Senior Cybersecurity Architect and Technical Lead

Caterpillar Inc.•Irving, TX

4d•Onsite

About The Position

The Senior Cybersecurity Architect and Technical Lead will use strong technical skills to design, build, and review secure enterprise architectures in complex environments. This role requires advanced knowledge of cloud, hybrid, and on-premises infrastructures, security frameworks, and cutting-edge technologies to ensure resilient, scalable, and compliant solutions. The person will serve as a trusted advisor by giving strategic guidance, performing detailed security reviews, and defining tangible remediation actions to protect critical applications, platforms, and data, while working closely with teams to ensure security supports business goals.

Requirements

Bachelor’s degree from an accredited institution
Active, nationally recognized cybersecurity certifications (e.g., CISSP, CCSP, GSEC, GCLD, GCCC, GISP) or vendor-specific certifications (e.g., AWS Solutions Architect – Professional)
Demonstrated ability in mentoring and leading small teams
Proven ability to architect secure solutions across cloud (AWS, Azure, GCP), hybrid, and on-premises environments
Proven expertise in performing technical security design reviews and applying threat modeling frameworks such as STRIDE, ATT&CK, and DREAD.
Ability to identify systemic gaps and develop precise, executable remediation plans
Advanced knowledge of secure software development lifecycles (SSDLC), identity and access management (IAM), cryptography, and API security
Experience implementing regulatory and industry standards (NIST 800-53, ISO 27001, PCI-DSS) into practical architectural controls
Strong knowledge of security frameworks and standards (NIST, ISO, CIS)
Excellent analytical and problem-solving skills with ability to provide actionable technical recommendations
Strong communication, leadership, and interpersonal skills
Ability to interact effectively with senior management
Practical experience using Agile/Scrum methodologies
Stay informed on emerging threats, technologies, and compliance requirements to strengthen security posture.
Planning: Tactical, Strategic: Knowledge of effective planning techniques and ability to contribute to operational (short term), tactical (1-2 years) and strategic (3-5 years) planning in support of the overall business plan.
Communicating Complex Concepts: Knowledge of effective presentation tools and techniques to ensure clear understanding; ability to use summarization and simplification techniques to explain complex technical concepts in simple, plain language appropriate to the audience.
Consulting: Knowledge of techniques, roles, and responsibilities in providing technical or business guidance to clients, both internal and external; ability to apply consulting knowledge appropriately.
Cybersecurity Standards and Policies: Knowledge of developing cybersecurity policies, standards, and procedures; ability to develop and communicate policies, standards and procedures that guide interactions with customers.
Cybersecurity Risk Management: Knowledge of tools, techniques, approaches, and processes of cybersecurity risk management; ability to ensure organizational network operation and minimize negative effect by cybersecurity risks.
Information Security Technologies: Knowledge of technologies and technology-based solutions dealing with information security issues; ability to protect information security across the organization using encryption technologies and appropriate security software.

Responsibilities

Design and review secure enterprise architectures aligned with industry’s best practices and organizational security standards.
Provide technical leadership and guidance on cybersecurity principles for applications and platforms.
Identify vulnerabilities and provide effective remediation strategies to mitigate risks.
Perform technical security design reviews utilizing threat modeling frameworks such as STRIDE.
Collaborate with cross-functional teams to embed security into system and application development lifecycles.
Provide technical leadership and mentorship to cybersecurity team members.
Translate regulatory and industry standards into practical architectural controls
Utilize tools like ServiceNow and Azure DevOps for workflow automation, ticketing, and project tracking.