Enterprise Security Architect

InvestCloud, Inc.•,

3d•$175,000 - $200,000

About The Position

InvestCloud is seeking an Enterprise Security Architect to serve as a senior cybersecurity generalist, review software and services considered for purchase, and lead security architecture for the company’s on-premises data center. The role works across departments to ensure that infrastructure, data, and applications are designed, built, and operated securely. It requires broad cybersecurity knowledge and the judgment to reach timely decisions. The architect sets enterprise security standards across networks, servers, virtualization, storage, backup, privileged access, identity, and encryption; serves as design authority for zero-trust network access; and oversees hardware security modules and the customer identity service provider. The position joins project and architecture discussions across product, infrastructure, data, and business teams, identifies gaps between specialist areas, supports cloud and application security architects, and partners on reviews of products with AI features. The security team spans the United States, Romania, and India and protects platforms used by banks and wealth managers. InvestCloud describes its culture as emphasizing ownership, continuous learning, respect, and high-quality work. The role’s stated salary range is $175,000–$200,000, with actual pay varying based on factors including education, experience, skills, internal equity, market data, and geographic location.

Requirements

Ten or more years of cybersecurity experience, with broad, hands-on depth across network, infrastructure, identity, application, and data security.
Proven experience leading security design for on-premises data centers, including segmentation, hardening, virtualization, storage, and backup protection.
A track record of conducting fast, practical security reviews of third-party software and SaaS.
Strong knowledge of identity and privileged access management, encryption, and key management.
Working knowledge of frameworks such as the NIST Cybersecurity Framework, ISO 27001, and the CIS Controls, with the ability to apply them without slowing the business.
Experience in financial services or another regulated industry.
Judgment to make clear risk decisions and communication skills to explain them to executives and engineers.

Nice To Haves

Experience with secure access service edge (SASE) platforms.
Hands-on experience with hardware security modules such as Thales Luna.
CISSP or an architecture certification such as SABSA.

Responsibilities

Review software and services the business plans to buy and deliver clear, timely security decisions, with practical conditions where needed.
Lead security architecture for the on-premises data center so infrastructure, data, and applications are designed, built, and operated to a secure standard.
Set enterprise security standards for networks, servers, virtualization, storage, backup, and privileged access.
Serve as the design authority for zero-trust network access.
Set identity, privileged access, and encryption standards, including oversight of hardware security modules and the customer identity service provider.
Participate in project and architecture discussions across product, infrastructure, data, and business teams to build security in from the start.
Identify and close gaps between specialist areas.
Support cloud and application security architects on reviews.
Partner in reviews of products that include AI features.

Benefits

Medical/Rx insurance
Dental insurance
Vision insurance
Disability insurance
Life and AD&D insurance
Flexible Savings Account (FSA)
Health Savings Account (HSA)
Employee Assistance Plan (EAP)
Health advocacy
Voluntary ancillary plans, including accident, critical illness, hospital indemnity, legal, identity theft, auto/home, and pet insurance
401(k) retirement savings plan with company match
Paid time off