Security Architect, Cloud & Emerging Technology

Alkermes•Waltham, MA

3d•$165,000 - $185,000•Hybrid

About The Position

We are seeking a highly motivated and experienced Security Architect, Cloud & Emerging Technology. Reporting to the Associate Director of Information Security, this individual contributor role will help shape how we securely adopt and implement cloud services, artificial intelligence platforms, Large Language Models (LLMs), and modern software delivery practices across the enterprise. The successful candidate will partner with Enterprise Architecture, Infrastructure, Engineering, and Data Science teams to establish security standards, implement guardrails, conduct architecture reviews, and enable the secure adoption of emerging technologies while aligning with organizational risk and compliance requirements. The successful candidate will be comfortable going deep technically, but also able to explain risk and recommendations in a way that business and technical leaders can act on.

Requirements

BS/BA in Computer Science, Information Technology, or another related field
Minimum 10 years’ experience in IT or Information Security with at least 6 years in Security Architecture\Engineering
Experience evaluating, securing, or governing AI/ML Security, MLOps Security and GenAI technologies within enterprise environments
Expertise in AI security concepts: prompt injection, model exploitation, adversarial attacks, prompt-based exfiltration, data leakage risks, and agent misbehavior
Proven experience evaluating and securing AI\ML systems, including generative AI and LLM deployments in enterprise environments
Experience developing and implementing AI governance frameworks
Deep hands-on experience in AWS Cloud Security capabilities including IAM, Organizations, SCPs, VPC security, CloudTrail, GuardDuty, Security Hub, KMS, logging, monitoring, and security automation.
Solid background in cybersecurity engineering: IAM, network security, DLP, encryption, monitoring, incident response and threat modelling.
Strong understanding of DevSecOps principles, CI/CD security, software supply-chain security, and secure software development practices.
Experience defining, implementing, and continuously enhancing security capabilities within CI/CD and DevSecOps platforms, with a strong focus on shift-left security, automation, vulnerability management, and software supply chain security.
Solid knowledge and understanding of security regulations and best practices such as SOX, HIPAA, CIS, ISO/IEC 42001, EU AI Act etc.
Excellent oral and written communication and presentation skills
Quality-focused individual with strong organizational skills
Must have necessary interpersonal skills to interface effectively with all levels in the organization
High integrity with a strong all-around set of business and technical skills
Ability to influence change across multiple groups, and levels
Ability to work in a face-paced environment and follow processes and procedures with accuracy and attention to detail
Problem solving and analytical abilities including the ability to critically evaluate information gathered from multiple sources, reconcile conflicts, decompose high-level information into details and apply sound business knowledge.
Ability to multi-task and handle on a proactive basis, changing priorities in a fast-paced environment to maximize time-management and efficiencies.
Ability to work independently with minimal direction; must be a self-starter/self-motivated

Nice To Haves

AWS Certified Security Specialty, AWS Certified Solutions Architect Professional, CISSP, CCSP, or equivalent certifications strongly preferred.

Responsibilities

Serve as the lead security architect for cloud, AI, and emerging technology initiatives across the enterprise
Partner with Enterprise Architecture, Infrastructure and Data Science teams to ensure security requirements are incorporated into solution designs from inception
Conduct security architecture reviews for system migrations, new platform deployments, and strategic technology initiatives
Help define and mature the security roadmap for all cloud platforms and emerging technologies.
Expand and mature enterprise-level AI security guardrails for LLMs, MCP\A2A’s, agentic workflows, and internal AI tools (chatbots, scientific ML models) and integrations
Partner with AI Advisory and technical teams to conduct technical validation of AI opportunities and design secure end-to-end AI delivery pipelines.
Support the review and approval process for AI model usage, AI risk assessments, and third party AI components such as models, datasets, embeddings, API’s, etc.
Configure SIEM rules and observability tools to detect anomalous LLM behavior, unauthorized data access, and guardrail breaches in real-time.
Lead the evaluation, design, and implementation of advanced security capabilities within CI/CD pipelines and software delivery platforms, continuously improving DevSecOps maturity and reducing software supply chain risk
Evaluate and prioritize security findings identified through SAST, DAST, SCA, container scanning, cloud security tooling, and software supply-chain assessments.
Participate in IT change management forums, providing subject matter expertise on cloud security, AI Security, DevSecOps, and emerging technology risks
Monitor industry trends, threat intelligence and regulatory developments, and emerging technologies to identify opportunities and risks impacting the organization.
Present technical recommendations and risk assessments to senior leadership, governance boards, and project stakeholders.