Security Solutions Architect

Key Responsibilities:

• Serve as a key delivery partner to the Security Enterprise Architect, applying domain strategy, target-state direction, standards, and roadmaps to initiatives and product solutions.

• Identify solution decisions with enterprise-wide implications and bring them to the Security Enterprise Architect and Architecture Review Board (ARB) for resolution.

• Lead solution architecture from discovery through design, delivery, implementation, and operational readiness for assigned initiatives.

• Translate business capabilities, functional requirements, constraints, and nonfunctional requirements into clear, implementable solution designs.

• Evaluate solution options and document recommendations, tradeoffs, dependencies, risks, assumptions, and Architecture Decision Records.

• Work directly with engineers and delivery teams to clarify designs, resolve implementation issues, and verify that the delivered solution remains aligned with the approved architecture.

• Coordinate cross-domain design decisions involving applications, integrations, data, infrastructure, cloud, security, operations, and third-party services.

Security Solution Design

• Develop security solution architectures across identity, privileged access, secrets and certificate management, application security, cloud and platform security, vulnerability management, adversarial testing, and software supply chain security.

• Perform threat modeling and security design reviews; define solution-level controls, trust boundaries, authentication and authorization flows, logging, monitoring, and evidence requirements.

• Design integrations among privileged access, secrets-management, identity, governance, application, database, cloud, and operational platforms.

Architecture Governance & Assurance

• Apply enterprise and domain standards, approved technologies, reference architectures, reusable patterns, and guardrails within solution designs.

• Prepare architecture materials for design reviews and the ARB; address feedback and maintain decision traceability through implementation.

• Identify deviations from standards, assess their solution impact, and document exceptions, compensating controls, and remediation commitments.

• Perform solution health checks at key delivery points to identify design drift, unresolved risks, operational gaps, or accumulating technical debt.

Cross-Domain Collaboration & Enablement

• Partner with security operations, application and platform engineering, infrastructure, data, cloud, privacy, risk, compliance, and delivery teams to develop feasible and supportable designs.

• Facilitate technical design working sessions and communicate solution decisions clearly to engineers, delivery leaders, business stakeholders, and architecture governance forums.

• Contribute reusable implementation guidance, lessons learned, and candidate patterns to the Enterprise Security Architect and architecture community.

• Mentor engineers and architects on secure design practices and the effective application of security standards.

Required Qualifications

Experience

• Bachelor’s degree in computer science, engineering, information systems, or a related discipline, or equivalent practical experience.

• Eight or more years of experience in solution architecture, engineering, or a related technology discipline, including experience leading the design of complex enterprise solutions.

• Demonstrated experience translating business and technical requirements into solution architectures spanning applications, integrations, data, infrastructure, security, and operations.

• Proven experience producing solution architecture designs, Architecture Decision Records, integration designs, nonfunctional requirements, and implementation guidance.

• Experience partnering with enterprise architects, product leaders, engineers, security, risk, and delivery teams from concept through implementation and operational readiness.

Technical Depth

• Deep solution architecture experience with privileged access-management platforms, with CyberArk strongly preferred, including credential vaulting, rotation, session controls, and just-in-time access.

• Experience designing secrets-management solutions using platforms such as CyberArk Conjur or HashiCorp Vault.

• Working knowledge of identity and access-management platforms such as Okta, PingOne, and SailPoint, including role-based access, lifecycle processes, certification, and least privilege.

• Security solution-design experience across Windows and Linux, major database platforms, cloud environments, APIs, applications, and the software development lifecycle.

• Working knowledge of threat modeling, vulnerability remediation, adversarial testing, software supply chain security, and recognized frameworks such as NIST, CIS, and ISO/IEC 27001.

Preferred Qualifications

• Advanced CyberArk experience, including PSM or CPM configuration, connector development, and enterprise integrations.

• Cloud security solution architecture experience, with AWS preferred, including identity, key and secrets management, network security, and workload protection.

• Experience designing security controls for AI and large language model solutions.

• Relevant certifications such as CISSP, SABSA, AWS Certified Security – Specialty, or CyberArk Defender or Sentry.