Senior Enterprise Security Architect - On-Prem & Zero-Trust

InvestCloud, Inc.; United States; On-site; USD 175,000 - 200,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) with company match

Paid time off

Flexible Savings Account (FSA)

Job summary

InvestCloud is seeking an Enterprise Security Architect to lead security design across the company’s on-premises data center and product reviews. You will be the senior generalist, shaping secure choices across departments and ensuring robust protections from the start.

You will drive identity and access controls, encryption standards, and zero-trust initiatives, while collaborating with product, infrastructure, and data teams to close gaps and strengthen overall security posture.

Qualifications

• Ten or more years of cybersecurity experience across network, infrastructure, identity, application, and data security.
• Proven leadership of security design for on-premises data centers, including segmentation and hardening.
• Experience conducting fast, practical security reviews of third-party software and SaaS.
• Strong knowledge of identity, privileged access management, encryption, and key management.

Responsibilities

• Review software and services planned for purchase and provide clear security decisions with practical conditions.
• Lead security architecture of on-premises data center ensuring secure design, build, and operation of infrastructure, data, and apps.

Skills

Security architecture

On-premises data centers

Zero-trust network

Identity and access management

Encryption and key management

Frameworks: NIST/ISO/CIS

Financial services experience

Executive communication

Education

CISSP or SABSA certification

Tools

Thales Luna HSM

Job description

InvestCloud is seeking an Enterprise Security Architect to lead security design across the company’s on-premises data center and product reviews. You will be the senior generalist, shaping secure choices across departments and ensuring robust protections from the start.

You will drive identity and access controls, encryption standards, and zero-trust initiatives, while collaborating with product, infrastructure, and data teams to close gaps and strengthen overall security posture.