Principal Security Architect

LPL Financial•Fort Mill, SC

1d•$153,470 - $255,749•Hybrid

About The Position

LPL Financial’s Information Security team is seeking a Principal Security Architect to contribute to Cloud, on-premises, and data security architecture projects. The role partners with Development, Operations, Business units, and Enterprise Architecture to help ensure environments are secured and monitored. It calls for broad technical cloud security expertise focused on security design, detection, prevention, and response to threats. The Principal Security Architect leads security architecture design and innovation, creates reusable security patterns, and develops standards and policies aligned with industry practices and regulatory requirements. The role also addresses API security, cybersecurity frameworks, risk and threat management, incident response, and security for machine-learning models and AI pipelines. The position collaborates with stakeholders to align security initiatives with business objectives while supporting business agility and growth.

Requirements

At least 3 years of experience in secure architecture designs.
At least 8 years of experience with information security controls, guidelines, and standards, such as ISO 27000 series, OWASP, CSA CCM, CIS 20 Critical Security Controls, SOX, and NIST.
Self-driven, flexible, and skilled in consulting, negotiating, communicating, consensus building, and presenting.
Ability to remain calm under pressure while managing multiple tasks.
Demonstrated ability to learn from mistakes and apply constructive feedback to improve performance.

Nice To Haves

Bachelor’s degree or equivalent years of experience.
Technical knowledge or coding skills in Java, C# .NET, Ruby, and/or Python.
In-depth knowledge of AWS core services, including EC2, S3, IAM, and VPC, and security services such as security groups, ACLs, AWS Security Hub, AWS WAF, and Amazon GuardDuty.
Working knowledge of Terraform, CloudFormation, Pulumi, and/or Ansible.
Experience securing scalable web architectures and distributed systems.
Understanding of malware, emerging threats, attacks, and vulnerability management.
CCSP or another cloud-specific certification, CISSP, and/or GIAC certification.
AI/ML security experience, including a proven record of securing machine-learning models and AI pipelines in financial services.
Proficiency in ML algorithms, deep-learning frameworks, AI ethics, and AI/ML security controls.
Expertise in OAuth, OpenID Connect, and JWT; proficiency in API threat modeling and automated security testing.

Responsibilities

Secure APIs through access controls, OAuth, JWT, and API gateway security configurations.
Develop reusable security design patterns for common cybersecurity challenges across technology stacks and business domains.
Create clear security standards and policies aligned with industry best practices and regulatory requirements, while remaining adaptable to emerging technologies.
Lead the design and innovation of security architectures that protect against evolving threats and support business agility and growth.
Collaborate with stakeholders to align security initiatives with business objectives and integrate them across the organization.
Apply expertise in cybersecurity frameworks, network and cloud security, identity management, encryption, zero-trust architecture, and secure DevOps practices.
Perform threat modeling, risk assessment, and vulnerability management; contribute to SIEM implementation, log analysis, and incident response in complex enterprise settings.
Conduct threat analysis using intelligence and analytics to proactively identify and mitigate security risks.
Implement and oversee a risk management framework that balances security investments with business needs.
Secure machine-learning models against adversarial attacks, protect data privacy in AI training sets, and apply ethical AI principles in security applications.
Develop secure AI/ML pipelines, including model integrity verification, secure feature engineering, and anomaly detection in AI-driven systems.