Cybersecurity Enterprise Architect

nelnet; Centennial (CO); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Hybrid work option

Job summary

Nelnet is seeking a senior cybersecurity architect to lead secure-by-design design across AWS/Azure/GCP, hybrid environments, and on-prem systems. You will shape security posture for critical infrastructure and mentoring teams in secure development practices.

Responsibilities include defining standards for IAM, CSPM, and AI governance, collaborating with IT, CloudOps and Data Science to enable safe digital transformation across the enterprise.

Qualifications

• Bachelor's degree in Information Security or related field.
• At least 10 years of experience in information security and security architecture.
• Experience with AI/ML security and cloud security best practices.

Responsibilities

• Architect and implement secure-by-design cybersecurity components across cloud and on-prem systems.
• Define and enforce secure cloud adoption, IAM, network segmentation standards.
• Design AI/ML cybersecurity strategies including model poisoning risks.
• Lead secure integration of AI into cloud-native platforms and DevSecOps pipelines.
• Collaborate with IT, CloudOps, Security, Data Science, and business units to align designs with enterprise goals.
• Lead security architecture reviews and cloud adoption efforts, including migrations and third-party integrations.
• Communicate the value and necessity of cybersecurity architecture across leadership and lines of business.

Skills

Security Architecture

Cloud Security

AI/ML Security

DevSecOps

Threat Modeling

Multi-Cloud

Compliance

Education

Bachelor's degree in Information Security or related field

Tools

AWS

Azure

GCP

Job description

Nelnet is a diversified and innovative company committed to enriching lives through the power of service as a student loan servicer, professional services company, consumer loan originator and servicer, payments processor, renewable energy solutions, and K-12 and higher education expert. For over 40 years, Nelnet has been serving its customers, associates, and communities.

The perks of working at Nelnet go beyond our benefits package. When you join the Nelnet team, you're part of a community invested in the success of each individual. That support comes through in our work, as we are united by our mission of creating opportunities for people where they live, learn, and work.

Work with a team of experts to architect, design, and lead the implementation of enterprise-scale cybersecurity solutions that protect critical infrastructure, data, and AI-enabled systems across complex, multi-cloud environments (AWS, Azure, GCP). This role serves as a key architect and evangelist for secure digital transformation, ensuring consistent and scalable protection strategies across traditional, cloud-native, and AI-driven platforms. Provides both deep technical leadership and strategic influence across the organization, mentoring teams and driving innovation in both security architecture and emerging technology adoption.

This position requires work in support of the Company's contract with the United States Department of Education ("ED"). As such, the United States Government requires that any applicant for this position must complete United States Government security clearance. Effective June 1, 2018, ED has informed Nelnet that security clearance applications for foreign nationals are not being accepted or processed. In light of this direction from ED, Nelnet will be unable to hire applicants without United States citizenship for such positions.

This position offers a hybrid work option. Nelnet values flexibility and understands the importance of work-life integration. Our hybrid work environment allows associates within 30 miles of an office to work remotely for part of the week, while also fostering collaboration and team connection through in-office presence.

Please note that we are unable to provide visa sponsorship for this position. To be considered, candidates must already be authorized to work in the United States without the need for current or future sponsorship as security clearance is required.

JOB RESPONSIBILITIES:

• Architect and implement secure-by-design cybersecurity components in enterprise-wide systems, including those incorporating AI/ML technologies across cloud platforms (AWS, Azure, GCP), hybrid environments and on-prem infrastructure.
• Define and enforce architectural standards for secure cloud adoption, container security, identity and access management (IAM), network segmentation, and integration of AI models, services, and data pipelines into business processes and products.
• Design cybersecurity strategies that integrate AI/ML components securely, addressing risks such as model poisoning, adversarial inputs, and data exposure.
• Lead the secure integration of AI into cloud-native platforms and DevSecOps pipelines, including AI model deployment, governance, and monitoring.
• Address complex challenges in security, integration, interoperability, and multi-cloud or hybrid platforms, including secure AI lifecycle management.
• Act as a technical expert on security architecture for traditional systems and next-gen platforms using generative AI, large language models (LLMs), and machine learning.
• Serve as a technical expert in security architecture, including cloud workload protection, cloud security posture management (CSPM), and compliance alignment.
• Collaborate with IT, CloudOps, Security, Data Science, and business units to ensure secure system design aligned to enterprise goals.
• Lead security architecture reviews and cloud adoption efforts, including migrations, SaaS evaluations, and third-party integrations.
• Influence strategic direction by communicating the value and necessity of cybersecurity architecture-including emerging AI risk-across leadership, IT, and business lines.

ADDITIONAL RESPONSIBILITIES :

• Define reference architectures and security patterns for securing AI/ML pipelines on cloud platforms.
• Guide the application of Zero Trust principles to multi-cloud environments, identity management, and federated data systems.
• Contribute to the development and enforcement of enterprise cloud security policies, standards, and compliance controls (e.g., NIST, ISO, FedRAMP, SOC 2).
• Stay ahead of evolving cloud and AI security trends, regulatory requirements (e.g. NIST), and best practices.
• Coach and mentor both engineers and architects on secure development practices for cloud-native and AI-enabled applications.

EDUCATION:

• Bachelor's degree in Information Security or related field and/or equivalent combination of education and experience.

EXPERIENCE:

• At least 10 years of experience in