Enterprise Security Architect, Lead

Booz Allen Hamilton • Raleigh, NC

19h • $112,800 - $257,000

About The Position

Booz Allen is seeking a lead security architect to strengthen security across a complex global hybrid enterprise environment. The role serves as the primary security architecture advisor and leads design, threat-modeling, and remediation sessions with the CISO office, Network Engineering, Endpoint Management, and external vendors and partners. The architect develops an enterprise security architecture roadmap aligned with CISO goals and business needs across edge and network defense, cloud security, transport security, endpoint protection, and certificate lifecycle management, and advises on planning and operations for CISO Engineering Security Edge workstreams.

The role leads proactive architecture reviews and continuous monitoring to identify structural weaknesses and recommend remediation. It also helps establish and enforce infrastructure security policies and advance security automation, while translating technical risks into business-risk metrics. The position supports security across edge and perimeter defense, cloud, PKI, endpoint protection, and security operations. Work contributes to protecting and advancing postal services across the country.

Requirements

• 15+ years of experience with architecture across edge and perimeter defense and enterprise security infrastructure, including IDS/IPS, WAF/WAAP, SD-WAN remote security, PKI/CAOps, NDR, NGFW, EDR/XDR, SIEM, DNS protection, proxy and web proxy, PAC, load balancers, IP routing, and data center design.
• 10+ years of experience with cybersecurity and infrastructure.
• 5+ years of experience in a security architecture role influencing architecture decisions and priorities.
• Experience applying security governance, policies, and standards, managing security governance workstreams, supporting security incident response, and advancing security automation.
• Knowledge of SASE/SSE convergence, including SD-WAN, CASB, SWG, and ZTNA; Zero Trust principles and their practical application; and network service security, including DNS, PKI/CAOps, and proxy services.
• Knowledge of security framework alignment, including mapping infrastructure patterns to NIST CSF, NIST SP 800-53, and the CIS Critical Security Controls.
• Knowledge of large-scale hybrid enterprise environments spanning physical data centers and AWS, GCP, and Azure, and of AI application development methodologies.
• Ability to translate technical risks and structural vulnerabilities into business-risk metrics, author security architecture roadmaps, lead sessions across at least four stakeholder groups, and conduct proactive architectural reviews.
• Public Trust determination required.
• High school diploma or GED.
• CCIE and CISSP certifications.

Nice To Haves

• Completion of training in Microsoft Azure.
• Completion of GCP fundamentals or associate-level training.
• Completion of AWS fundamentals or associate-level training.
• Completion of Splunk training.
• Completion of x-AI Fundamentals training.

Responsibilities

• Serve as the primary security architecture advisor.
• Lead design, threat-modeling, and remediation sessions with the CISO office, Network Engineering, Endpoint Management, and external vendors and partners.
• Author an enterprise security architecture roadmap aligned with CISO goals and business needs across edge and network defense, cloud security, transport security, endpoint protection, and certificate lifecycle management.
• Advise on planning and operations for CISO Engineering Security Edge workstreams.
• Lead proactive architecture reviews and continuous monitoring across the client's global hybrid environment to identify structural weaknesses and recommend remediation.
• Help establish and enforce infrastructure security policies.
• Advance security automation.
• Translate technical risks and structural vulnerabilities into business-risk metrics.
• Apply security governance, policies, and standards; manage security governance workstreams; and support security incident response.
• Lead sessions across at least four stakeholder groups and conduct proactive architectural reviews.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards program for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED