Enterprise Security Architect — Cloud, AI & Zero Trust

bessemer; Port Reading (NJ); Hybrid; USD 145,000 - 185,000; Full time

Benefits offered by this job

Hybrid work environment

401(k) with profit-sharing

Tuition reimbursement

Medical, dental, and vision plans

Life insurance and disability coverage

PTO and parental leave

Job summary

Bessemer Trust in New Jersey is seeking an Information Security Architect to design and enable secure enterprise technology across cloud, data, identity, and AI platforms.

You will work with Infrastructure, Cloud Engineering, Enterprise Architecture, and Development teams to integrate security into enterprise systems, define standards, and build scalable controls that align with regulatory requirements.

Qualifications

• Bachelor's degree required.
• 8+ years of experience in cybersecurity, security architecture, cloud security, or related technical disciplines.
• Strong experience designing and implementing enterprise security architectures and technical security standards.
• Familiarity with AI security concepts and secure AI platform adoption.
• Deep knowledge of AWS, Azure, hybrid cloud environments, and cloud-native security capabilities.
• Experience with Zero Trust architecture, ZTNA, micro segmentation, and endpoint security technologies.
• Hands-on experience with identity security concepts including SSO, MFA, federation, PAM, RBAC/ABAC, and identity governance.
• Experience with CI/CD security, API security, threat modeling, and secure SDLC practices.
• Experience with EDR/XDR, SIEM, DLP, CSPM, and cloud-native security tooling.

Responsibilities

• Develop enterprise security reference architectures and secure design patterns.
• Perform architecture reviews for enterprise applications, cloud platforms, and infrastructure services.
• Conduct threat modeling and risk assessments to identify gaps and mitigation strategies.
• Create secure configuration baselines and blueprints for enterprise platforms.
• Design scalable security patterns ensuring consistency, resiliency, and operational efficiency.
• Design secure patterns for AWS, Azure, hybrid/cloud on-prem environments.
• Define cloud guardrails, network segmentation, logging standards, and access models.
• Collaborate with cloud and infrastructure to implement secure-by-default configurations.
• Support container security, Kubernetes security, and DevSecOps initiatives.
• Evaluate cloud-native tooling (CSPM, CWPP, secrets management, workload protection).
• Implement Zero Trust network, endpoint security, and secure remote access strategies.
• Collaborate on identity security, SSO, MFA, federation, and privileged access architectures.
• Guide secure SDLC practices, API security, and software supply chain security.
• Assess AI platforms for security risks and define secure AI usage patterns.

Job description

Bessemer Trust in New Jersey is seeking an Information Security Architect to design and enable secure enterprise technology across cloud, data, identity, and AI platforms.

You will work with Infrastructure, Cloud Engineering, Enterprise Architecture, and Development teams to integrate security into enterprise systems, define standards, and build scalable controls that align with regulatory requirements.