Cybersecurity Architect

OneMain Financial • Irving, TX

2d

About The Position

The Cybersecurity Architect develops enterprise-wide security architectures aligned with NIST standards and business objectives. The role designs secure solutions across cloud, on-premises, and hybrid environments; translates business and technical requirements into solution blueprints; contributes reference architectures and security patterns; and provides prescriptive guidance informed by hands-on engineering implementation experience.

The architect leads architecture and security reviews for new technologies, applications, and systems, identifies weaknesses, recommends risk mitigations, and works with engineering and infrastructure teams to support secure deployments throughout the system development lifecycle. The role also develops and maintains security architecture standards, policies, and control frameworks; participates in governance and architecture review boards; and supports compliance, maturity assessments, and continuous improvement.

As a subject matter expert, the Cybersecurity Architect advises stakeholders across IT, engineering, compliance, and risk teams, mentors junior architects and security engineers, and communicates technical and risk concepts to business and non-technical audiences. The role stays current on emerging threats, technologies, and developments in the NIST ecosystem.

Requirements

• 7–10 years of experience in cybersecurity, including 3 or more years in security architecture or a similar role.
• Deep working knowledge of NIST CSF, NIST SP 800-53, NIST SP 800-171, and NIST SP 800-207 Zero Trust.
• Demonstrated experience designing and reviewing secure architectures for enterprise systems and cloud environments such as AWS or Azure.
• Practical experience translating security architecture requirements into implemented controls, technical configurations, and operational procedures.
• Strong understanding of identity and access management, network security, data protection, and application security.
• Strong understanding of LLMs, AI, and GenAI solutions, including agentic AI and MCP hardening.
• Experience validating control effectiveness through testing, monitoring, evidence collection, or audit support.
• Experience working in a regulated environment and aligning technical controls to compliance frameworks.
• Excellent communication, collaboration, and documentation skills.

Nice To Haves

• Industry certifications such as CISSP, CISM, CISA, SABSA, or AWS Certified Security.
• Experience with Zero Trust Architecture and modern security models.
• Experience with security automation, control orchestration, policy-as-code, or continuous control monitoring.
• Experience implementing security controls in cloud-native, hybrid, and complex enterprise-scale environments.
• Familiarity with DevSecOps and infrastructure-as-code security.

Responsibilities

• Develop enterprise-wide security architectures aligned with NIST standards and business objectives.
• Design scalable security solutions for cloud, on-premises, and hybrid environments.
• Translate business and technical requirements into secure solution blueprints.
• Contribute to reference architectures and security patterns, and provide prescriptive guidance informed by hands-on engineering experience.
• Lead architecture and security reviews for new technologies, applications, and systems.
• Identify solution gaps and weaknesses and advise on risk mitigation strategies.
• Collaborate with engineering and infrastructure teams to support secure deployment of systems and services.
• Provide technical guidance to project and product teams throughout the system development lifecycle.
• Develop and maintain security architecture standards, policies, and control frameworks aligned with NIST and industry best practices.
• Participate in or lead security governance boards and architecture review boards.
• Ensure solutions meet internal risk, compliance, and regulatory requirements.
• Contribute to cybersecurity architecture maturity assessments and continuous improvement.
• Serve as a cybersecurity architecture subject matter expert for IT, engineering, compliance, and risk stakeholders.
• Mentor junior architects and security engineers.
• Communicate complex technical and risk concepts to business leaders and non-technical audiences.
• Stay current on emerging threats, technologies, and changes to the NIST ecosystem.
• Validate control effectiveness through testing, monitoring, evidence collection, or audit support.

Benefits

• Medical, prescription, dental, vision, hearing, accident, hospital indemnity, and life insurance options.
• 401(k) matching of up to 4%.
• Employee Stock Purchase Plan with a 10% share discount.
• Tuition reimbursement.
• Paid time off, including 15 vacation days per year and 2 personal days, prorated based on start date.
• Paid sick leave as determined by state or local ordinance, prorated based on start date.
• Seven paid holidays per year, based on start date.
• Three days of paid volunteer time per year, prorated based on start date.
• Health and wellbeing options.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed