Enterprise Cyber Security Architect

AEG Worldwide•Los Angeles, CA

About The Position

AEG is seeking a highly skilled, forward-thinking Security Architect to join its Information Security team. Reporting to the VP of Information Security and operating within the global security team under the Chief Information Security Officer (CISO), this role is the lead security architect responsible for designing and implementing secure architectures that enable the business while reducing risk. The architect works closely with IT, Venues, Infrastructure, Application Development, Legal, Compliance, and Security Operations to define and embed security standards into enterprise technology solutions. The role develops and maintains security architecture standards, reference architectures, and design patterns across cloud, infrastructure, network, endpoint, identity, and application environments. It provides security guidance and risk-based recommendations throughout solution design, implementation, and deployment, and helps teams apply security controls that balance risk reduction with business and operational needs. The architect also supports cloud and SaaS security, aligns controls with recognized frameworks and regulatory requirements, and contributes to the long-term security architecture roadmap.

Requirements

Bachelor's degree in Computer Science, Cybersecurity, Engineering, Information Systems, or a related field.
8–10 years of experience in information security, cybersecurity, or information technology, including at least 5 years in security architecture, security engineering, or related technical leadership roles.
Demonstrated experience designing and securing enterprise solutions across on-premises, cloud, and hybrid environments.
Hands-on experience with identity and access management, network segmentation, encryption, logging and monitoring, and SSDLC practices.
Experience developing security architecture standards, reference architectures, and secure design guidance.
Experience performing architecture risk assessments, threat modeling, and security reviews for enterprise systems and technologies.
Ability to work with engineering, infrastructure, application development, and business stakeholders to deliver secure technology solutions.
Deep understanding of security technologies, including firewalls, WAFs, IAM, endpoint protection, cloud security tools, and SIEM/SOAR platforms.
Experience designing and securing identity and access management solutions, including authentication, authorization, federation, and privileged access controls.
Familiarity with modern IT architectures, including cloud-native platforms (Azure, AWS, GCP), containerization (Docker/Kubernetes), and DevOps pipelines.
Strong analytical, critical-thinking, and problem-solving skills, including the ability to assess technical risk and provide sound recommendations.
Excellent written and verbal communication skills, including the ability to convey complex topics to non-technical audiences.
Strong relationship-building and collaboration skills across IT, Security, Legal, and business teams.
Proficiency with architecture modeling tools and documentation platforms such as Lucidchart, Visio, and Confluence.
Ability to balance strategic thinking with tactical execution in a fast-paced environment.
Strong understanding of network segmentation strategies and modern identity-centric security models.

Nice To Haves

Master's degree or advanced certifications.
Relevant certifications such as CISSP, CCSP, SABSA, TOGAF, AWS Certified Security – Specialty (SCS-C03), Microsoft Azure Security Engineer Associate, CISA, or equivalent.

Responsibilities

Develop and maintain security architecture standards, reference architectures, design patterns, and secure configuration standards across cloud, infrastructure, network, endpoint, identity, and application environments.
Define secure architecture principles for network segmentation, identity-driven access controls, and secure access to enterprise resources.
Ensure new technologies and solutions incorporate security and align with organizational security, risk, and compliance requirements.
Collaborate with business and technology stakeholders to ensure security architecture initiatives support strategic objectives and CISO priorities.
Create architecture guidance for enterprise applications, cloud platforms, integrations, identity services, and venue technologies.
Incorporate threat intelligence, threat modeling, and emerging risks into architecture decisions and security design standards.
Provide hands-on security guidance throughout solution design, implementation, and deployment.
Lead security architecture reviews and provide risk-based recommendations for new technologies, major initiatives, and significant system changes.
Work with engineering and operations teams to implement approved security architectures and controls.
Evaluate and recommend security controls that balance risk reduction with business and operational needs.
Partner with IT, Application Development, Infrastructure, Security Operations, and PMO teams to align security requirements and integration efforts.
Serve as the security subject matter expert on project teams, helping stakeholders navigate security requirements, risks, and tradeoffs.
Align architecture principles and security controls with frameworks such as NIST, ISO 27001, CIS Controls, and other regulatory requirements.
Lead security architecture and design reviews for cloud platforms, SaaS solutions, enterprise applications, integrations, and emerging technologies.
Partner with Cloud Engineering and DevOps teams to implement secure deployment and operational practices.
Provide architectural guidance for cloud services, enterprise applications, and security technology implementations.
Monitor emerging threats, technologies, and industry trends to identify opportunities to improve the organization's security posture.
Contribute to the long-term security architecture roadmap in support of business, technology, and security strategies.