15+ years of progressive experience in information technology or cybersecurity, including significant experience architecting and delivering enterprise security solutions in highly regulated environments such as financial services or U.S. government organizations.
Proven track record designing and implementing scalable enterprise security architectures and leading complex, cross-domain security transformation initiatives.
Broad expertise across identity and access management, cloud security, network security, application security, data protection, endpoint security, security operations, and third-party integrations.
Demonstrated experience developing security principles, reference architectures, reusable patterns, standards, roadmaps, and technical design documentation.
Strong knowledge of security architecture and risk frameworks, including NIST CSF, NIST 800-53, ISO 27001, CIS Controls, Zero Trust, and secure-by-design principles.
Experience conducting threat modeling, architecture reviews, risk assessments, and control-gap analyses, and translating findings into practical remediation plans.
Hands-on experience securing cloud, hybrid, and on-premises environments;
We require deep technical knowledge of identity and access management. This includes Microsoft Entra ID, Active Directory, privileged access management, identity governance, federation, and modern authentication.
Working knowledge of modern security technologies is essential. This includes SIEM, EDR/XDR, DLP, vulnerability management, encryption and key management, API security, network segmentation, SASE/SSE, and DevSecOps controls.
Experience evaluating latest technologies, including artificial intelligence and SaaS platforms, and defining proportionate security requirements for data, identity, integrations, and third-party services.
Experience resolving ambiguity and gaining alignment among senior technical and business stakeholders.
Experience working with Agile delivery teams and embedding security architecture into the software and technology delivery lifecycle.
Bachelor's degree in Information Security, Information Technology, Computer Science, Engineering, or a related field, or equivalent practical experience.
Must be eligible to obtain and maintain a U.S. government Top Secret security clearance, as required for the role.