Senior Information Security Architect: Cloud, AI & Zero Trust

Bessemer Trust; Port Reading (NJ); Hybrid; USD 145,000 - 185,000; Full time

Benefits offered by this job

Hybrid work environment: 60% in office

401(k) with profit‑sharing

Medical, dental, vision plans

Tuition reimbursement

Paid time off

Life insurance

Job summary

Bessemer Trust is seeking an Information Security Architect to design, document, and enable secure enterprise architecture across cloud, AI, data, and applications with heavy hands‑on development. You will collaborate with Infrastructure, Cloud Engineering, Enterprise Architecture, and Platform teams to embed security into platforms and services.

The role emphasizes AI security, Zero Trust, and secure platform engineering, reporting to the Director of Security Architecture & Engineering, with a

Qualifications

• Bachelor's Degree required.
• 8+ years of experience in cybersecurity, security architecture, cloud security, infrastructure security, or related technical disciplines.
• Strong experience designing and implementing enterprise security architectures and technical security standards.
• Familiarity with AI security concepts, secure AI platform adoption, and risks associated with generative AI technologies.
• Deep technical knowledge of AWS, Azure, hybrid cloud environments, and cloud‑native security capabilities.
• Experience with Zero Trust architecture, ZTNA, micro segmentation, network security controls, and endpoint security technologies.
• Hands‑on experience with identity security concepts including SSO, MFA, federation, PAM, RBAC/ABAC, and identity governance.
• Experience supporting application security and DevSecOps initiatives including CI/CD security, API security, threat modeling, and secure SDLC practices.
• Experience with enterprise security technologies including EDR/XDR, CSPM, and cloud‑native security tooling.

Responsibilities

• Develop enterprise security reference architectures, technical standards, secure design patterns, and implementation guidance.
• Perform architecture and design reviews for enterprise applications, cloud platforms, infrastructure services, and technology integrations.
• Conduct threat modeling and technical risk assessments to identify security gaps and recommend mitigation strategies.
• Create secure configuration baselines and security blueprints for enterprise platforms and shared technology services.
• Design scalable and reusable security patterns that promote consistency, resiliency, and operational efficiency across environments.
• Design and implement secure architecture patterns for AWS, Azure, hybrid cloud, and on‑premises environments.
• Define cloud security guardrails, network segmentation patterns, logging standards, and access control models.
• Partner with cloud and infrastructure teams to implement secure‑by‑default cloud services and platform configurations.
• Support container security, Kubernetes security, Infrastructure-as-Code (IaC) security, and DevSecOps initiatives.
• Evaluate and integrate cloud‑native security tooling including CSPM, CWPP, secrets management, and workload protection technologies.
• Design secure network architectures leveraging Zero Trust principles, ZTNA, micro segmentation, secure remote access, and software‑defined perimeter concepts.
• Develop network security standards related to segmentation, east‑west traffic controls, secure connectivity, and enterprise access patterns.
• Partner with endpoint engineering teams to improve endpoint hardening, EDR/XDR integrations, device security, and enterprise visibility capabilities.
• Support secure architecture design for remote workforce technologies, enterprise mobility, and distributed enterprise environments.
• Collaborate with Identity Security teams to design secure authentication, authorization, federation, and privileged access architectures.
• Integrate identity‑centric security controls into enterprise applications, cloud platforms, and infrastructure environments.
• Support implementation of Zero Trust identity principles including least privilege access, adaptive authentication, and strong identity governance controls.
• Partner with development and DevOps teams to integrate security controls into the software development lifecycle and CI/CD pipelines.
• Perform secure application architecture reviews and support secure coding, API security, secrets management, and software supply chain security initiatives.
• Conduct application threat modeling and advise on secure design approaches for modern applications and APIs.
• Evaluate AI platforms, generative AI tools, and AI‑assisted development technologies to identify security risks and define secure usage patterns.
• Develop security guidance for AI model governance, secure AI development, data protection, and responsible AI adoption.

Skills

Cloud security

Identity security

Zero Trust

CI/CD security

Threat modeling

Security architecture

AI security

Kubernetes security

Education

Bachelor's Degree

Tools

EDR/XDR

SIEM

DLP

CASB

CSPM

Job description

Bessemer Trust is seeking an Information Security Architect to design, document, and enable secure enterprise architecture across cloud, AI, data, and applications with heavy hands‑on development. You will collaborate with Infrastructure, Cloud Engineering, Enterprise Architecture, and Platform teams to embed security into platforms and services.

The role emphasizes AI security, Zero Trust, and secure platform engineering, reporting to the Director of Security Architecture & Engineering, with a