Senior Information Security Architect

Verisign•Reston, VA

7d•Hybrid

About The Position

The Senior Information Security Architect is a senior individual-contributor role responsible for shaping enterprise security strategy, reference architectures, standards, and technical requirements across Verisign. The role leads high-impact design decisions, resolves complex security challenges across technology domains, and advises engineering and executive leaders on risk, tradeoffs, and long-term technology direction. Working across security engineering, infrastructure, application development, cloud, data, and AI teams, the architect ensures security is incorporated into critical services from concept through production implementation. The position guides defense across a hybrid technology ecosystem, including on-premises architecture, cloud platforms, application pipelines, and emerging enterprise AI workloads. The role is based in Verisign’s Reston, Virginia office and follows a hybrid work schedule.

Requirements

Bachelor’s degree in computer science, cybersecurity, engineering, or a related technical field, or equivalent practical experience.
10 or more years of broad information security experience, including significant experience with security architecture and design for complex enterprise environments.
Demonstrated expertise in security architecture and secure networking, cloud, on-premises and cloud identity, endpoint, application security, data protection, and detection and response.
Proven ability to lead threat modeling and architecture reviews and make consequential technical decisions for high-value or high-availability systems.
Working knowledge of AI/ML architecture and security, including secure MLOps, model and data governance, generative AI, RAG, AI agents, prompt injection, model supply-chain risk, sensitive-data exposure, access controls, and monitoring.
Ability to translate complex technical risk into clear recommendations for engineering teams, business stakeholders, and executive leaders.
Strong cross-functional leadership, facilitation, written communication, and mentoring skills, with a record of influencing decisions without direct authority.

Nice To Haves

Advanced experience with vulnerability assessment, security risk analysis, and risk-based prioritization.
Expertise in application security, secure software development, OWASP Top 10, and OWASP Top 10 for Large Language Model Applications.
Experience designing security for public cloud and hybrid environments, infrastructure as code, and CI/CD pipelines.
Familiarity with frameworks such as NIST CSF, NIST AI RMF, MITRE ATT&CK, or MITRE ATLAS.
Relevant certifications such as CISSP, CCSP, SABSA, or equivalent.

Responsibilities

Define enterprise security architecture strategy, principles, reference architectures, reusable patterns, and multi-year roadmaps across network, endpoint, identity, application, cloud, container, data, and detection and response domains.
Lead security architecture engagements for complex, high-risk, cross-functional programs, translating business objectives, threat intelligence, and risk appetite into scalable technical controls and design requirements.
Establish architecture and security requirements for AI/ML systems, including secure MLOps, model and data lifecycle protection, identity and authorization, platform isolation, model provenance, monitoring, privacy, and responsible-use guardrails.
Review generative and agentic AI designs—including RAG, vector databases, third-party models, APIs, plugins, tools, and autonomous actions—and identify controls for risks such as prompt injection, data leakage, excessive agency, insecure output handling, and AI supply-chain compromise.
Perform threat modeling, architecture reviews, and security design assessments for critical systems and emerging technologies; document risk decisions and guide remediation or compensating controls.
Identify systemic security-posture gaps, develop prioritized recommendations and investment roadmaps, and communicate technical risk and tradeoffs to executive leadership.
Evaluate security technologies and vendors, guide proofs of concept, and ensure proposed solutions are interoperable, supportable, measurable, and aligned with strategic architecture.