Security Architect - Hybrid

SWIFT•Manassas, VA

9d•Hybrid

About The Position

We’re the world’s leading provider of secure financial messaging services, headquartered in Belgium. We are the way the world moves value – across borders, through cities and overseas. No other organisation can address the scale, precision, pace and trust that this demands, and we’re proud to support the global economy. We’re unique too. We were established to find a better way for the global financial community to move value – a reliable, safe and secure approach that the community can trust, completely. We’re always striving to be better and are constantly evolving in an ever-changing landscape, without undermining that trust. Five decades on, our vibrant community reflects the complexity and diversity of the financial ecosystem. We innovate diligently, test exhaustively, then implement fast. In a connected and exciting era, our mission has never been more relevant. Swift now has a presence in 200+ countries and legal territories to serve a community of more than 12,000 banks and financial institutions. We are seeking a highly skilled and experienced Security Architect to design, implement, and maintain robust security solutions for Swift's critical financial messaging infrastructure. This role is pivotal in ensuring the confidentiality, integrity, and availability of our systems and data in a constantly evolving threat landscape.

Requirements

Bachelor’s Degree in Computer Science, Information Technology, or a related field
Minimum 10 years of progressive experience in information security, with at least 5-7 years specifically in a security architecture role
Proven experience as a Security Architect or similar role in a large-scale enterprise environment.
Expertise in defining architectural blueprints, reference architectures, and principles, with a strong focus on security and scalability
Understanding of enterprise security architectures, including Identity Credentialing & Access Management (ICAM), network security, and application security
Proficiency in enterprise architecture frameworks and security best practices
Excellent communication and interpersonal skills, with the ability to collaborate effectively across diverse teams and stakeholders.
Strategic thinking and problem-solving abilities, with a focus on driving business outcomes through secure, innovative technology solutions.

Nice To Haves

Master’s Degree
Relevant industry certifications such as CISSP, CISM, or TOGAF

Responsibilities

Lead the development and governance of secure-by-design architecture across infrastructure, identity, application, and network platforms in hybrid enterprise environments
Embed Zero Trust principles into enterprise architecture standards, ensuring identity is the primary trust anchor and access decisions are continuously verified
Establish and maintain reference architectures, high-level designs, reusable blueprints, and security control guardrails that apply consistently across organization
Define and govern identity and access control strategies, including centralized authentication, MFA, conditional access, least privilege enforcement, and privileged access management
Architect and advance segmentation strategies, Zero Trust Network Access (ZTNA), and secure connectivity patterns to prevent lateral movement and reduce attack surface
Integrate security controls into cloud and on-prem infrastructure platforms, including secure configuration standards, workload protection, secrets management, and runtime enforcement
Partner with application, DevOps, platform engineering, and infrastructure teams to integrate security controls into CI/CD pipelines, platform deployments, and operational workflows
Ensure all platforms generate standardized and actionable security telemetry to support monitoring, threat detection, incident response, and continuous compliance validation
Ensure alignment to enterprise security frameworks, regulatory obligations, and operational resilience requirements, including NIST, CIS, ISO, PCI, and GDPR
Support technology selection, evaluation, and strategic road mapping to ensure platforms evolve in alignment with Zero Trust, cost-effectiveness, and operational maturity