VP, Architecture - Security

Fidelity•Westlake, TX

1d•Onsite

About The Position

Fidelity Enterprise Security Solution Architecture team is seeking a Vice President of Security Architecture to define and drive secure identity architecture providing cross cutting designs, patterns, standards and guidelines. Modern access paths span workforce users, external customers, privileged administrators, service accounts, APIs, AI agents, cloud roles, SaaS platforms, and machine identities. Decisions about authentication, authorization, privileged access, federation, secrets, identity lifecycle, and access governance will further enhance the security for our customers and platforms. The role will provide a critical bridge between IAM engineering, BU application teams, cloud/platform engineering, risk, compliance, and security operations. This role within the Enterprise Security Architecture team is positioned to evaluate identity as an enterprise domain: how identities are created, trusted, elevated, monitored, and revoked across the environment. The position provides technical and strategic vision and leadership for complex, multi-year initiatives, influencing product roadmaps, guiding the secure integration of our identities and creating enterprise security blueprints. It requires deep expertise in cloud, web, APIs, and modern architecture, along with strong strategic thinking and cross-functional collaboration to advance Fidelity’s cybersecurity innovation, reduce complexity, and strengthen customer protection.

Requirements

Enterprise identity strategy and architecture across workforce, customer, partner, non-human, machine, and AI-agent identities, including governance, lifecycle, trust relationships, and identity security controls.
Identity data and identifier architecture, including authoritative sources, identity correlation, unique identifier strategies, and secure identity-sharing patterns across enterprise platforms.
Security architecture patterns and governance controls for AI agents, machine identities, service accounts, workloads, APIs, and autonomous systems.
Identity threat models and risk assessments for high-risk platforms, privileged workflows, critical applications, and cloud environments.
Identity-related security control requirements mapped to regulatory, audit, and internal policy expectations.
Exception review and risk disposition for identity security deviations, compensating controls, and remediation plans.
Partnership model with IAM engineering, application teams, cloud/platform teams, security operations, GRC, audit, and enterprise architecture.
Roadmap input for IAM, PAM, IGA, CIAM, Authorization, secrets management, certificate management, and cloud entitlement management capabilities.
Reusable architecture patterns, guardrails, and decision records that delivery teams can apply consistently.
Ability to translate business objectives into cohesive technical and security architectures aligned with enterprise standards.
Demonstrated success in building proofs of concept and delivering pragmatic, end-to-end solutions with clear adoption and migration plans.
Proven leadership in defining and evolving security strategies while influencing cross-functional teams and driving enterprise adoption.
Experience leading security architecture efforts, guiding engineering teams, and ensuring the implementation of security best practices.
Strong foundation in software engineering and continuous delivery practices.
Excellent communication, collaboration, and problem-solving skills.
Minimum of 10 years of industry experience in architecting distributed systems and applications.

Nice To Haves

Relevant certifications such as CISSP, CISA, CCSP, AWS Security Specialty, or AWS Certified Solutions Architect preferred.

Responsibilities

Define and drive secure identity architecture providing cross cutting designs, patterns, standards and guidelines.
Evaluate identity as an enterprise domain: how identities are created, trusted, elevated, monitored, and revoked across the environment.
Provide technical and strategic vision and leadership for complex, multi-year initiatives.
Influence product roadmaps.
Guide the secure integration of our identities and create enterprise security blueprints.
Advance Fidelity’s cybersecurity innovation, reduce complexity, and strengthen customer protection.
Define enterprise identifier, identity-sharing, and authoritative source strategies to support secure, consistent identity management across platforms and business domains.
Develop security architecture patterns and governance controls for AI agents, machine identities, service accounts, workloads, APIs, and autonomous systems.
Conduct identity threat models and risk assessments for high-risk platforms, privileged workflows, critical applications, and cloud environments.
Map identity-related security control requirements to regulatory, audit, and internal policy expectations.
Manage exception review and risk disposition for identity security deviations, compensating controls, and remediation plans.
Establish a partnership model with IAM engineering, application teams, cloud/platform teams, security operations, GRC, audit, and enterprise architecture.
Provide roadmap input for IAM, PAM, IGA, CIAM, Authorization, secrets management, certificate management, and cloud entitlement management capabilities.
Create reusable architecture patterns, guardrails, and decision records that delivery teams can apply consistently.
Translate business objectives into cohesive technical and security architectures aligned with enterprise standards.
Build proofs of concept and deliver pragmatic, end-to-end solutions with clear adoption and migration plans.
Lead security architecture efforts, guide engineering teams, and ensure the implementation of security best practices.