Senior Enterprise Security Architect

ICW GROUP HOLDINGS; San Diego (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

ICW Group is hiring a Security Architect II to shape enterprise security architecture across platforms, cloud environments, and AI initiatives. You will translate business goals and regulatory obligations into practical security capabilities and patterns.

You will collaborate with multiple teams to embed security into designs, define current- and target-state capabilities, and guide decisions with clear trade-offs and risk analysis.

Responsibilities

• Develops and influences enterprise security architecture and strategic direction.
• Maps business goals, risk appetite, regulatory obligations, and enterprise strategy to security capabilities and technical implementation direction.
• Partners with enterprise, solution, cloud, data, integration, infrastructure, and AI architects to embed security into technology strategies and solution designs.
• Defines current-state and target-state security capabilities, identifies gaps and dependencies, and recommends sequenced initiatives to improve enterprise security maturity.
• Provides architecture guidance for identity and access management, zero trust, network and cloud security, application security, data protection, cryptography, secrets management, logging and monitoring, resilience, vulnerability management, and third-party technology risk.
• Creates decision records and clearly documents security trade-offs, assumptions, risks, compensating controls, and required follow-up actions.
• Defines and maintains security standards, guidelines, and procedures.
• Develops and maintains enterprise security standards, guidelines, control patterns, and procedures within assigned areas of responsibility and contributes to broader enterprise security direction, ensuring the resulting guidance is actionable, internally consistent, and aligned with enterprise policy.
• Uses recognized frameworks and principles such as NIST Cybersecurity Framework, NIST SP 800-53, NIST Zero Trust Architecture, ISO/IEC 27001 and 27002, CIS Controls, and secure-by-design practices as appropriate to the organization.
• Develops and maintains minimum security requirements and approved patterns within assigned areas of responsibility for AWS services, cloud accounts, networking, identity, encryption, key management, secrets, workload protection, observability, and incident readiness.
• Contributes to exception and risk-acceptance criteria and partners with Security, Risk, Compliance, and technology owners to ensure deviations are explicit, time-bound, and appropriately approved.
• Maintains traceability among business objectives, security risks, policies, standards, architecture decisions, technical controls, and implementation evidence.
• Performs and documents security architecture reviews for strategic initiatives, platforms, products, vendor solutions, integrations, and material technology changes.
• Presents security-significant decisions and recommendations to the Architecture Review Board and other governance forums.
• Engages early in initiative planning and solution design to identify threats, misuse cases, trust boundaries, attack paths, security requirements, and control responsibilities.
• Advises teams on secure architecture patterns without displacing accountable engineers

Job description

ICW Group is hiring a Security Architect II to shape enterprise security architecture across platforms, cloud environments, and AI initiatives. You will translate business goals and regulatory obligations into practical security capabilities and patterns.

You will collaborate with multiple teams to embed security into designs, define current- and target-state capabilities, and guide decisions with clear trade-offs and risk analysis.