Information Security Architect
About The Position
The Information Security Architect serves as the university’s senior technical security architect and a key advisor on enterprise security strategy, architecture, and engineering. Reporting to the Chief Information Security Officer, this role leads the design and integration of security controls across a complex technology environment, including cloud platforms, infrastructure, identity, applications, and research computing. The position partners closely with technical and business stakeholders to ensure security is embedded into solutions by design, aligned with institutional priorities, risk management objectives, and regulatory requirements. This role also drives security engineering innovation through automation, Infrastructure as Code, DevSecOps, and platform integration. The architect provides leadership on security reviews, technical standards, and emerging technology assessments while mentoring engineering staff and helping strengthen the overall maturity of the university’s security program.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or an equivalent combination of education and experience.
- 8-10 years of experience in cybersecurity, systems engineering, cloud engineering, DevSecOps, infrastructure engineering, or related disciplines.
- Demonstrated experience designing, implementing, and maintaining enterprise security architectures in complex organizations.
- Extensive experience with AWS, Azure, or Google Cloud Platform.
- Experience with Infrastructure as Code and automation technologies, including Terraform, OpenTofu, CloudFormation, Bicep, Ansible, Git, CI/CD platforms, and scripting languages such as Python, PowerShell, or Bash.
- Experience integrating enterprise platforms through APIs, automation frameworks, orchestration tools, and workflow development.
- Experience with security operations, including detection engineering, security automation, and Security Orchestration Automation and Response (SOAR) platforms.
- Experience designing secure research, regulated, or high-assurance computing environments.
- Experience with enterprise security technologies, security engineering practices, and modern cloud-native security controls.
- Knowledge of security standards and frameworks including NIST, ISO 27001, FERPA, HIPAA, and higher education security practices.
- Excellent technical, analytical, problem-solving, written and verbal communication skills.
- Must uphold high standards of personal and professional integrity in a position of trust.
Nice To Haves
- Experience working in higher education or similarly complex, decentralized organizations is preferred.
- Relevant industry certifications such as CISSP, CCSP, GIAC, AWS Security Specialty, Azure Security Engineer Associate, Terraform Associate, or equivalent certifications are preferred.
Responsibilities
- Develop and maintain enterprise security architectures, reference architectures, and design patterns that integrate security into technology solutions by design.
- Lead architecture and security design reviews for infrastructure, cloud, networking, identity, data, and application initiatives.
- Establish technical security standards and requirements for technology procurement, implementation, and enterprise initiatives.
- Ensure security architecture aligns with university objectives, risk tolerance, regulatory requirements, and industry best practices.
- Design and implement automation solutions using APIs, orchestration technologies, scripting languages, and Infrastructure as Code.
- Define engineering standards, reusable patterns, and technical roadmaps for enterprise security platforms.
- Lead integration efforts between security and enterprise technology platforms.
- Guide adoption of automation, DevSecOps, and Infrastructure as Code practices across the Information Security program.
- Lead security assessments of university technologies, cloud services, applications, vendors, and third-party solutions.
- Evaluate security risks associated with strategic initiatives and recommend mitigation strategies.
- Provide technical security guidance to project teams, architects, engineers, and university leadership.
- Participate in Enterprise Architecture activities and strategic technology planning.
- Support compliance, audit, privacy, and regulatory initiatives through architecture and technical review activities.
- Mentor and provide technical guidance to Security Engineers and Senior Security Engineers, building team capability and depth.
- Establish security engineering implementation guidance and operational best practices.
- Support roadmap development and security program planning.
- Contribute to development of security metrics, reporting, and maturity assessments.
- Evaluate emerging technologies, threats, and security trends, including the security roadmaps of major enterprise platforms such as Microsoft, Workday, Salesforce, and ServiceNow.
- Assess opportunities to improve security through automation, AI, analytics, and engineering innovation.
- Recommend improvements to university security capabilities and long-term technology strategy.
- Participate in professional organizations, industry working groups, and technical communities.
Benefits
- Competitive benefits package
- Unique benefit options
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
