Senior Information Security Architect

VeriSign, Inc.; Reston, Northern (VA, KY); Hybrid; USD 164,000 - 222,000; Full time

Benefits offered by this job

Hybrid work schedule

Job summary

VeriSign, Inc. in Reston, VA is seeking a Senior Information Security Architect to shape enterprise security strategy across on-premises and cloud environments. You will lead design decisions, advise executives, and ensure security patterns scale across the organization.

The role collaborates with security engineering, infrastructure, application development, cloud, data, and AI teams to embed security from concept to production, including safeguarding AI workloads and hybrid architectures.

Qualifications

• Bachelor's degree in computer science, cybersecurity, engineering, or related field.
• 10+ years of broad information security experience, including enterprise security architecture and design.
• Expertise across security architecture, secure networking, cloud, identity, endpoint, and data protection.
• Proven ability to lead threat modeling and architecture reviews for high-value systems.
• Strong ability to translate risk into clear engineering recommendations.

Responsibilities

• Define enterprise security architecture strategy and roadmaps across domains.
• Lead security architecture engagement for complex cross-functional programs.
• Establish requirements for AI/ML systems including secure MLOps and data lifecycle protection.
• Review AI designs and mitigate risks like prompt injection and data leakage.
• Perform threat modeling, architecture reviews, and security design assessments.
• Identify gaps in security posture and communicate risk to leadership.
• Evaluate security technologies and vendors for interoperability and measurability.

Skills

Security architecture

Threat modeling

AI/ML security

Cross-functional leadership

Leadership

Cloud security

Education

Bachelor's degree

Job description

Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system (DNS) services.

We are a mission focused, values driven company where each individual can contribute to building a stronger, more secure internet. We offer a dynamic and flexible work environment with competitive benefits and the ability to grow your career.

The mission of the Security Architecture Team is to define and advance secure, resilient architecture across Verisign’s systems, networks, applications, cloud platforms, data environments, and emerging technologies. The team combines deep technical expertise with enterprise strategy to reduce risk, enable innovation, and establish security patterns that scale across the organization.

We have an exciting opportunity for a Senior Information Security Architect. This senior individual-contributor role shapes enterprise security strategy, reference architectures, standards, and technical requirements across the entire company. The architect will lead high-impact design decisions, resolve complex cross-domain security challenges, and advise engineering and executive leaders on risk, tradeoffs, and long-term technology direction.

Working across security engineering, infrastructure, application development, cloud, data, and AI teams, this role ensures security is built into critical services from concept through implementation in production. The Senior Information Security Architect will authoritatively guide the defense of a diverse hybrid technology ecosystem – safeguarding mission essential on-premises architecture, modern cloud platforms, secure application pipelines, and emerging enterprise AI workloads.

Key Responsibilities

• Define enterprise security architecture strategy, principles, reference architectures, reusable patterns, and multi-year roadmaps across network, endpoint, identity, application, cloud, container, data, and detection and response domains


• Lead security architecture engagement for complex, high-risk, and cross-functional programs; translate business objectives, threat intelligence, and risk appetite into scalable technical controls and design requirements


• Establish architecture and security requirements for AI/ML systems, including secure MLOps, model and data lifecycle protection, identity and authorization, platform isolation, model provenance, monitoring, privacy, and responsible-use guardrails


• Review generative and agentic AI designs—including retrieval-augmented generation, vector databases, third-party models, APIs, plugins, tools, and autonomous actions—and address controls to mitigate the risks of prompt injection, data leakage, excessive agency, insecure output handling, and AI supply-chain compromise


• Perform threat modeling, architecture reviews, and security design assessments for critical systems and emerging technologies; document risk decisions and guide remediation or compensating controls


• Identify systemic gaps in the security posture, develop prioritized recommendations and investment roadmaps, and communicate technical risk and tradeoffs clearly to executive leadership


• Evaluate security technologies and vendors, guide proofs of concept, and ensure proposed solutions are interoperable, supportable, measurable, and aligned with strategic architecture

Requirements

• Bachelor’s degree in computer science, cybersecurity, engineering, or a related technical field, or equivalent practical experience


• 10+ years of broad information security experience, including significant experience with security architecture and design for complex enterprise environments


• Demonstrated expertise across security architecture and secure networking, cloud, identity (both on premises and cloud), endpoint, application security, data protection, and detection and response


• Proven ability to lead threat modeling and architecture reviews, and to make consequential technical decisions for high-value or high-availability systems


• Working knowledge of AI/ML architecture and security, including secure MLOps, model and data governance, generative AI, RAG, AI agents, prompt injection, model supply-chain risk, sensitive-data exposure, access controls, and monitoring


• Ability to translate complex technical risk into clear recommendations for engineering teams, business stakeholders, and executive leaders


• Strong cross-functional leadership, facilitation, written communication, and mentoring skills, with a record of influencing decisions without direct authority

Preferred:

• Advanced experience with vulnerability assessment, security risk analysis, and risk-based prioritization


• Expertise in application security, secure software development, and the OWASP Top 10 and OWASP Top 10 for Large Language Model Applications


• Experience designing security for public cloud, hybrid environments, infrastructure as code, and CI/CD pipelines


• Familiarity with frameworks such as NIST CSF, NIST AI RMF, MITRE ATT&CK, or MITRE ATLAS


• Relevant certifications such as CISSP, CCSP, SABSA, or equivalent

This position is based in our Reston, VA office and offers a hybrid work schedule.

The pay range is $164,300 - $222,300.

The anticipated annual base salary range for this position is noted above, however, base pay offered may vary depending on job-related knowledge, skills, experience. Verisign offers a discretionary bonus which is based on individual and company performance, and certain roles may be eligible for discretionary stock awards.

Verisign is an equal opportunity employer. That means we recruit, hire, compensate, train, promote, transfer, and administer all terms and conditions of employment without regard to their race, color, religion, national origin, sex, sexual orientation, gender identity, age, protected veteran status, disability, or other protected categories under applicable law.

Verisign is an equal opportunity employer. We do not discriminate on the basis of any protected group status under any applicable law.