Enterprise Security Architect

InvestCloud, Inc.; United States; On-site; USD 175,000 - 200,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) with company match

Paid time off

Flexible Savings Account (FSA)

Job summary

InvestCloud is seeking an Enterprise Security Architect to lead security design across the company’s on-premises data center and product reviews. You will be the senior generalist, shaping secure choices across departments and ensuring robust protections from the start.

You will drive identity and access controls, encryption standards, and zero-trust initiatives, while collaborating with product, infrastructure, and data teams to close gaps and strengthen overall security posture.

Qualifications

• Ten or more years of cybersecurity experience across network, infrastructure, identity, application, and data security.
• Proven leadership of security design for on-premises data centers, including segmentation and hardening.
• Experience conducting fast, practical security reviews of third-party software and SaaS.
• Strong knowledge of identity, privileged access management, encryption, and key management.

Responsibilities

• Review software and services planned for purchase and provide clear security decisions with practical conditions.
• Lead security architecture of on-premises data center ensuring secure design, build, and operation of infrastructure, data, and apps.

Skills

Security architecture

On-premises data centers

Zero-trust network

Identity and access management

Encryption and key management

Frameworks: NIST/ISO/CIS

Financial services experience

Executive communication

Education

CISSP or SABSA certification

Tools

Thales Luna HSM

Job description

We are looking for an Enterprise Security Architect who can walk into any security conversation and make it better. You will be the senior generalist on our team: the person who reviews every software product the company wants to buy, leads the security design of our on-premises data center, and works across every department to make sure that what we do, we do securely.

You know enough about every area of cybersecurity to spot what others miss, and you know how to get to a decision quickly.

What You Will Do

• Review software and services the business plans to buy, and deliver clear, timely security decisions with practical conditions where needed.
• Lead the security architecture of our on-premises data center so that infrastructure, data, and applications are designed, built, and operated to a secure standard.
• Set enterprise security standards for networks, servers, virtualization, storage, backup, and privileged access.
• Serve as the design authority for zero-trust network access.
• Set identity, privileged access, and encryption standards, including oversight of our hardware security modules and customer identity service provider.
• Join project and architecture discussions across product, infrastructure, data, and business teams, and keep security built in from the start.
• Identify and close gaps that fall between specialist areas, and support our cloud and application security architects on reviews.
• Partner in reviewing products that include AI features.

What Success Looks Like In Your First Year

• Every software purchase receives a clear, documented security decision quickly, so the business is never stuck waiting.
• Our data center infrastructure, data, and applications meet a written security standard, and we can prove it.
• Teams across the company invite security into projects at the start because it makes their work easier.
• Security gaps that fall between specialist areas are identified and closed.

What You Bring

• Ten or more years of cybersecurity experience, with broad, hands-on depth across network, infrastructure, identity, application, and data security.
• Proven experience leading security design for on-premises data centers, including segmentation, hardening, virtualization, storage, and backup protection.
• A track record of conducting fast, practical security reviews of third-party software and SaaS.
• Strong knowledge of identity and privileged access management, encryption, and key management.
• Working knowledge of frameworks such as the NIST Cybersecurity Framework, ISO 27001, and the CIS Controls, with the ability to apply them without slowing the business.
• Experience in financial services or another regulated industry.
• The judgment to make clear risk decisions and the communication skills to explain them to executives and engineers.

Bonus points

• Experience with secure access service edge (SASE) platforms.
• Hands-on experience with hardware security modules such as Thales Luna.
• CISSP or an architecture certification such as SABSA.

Who You Are

• You hold yourself to a world-class standard, and it shows in everything you deliver.
• You are a self-starter. You find the work that matters and finish it without being asked.
• You care about this field beyond the job description. You keep learning and building on your own because you enjoy it, and you put in the extra effort when the mission calls for it.
• You bring drive, ambition, and a positive attitude to hard problems.
• You make the people around you better. You share what you know, you never make anyone feel small, and you let your work speak for itself.

How We Work

Our security team spans the United States, Romania, and India and protects the platforms that banks and wealth managers rely on every day. We hold a high bar, and we hold it together.

The people on this team own their work from start to finish, keep learning because they want to, and make the people around them better. We do not reward the loudest voice in the room. We reward the best work, delivered with respect for the people it affects.

About InvestCloud

InvestCloud, a global leader in wealth technology, aspires to enable a smarter financial future. Driving the digital transformation of the wealth management industry, the company serves a broad array of clients globally, including Wealth and Asset Managers, Wirehouses, Banks, RIAs, and Insurers. In terms of scale, the company’s clients represent more than 40 percent of the $132 trillion of total assets globally. As a leader in delivering personalization and scale across advisory programs, including unified managed accounts (UMA) and separately managed accounts (SMA), the company is committed to the success of its clients. By equipping and enabling advisors and their clients with connected technology, enhanced intelligence, and inspired experiences, InvestCloud delivers leading digital wealth management and financial planning solutions, complemented by a dynamic data warehouse, which scale across the complete wealth continuum. In 2026, InvestCloud was named CNBC World’s Top Fintech Company, a proof point of the company’s commitment to innovation and client success. Headquartered in the United States, InvestCloud serves clients around the world. For more information, visit InvestCloud.com.

Our Values

• Client Connected
• Human Centered
• Technology Forward
• Respect + Integrity
• Excellence

The actual salary will vary based on applicant's education, experience, skills, and abilities, as well as internal equity and alignment with market data. The salary may also be adjusted based on the applicant’s geographic location. Salary range: $175,000 - $200,000. Benefits include medical/Rx, dental, vision, disability, and life/AD&D insurance plans, Flexible Savings Account (FSA), Health Savings Account (HSA), Employee Assistance Plan (EAP), health advocacy, voluntary ancillary plans (accident, critical illness, hospital indemnity, legal, identity theft, auto/home, and pet insurance), 401(k) retirement savings plan with company match, and paid time off.