Principal Solution Architect, IT Cybersecurity Business Engagement

Cybersecurity Jobs; Fort Worth (TX); On-site; USD 180,000 - 250,000; Full time

Benefits offered by this job

Travel perks

Health benefits

401(k) program

Professional development

Job summary

American Airlines seeks a Principal Solution Architect and Technical Information Security Officer to lead cybersecurity engagement across portfolios. This onsite Fort Worth role aligns security strategy and risk management with technology initiatives to enable secure innovation and growth.

You will act as the primary advisor, translating complex cybersecurity concepts into practical business guidance for informed decisions and resilient operations.

Qualifications

• Experience conducting security architecture reviews, threat modeling, risk evaluations, and security control reviews.
• Ability to translate cybersecurity topics into practical business guidance for decision-makers.
• Strong ability to engage executives and balance security with business goals.

Responsibilities

• Serve as the primary cybersecurity advisor for assigned business and technology areas.
• Provide security oversight, architecture guidance, and risk-informed recommendations.
• Lead security reviews for applications, systems, cloud services, and infrastructure.
• Embed cybersecurity requirements early in project lifecycles.
• Communicate cybersecurity risks and remediation progress to leadership.

Skills

Security architecture

Threat modeling

Risk management

Stakeholder management

Security reviews

Education

Bachelor's degree

Tools

SIEM

Cloud platforms (AWS/Azure)

Job description

In this role, you will serve as a Principal Solution Architect and Technical Information Security Officer, leading cybersecurity engagement across assigned business and technology portfolios for American Airlines. Working onsite in Fort Worth, you will align security strategy, architecture guidance, and risk management oversight with technology initiatives to reduce cyber risk while supporting innovation and business growth.

You will act as the primary cybersecurity advisor for the areas you support, building trusted relationships and integrating security into enterprise decision-making. The work centers on security-by-design, consultative leadership, and measurable risk visibility for stakeholders and leadership.

Key Responsibilities

• Serve as the primary cybersecurity advisor for assigned business and technology areas, building trusted relationships and integrating security into enterprise initiatives and decision-making.
• Partner with stakeholders to provide security oversight, architecture guidance, and risk-informed recommendations that enable secure innovation, transformation, and business growth.
• Lead security reviews for applications, systems, cloud services, infrastructure, and technology initiatives to identify risks, recommend mitigations, and ensure alignment with cybersecurity requirements and standards.
• Engage early in project lifecycles to embed cybersecurity requirements into business and technology initiatives from planning through implementation.
• Collaborate with executives, business leaders, technology teams, architects, and cybersecurity partners to balance business objectives with security requirements and promote shared accountability for risk management.
• Identify, assess, communicate, and track cybersecurity risks, vulnerabilities, control gaps, and remediation activities across assigned portfolios.
• Translate complex cybersecurity topics such as threats, vulnerabilities, and regulatory requirements into practical business guidance for informed decision-making and operational resilience.
• Monitor and communicate cybersecurity metrics, risk trends, assessment results, and remediation progress to strengthen security outcomes with actionable insights.
• Advocate for secure behaviors, cybersecurity best practices, and risk awareness to support security culture across business and technology organizations.
• Identify opportunities to improve cybersecurity processes, governance, architecture standards, risk management practices, and stakeholder engagement models to increase program maturity.

Required Qualifications

• 7+ years of relevant experience.
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management, Compliance, Audit, or a related discipline, or equivalent experience/training.
• Experience conducting security assessments, architecture reviews, threat modeling, risk evaluations, vulnerability analysis, or security control reviews for technology solutions and business initiatives.
• Ability to conduct security architecture reviews, threat modeling exercises, technical risk assessments, and security control evaluations.
• Ability to assess cybersecurity implications of business and technology initiatives and provide practical, risk-informed security recommendations.
• Strong stakeholder management and influencing skills, with the ability to build trusted relationships across executive leadership, technology teams, architects, engineers, and business partners.

Preferred Qualifications

• Additional education, coursework, or training in cybersecurity, information security, computer science, information systems, engineering, cloud computing, security architecture, or a related technical field.
• Experience conducting security architecture reviews, technology risk assessments, threat modeling, security design reviews, vulnerability management, or cybersecurity consulting activities.
• Experience partnering with business, engineering, architecture, infrastructure, cloud, and application development teams to integrate security requirements into enterprise technology initiatives.
• Experience with cloud platforms and cybersecurity technologies such as security tools, vulnerability management solutions, SIEM technologies, identity and access management, endpoint security, network security, application security, or related areas.
• Experience applying industry frameworks and best practices including NIST Cybersecurity Framework (CSF), NIST 800-53, CIS Controls, Zero Trust, Secure-by-Design, OWASP, ISO 27001, or similar standards.
• Experience assessing and communicating cybersecurity risks involving enterprise applications, cloud environments, infrastructure platforms, third-party solutions, and emerging technologies.
• Knowledge of secure software development, DevSecOps, cloud-native architectures, network security, Zero Trust principles, and security-by-design practices.
• Professional cybersecurity certifications preferred, including CISSP, CISM, CCSP, GIAC, Security+, Azure Security Engineer, AWS Security Specialty, CRISC, or comparable certifications.

Technologies and Standards

• NIST Cybersecurity Framework (CSF)
• NIST 800-53
• CIS Controls
• Zero Trust
• Secure-by-Design principles
• OWASP
• ISO 27001
• DevSecOps
• SIEM technologies
• Identity and access management
• Endpoint security
• Network security
• Application security
• Secure software development
• Cloud-native architectures
• CISSP, CISM, CCSP, GIAC, Security+, Azure Security Engineer, AWS Security Specialty, CRISC

Benefits

• Travel perks: access to 365 destinations on more than 6,800 daily flights across a global network.
• Health benefits: health, dental, prescription, and vision coverage; virtual doctor visits; flexible spending accounts.
• Wellness programs.
• 401(k) program: employer contributions available after one year (depending on the workgroup).
• Additional benefits: Member Assistance Program, pet insurance, and discounts on hotels, cars, cruises, and more.

Location: Fort Worth, TX (onsite)

Employment Type: Full-time

Posted Date: 10/16/2026

Feel Free to Be Yourself at American

Inclusion and diversity are described as a foundation of the workforce, with 20+ Team Member Resource Groups supporting connections across customers, suppliers, communities, and shareholders, and helping team members reach their full potential in an inclusive environment.