Enterprise Cybersecurity Architect

BravoTECH; Dallas (TX); Hybrid; USD 150,000 - 190,000; Full time

Job summary

BravoTECH is seeking an Enterprise Cybersecurity Architect for a hybrid role based in Dallas, TX. You will shape secure, resilient technology across IT and OT environments, creating practical security blueprints and guiding complex decisions.

You’ll influence leaders and delivery teams with risk-informed recommendations. You will lead architecture reviews across cloud, SaaS, applications, identity, data, network, automation, AI, and OT initiatives, helping reduce risk and align with business

Qualifications

• 8+ years in cybersecurity, IT infrastructure, cloud security, or related fields.
• 4+ years in a security/technology architecture role developing standards or roadmaps.
• Direct experience supporting oil and gas industries is preferred.

Responsibilities

• Define and improve enterprise security architecture standards and guardrails.
• Lead security architecture reviews for cloud, SaaS, applications, identity, data and network initiatives.
• Identify design risks and document tradeoffs, recommendations and residual risk.
• Create repeatable architecture patterns and technical roadmaps to reduce risk.
• Explain architecture options to senior leaders to drive alignment.

Skills

Security architecture

Cloud security

Executive communication

Cross-functional leadership

Risk assessment

Tools

Microsoft technologies

Azure

Snowflake

CrowdStrike

Job description

Enterprise Cybersecurity Architect - Hybrid in Dallas, TX

Help shape secure, resilient technology across IT and operational technology environments. We’re seeking a strategic cybersecurity architect who can create practical security blueprints, guide complex technology decisions, and influence leaders and delivery teams through clear, risk-informed recommendations.

What you’ll do

Define and improve enterprise security architecture standards, reference architectures, guardrails, and secure-by-design practices. Lead security architecture reviews for cloud, SaaS, applications, identity, data, network, automation, AI, and OT initiatives. Identify design risks and control gaps; document tradeoffs, recommendations, and residual-risk considerations. Create repeatable architecture patterns and technical roadmaps that reduce risk and support business objectives. Partner with technical and business stakeholders, including senior leaders, to explain architecture options and drive alignment. Guide security architecture across IT/OT convergence, industrial environments, segmentation, remote access, cloud, data platforms, and integrations. Support threat modeling, risk assessments, control alignment, and continuous improvement of the architecture function.

Required qualifications

8+ years of experience in cybersecurity, IT infrastructure, cloud security, security engineering, enterprise architecture, solution architecture, OT security, or a related field. 4+ years in a security or technology architecture role developing standards, design patterns, reference architectures, governance practices, or roadmaps. Direct experience supporting the oil and gas industry. Hands-on experience with Microsoft technologies, Azure, Snowflake, and CrowdStrike. Experience translating business, technical, regulatory, and risk requirements into actionable security architecture guidance. Experience leading architecture reviews, documenting design decisions and tradeoffs, and advising stakeholders without direct authority. Knowledge of security architecture across multiple domains, such as identity, cloud, network, endpoints, data, applications, SaaS, integrations, OT, or cyber-physical systems. Strong communication, facilitation, relationship-building, and executive presentation skills.

Preferred qualifications

Experience in manufacturing, industrial, critical infrastructure, or OT security environments. Experience with threat modeling, cyber risk assessments, control maturity, and security roadmap development. Familiarity with frameworks such as NIST CSF, C2M2, CIS, ISO 27001, TOGAF, SABSA, or ISA/IEC 62443. Experience with Zero Trust, SSE/SASE, AI security, APIs, cloud-native platforms, automation, or machine identities. Relevant certifications such as CISSP, CCSP, TOGAF, SABSA, GIAC, or ISA/IEC 62443.