information security solutions using industry&rsquo;s best practices, defining and documenting projects, creating and executing project plans, engaging in project cost management, resource management and performing periodic reporting. Acts as a subject matter expert who utilizes his/her Cloud Security Engineering expertise to resolve complex problems in consideration of established policies, guidelines, or processes.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Role Objectives</b></h2></div><div><ul><li>
Drive the architecture, design, implementation, and define cloud security operational directives on multiple security projects and business applications.</li><li>
Participate in Business and Information Security projects to recommend security controls and solutions applicable. Provide guidance and recommendations for a secure security infrastructure. Proactively develop and enforce security plans and standards.</li><li>
Gather and analyze performance and compliance metrics relating to the Bank&rsquo;s information security and risk standards.</li><li>
Continuously assess emerging security trends in the cloud and create policies using automation scripts and standards for adoption with SMBC</li><li>
Performs as the Subject Matter expert focused on multiple technologies within the Security domains (Security Engineering, IAM, Cloud Security, Data Security, Network Security, Encryption, Privileged Access Management, Federation etc.).</li><li>
Partner with relevant internal IT Application, Infrastructure, Network and Support teams to ensure that security controls are implemented at all significant layers, test those controls and perform gap analysis to find areas of improvement.</li><li>
Strong understanding and hands on implementation experience with SANS/CIS Top 20, NIST CSF, 800-53, ISO27001 and FFIEC CAT controls.</li><li>
Strong Incident Response skillset using NIST, CIS, MITRE ATT&amp;CK and CIS frameworks. Being able to conduct threat modeling to determine major threats facing the firm.</li><li>
Participate in the development of the security roadmap and communicate the Technology Security vision to senior management and technical departments.</li><li>
Coordinates with project team the implementation, upgrade and maintenance of security solutions.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Qualifications and Skills</b></h2></div><div><ul><li>
Demonstrates in-depth understanding of AWS cloud infrastructure and security controls. Hands on configuration and troubleshooting experience of AWS.</li><li>
Good understanding of Azure and GCP cloud platforms is highly desired</li><li>
7+ Years of hands-on security architecture, implementation and design experience required, designing globally scalable Cloud security solutions.</li><li>
In-depth experience of Terraform in a must requirement for this role. In addition, Bash, python, Perl or any other scripting language is highly desirable.</li><li>
Strong understanding of DNS, PKI, Encryption, Key Management, CMK is required to perform this role.</li><li>
Experience in cloud-based application architecture systems and solutions within a highly regulated environment.</li><li>
Strong knowledge of enterprise Information Security pillars (Perimeter security, Identity Management and Governance, Privileged Account Management, Compliance, Penetration testing, Encryption, Cloud Security, Incident Response, Vulnerability Management)</li><li>
Understanding of OWASP Top 10 highly desired.</li><li>
Good understanding of Zero Trust principles highly desired.</li><li>
Ability to communicate information security concepts across a broad range of technical &amp; non-technical staff.</li><li>
Bachelor&rsquo;s degree in information security, Compute Science or related field Required</li><li>
One of the following certifications is required - CISSP, CEH, Azure Cloud security, AWS, GCP or equivalent Cloud certification.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Additional Requirements</b></h2></div></div></div><div></div><p>
SMBC&rsquo;s employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process. Hybrid work may not be permitted for certain roles, including, for example, certain FINRA-registered roles for which in-office attendance for the entire workweek is required.</p><p></p><p><br>
SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at accommodations@smbcgroup.com.</p></div>

