Enterprise Security Architect

InvestCloudOct2024; United States; Remote; USD 175,000 - 200,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability insurance

Life/AD&D insurance

FSA

HSA

Employee Assistance Plan

Health advocacy

Voluntary ancillary plans

401(k) with company match

Paid time off

Job summary

InvestCloud seeks an Enterprise Security Architect to lead security reviews of software, shape the security design of our on-prem data center, and set enterprise standards across networks, servers, storage, and privileged access. You will partner with product, infrastructure, and business teams to bake security in from the start and close gaps between specialist areas.

You bring 10+ years in cybersecurity across multiple domains, hands-on experience with on‑prem security and Thales Luna HSM,

Qualifications

• Ten or more years of cybersecurity experience across network, infra, identity, application and data security.
• Proven leadership in on-premises data center security design, segmentation and hardening.
• Experience conducting fast, practical security reviews of third-party software and SaaS.
• Strong knowledge of identity management, encryption, and key management.

Responsibilities

• Review software and services for buy decisions with clear, practical security conditions.
• Lead the security architecture of our on‑prem data center to ensure secure design and operation.
• Set enterprise security standards for networks, servers, storage, and privileged access.
• Serve as the design authority for zero-trust network access.
• Collaborate across product, infrastructure, data, and business teams to bake security in from the start.

Skills

Security architecture leadership

Identity & access management

Encryption & key management

Risk decision making

SASE platforms

NIST ISO CIS Controls

Cross-functional collaboration

Education

CISSP or SABSA certification

Tools

Thales Luna HSM

Job description

We are looking for an Enterprise Security Architect who can walk into any security conversation and make it better. You will be the senior generalist on our team: the person who reviews every software product the company wants to buy, leads the security design of our on-premises data center, and works across every department to make sure that what we do, we do securely.

You know enough about every area of cybersecurity to spot what others miss, and you know how to get to a decision quickly.

What you will do

• Review software and services the business plans to buy, and deliver clear, timely security decisions with practical conditions where needed.
• Lead the security architecture of our on-premises data center so that infrastructure, data, and applications are designed, built, and operated to a secure standard.
• Set enterprise security standards for networks, servers, virtualization, storage, backup, and privileged access.
• Serve as the design authority for zero-trust network access.
• Set identity, privileged access, and encryption standards, including oversight of our hardware security modules and customer identity service provider.
• Join project and architecture discussions across product, infrastructure, data, and business teams, and keep security built in from the start.
• Identify and close gaps that fall between specialist areas, and support our cloud and application security architects on reviews.
• Partner in reviewing products that include AI features.

What success looks like in your first year

• Every software purchase receives a clear, documented security decision quickly, so the business is never stuck waiting.
• Our data center infrastructure, data, and applications meet a written security standard, and we can prove it.
• Teams across the company invite security into projects at the start because it makes their work easier.
• Security gaps that fall between specialist areas are identified and closed.

What you bring

• Ten or more years of cybersecurity experience, with broad, hands-on depth across network, infrastructure, identity, application, and data security.
• Proven experience leading security design for on-premises data centers, including segmentation, hardening, virtualization, storage, and backup protection.
• A track record of conducting fast, practical security reviews of third-party software and SaaS.
• Strong knowledge of identity and privileged access management, encryption, and key management.
• Working knowledge of frameworks such as the NIST Cybersecurity Framework, ISO 27001, and the CIS Controls, with the ability to apply them without slowing the business.
• Experience in financial services or another regulated industry.
• The judgment to make clear risk decisions and the communication skills to explain them to executives and engineers.
• Experience with secure access service edge (SASE) platforms.
• Hands-on experience with hardware security modules such as Thales Luna.
• CISSP or an architecture certification such as SABSA.

Who you are

• You hold yourself to a world-class standard, and it shows in everything you deliver.
• You are a self-starter. You find the work that matters and finish it without being asked.
• You care about this field beyond the job description. You keep learning and building on your own because you enjoy it, and you put in the extra effort when the mission calls for it.
• You bring drive, ambition, and a positive attitude to hard problems.
• You make the people around you better. You share what you know, you never make anyone feel small, and you let your work speak for itself.

How we work

Our security team spans the United States, Romania, and India and protects the platforms that banks and wealth managers rely on every day. We hold a high bar, and we hold it together.

The people on this team own their work from start to finish, keep learning because they want to, and make the people around them better. We do not reward the loudest voice in the room. We reward the best work, delivered with respect for the people it affects.

About InvestCloud

InvestCloud, a global leader in wealth technology, aspires to enable a smarter financial future. Driving the digital transformation of the wealth management industry, the company serves a broad array of clients globally, including Wealth and Asset Managers, Wirehouses, Banks, RIAs, and Insurers. In terms of scale, the company’s clients represent more than 40 percent of the $132 trillion of total assets globally. As a leader in delivering personalization and scale across advisory programs, including unified managed accounts (UMA) and separately managed accounts (SMA), the company is committed to the success of its clients. By equipping and enabling advisors and their clients with connected technology, enhanced intelligence, and inspired experiences, InvestCloud delivers leading digital wealth management and financial planning solutions, complemented by a dynamic data warehouse, which scale across the complete wealth continuum. In 2026, InvestCloud was named CNBC World's Top Fintech Company, a proof point of the company’s commitment to innovation and client success. Headquartered in the United States, InvestCloud serves clients around the world. For more information, visit InvestCloud.com .

Our Values

• Client Connected
• Human Centered
• Respect + Integrity

The actual salary will vary based on applicant's education, experience, skills, and abilities, as well as internal equity and alignment with market data. The salary may also be adjusted based on the applicant's geographic location. Salary range: $175,000 - $200,000. Benefits include medical/Rx, dental, vision, disability, and life/AD&D insurance plans, Flexible Savings Account (FSA), Health Savings Account (HSA), Employee Assistance Plan (EAP), health advocacy, voluntary ancillary plans (accident, critical illness, hospital indemnity, legal, identity theft, auto/home, and pet insurance), 401(k) retirement savings plan with company match, and paid time off.

• medical/Rx
• dental
• vision
• disability
• and life/AD&D insurance plans
• Flexible Savings Account (FSA)
• Health Savings Account (HSA)
• Employee Assistance Plan (EAP)
• health advocacy
• voluntary ancillary plans (accident, critical illness, hospital indemnity, legal, identity theft, auto/home, and pet insurance)
• 401(k) retirement savings plan with company match
• paid time off

#LI-HJ1

Equal Opportunity Employer

This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.