Security Architect - Vice President

Bowhead

<div>Overview:
<div>
SENIOR SYSTEMS ARCHITECT - CLOUD (NAUT):</div><p>
Bowhead seeks a Senior Systems Architect - Cloud to support our customer on the Nautical contract in the Arlington, VA area. This position requires on-site presence due to work requirements and will not entertain work from home capabilities.</p>
Responsibilities:
<ul><li>Strategic Architecture Leadership: Lead architectural design and implementation of cloud-native solutions for mission-critical Department of Defense applications, driving strategic migration of legacy DoD systems to secure cloud environments while ensuring compliance with federal security standards.</li><li>
Cloud Platform Architecture: Design and oversee end-to-end cloud architecture strategies across AWS GovCloud, Azure Government, and other FedRAMP-authorized cloud platforms for complex DoD legacy system migrations.</li><li>
Security Integration &amp; Compliance: Implement and maintain security controls compliant with NIST, FISMA, DoD Directive 8140, and DoD security frameworks while ensuring operational continuity throughout migration processes.</li><li>
Legacy System Assessment: Conduct comprehensive assessments of existing DoD applications and J6 IT processes to determine optimal migration pathways and identify corrective actions for hardware, software, and business management procedures.</li><li>
Cross-Functional Collaboration: Interface with the customer and external stakeholders in working groups, technical exchange meetings, and other forums while providing technical guidance to development teams and junior architects.</li><li>
Technical Documentation &amp; Reporting: Create and maintain detailed architectural documentation, migration plans, security compliance reports, and prepare contingency plans while identifying/recommending GOTS/COTS software applications for program tracking.</li><li>
Project Management &amp; Oversight: Chair/co-chair meetings and working groups on behalf of government representatives, resolve problems, allocate resources, manage personnel, and monitor performance to meet contract requirements.</li><li>
Infrastructure Management: Oversee development/coordinate technical solutions ensuring compatibility within the customers infrastructure while maintaining accountability for all IT assets through ITEC Team oversight.</li><li>
Personnel Supervision: Provide daily control and supervision of assigned personnel, provide planned replacement information at least 15 calendar days prior to replacement, and provide information within 24 hours of unplanned replacements.</li><li>
Risk Management &amp; Process Improvement: Identify and mitigate technical and security risks, recommend life cycle management processes for automated information systems, and develop cost-efficiency strategies.</li><li>
Governance Participation: Participate in J6 IT Governance processes and identify/assign C4IT support personnel for Projects &amp; Portfolio Managers to meet J6 timelines.</li><li>
Other duties as assigned.</li></ul>
Qualifications:
<ul><li>Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Data Science, Information Systems, or related field from an ABET accredited or CAE designated institution; Master's degree preferred.</li><li>
Experience: Minimum 16+ years of systems architecture experience with 8+ years specifically in cloud architecture and minimum 5 years managing 10+ personnel for IT and/or cybersecurity efforts.</li><li>
DoD Experience: Minimum 5 years experience working with DoD systems and understanding of military operational requirements, specifically with the customers infrastructure.</li></ul><p>
Technical Skills:</p><ul><li>
Expert knowledge of cloud platforms (AWS GovCloud, Azure Government, GCP) with emphasis on government cloud environments</li><li>
Proficiency in containerization technologies (Docker, Kubernetes)</li><li>
Experience with Infrastructure as Code (Terraform, CloudFormation)</li><li>
Strong understanding of microservices architecture and API design</li><li>
Knowledge of CI/CD pipelines and DevSecOps practices</li><li>
Familiarity with database migration strategies and data architecture</li><li>
Experience with Cryptonet Management Workstation (CMW) and crypto status communication protocols</li><li>
Framework Compliance: Meets the Core and Additional Knowledge, Skills, and Abilities Tasks (KSATs) defined in the DoD Cyber Workforce Framework for Work Role 802 (NIST: OV-PM-002) and Work Role 632 (NIST: SP-SYS-002).</li></ul><p>
Preferred Qualifications:</p><ul><li>
Leadership Experience: Previous experience leading large-scale enterprise architecture initiatives and managing cross-functional teams</li><li>
Programming Knowledge: Proficiency in Python, Java, or other enterprise programming languages</li><li>
Government Experience: Experience with FedRAMP, ATO processes, and government compliance frameworks</li></ul><p>
CERTIFICATION REQUIREMENTS:</p><ul><li>
Required: CompTIA Security+ and AWS Solutions Architect Professional or Azure Solutions Architect Expert</li><li>
Desired: CISSP, SABSA, DAWIA PM Practitioner, GIAC Security Essentials (GSEC), FITSP-D, GIAC Cloud Security Automation (GCSA), GIAC Information Security Fundamentals (GISF), (ISC)2 Systems Security Certified Practitioner (SSCP)</li></ul><div></div><div><br>
Physical Demands:</div><br>
<div></div><ul><li>
Must be able to lift 25 pounds on occasion.</li><li>
Must be able to stand and walk for prolonged period amounts of time.</li><li>
Must be able to twist, bend, and squat periodically.</li></ul><div></div><div><br>
SECURITY CLEARANCE REQUIREMENTS: Must be able to maintain a security clearance at the Top Secret level with SCI eligibility and maintain SAP eligibility. Due to work requirements, this position will not entertain work from home capabilities. US Citizenship is a requirement for this contract.</div><div></div><div><br>
#LI-KC1</div></div>

Senior Systems Architect - Cloud

Search 10000+ It security architect jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 it security architect jobs Near Me

IT Security Architect

Security Architect

Security Architect

Information Security Architect

Security Architect – AI / ML / LLM / Agentic Systems

Security Architect - Vice President

Senior Systems Architect - Cloud