Senior Security Architecture Strategist

Morgan Stanley; Alpharetta (GA); On-site; USD 180,000 - 240,000; Full time

Job summary

Morgan Stanley in Alpharetta, GA seeks a Senior Security Architecture Specialist (VP) to drive security design governance across the firm. You will steward architecture standards, enable compliant patterns, and partner with principal engineers to implement security controls at scale.

You will translate regulatory obligations into actionable architecture artifacts, define ADR lifecycles, and integrate security tooling with development pipelines to improve traceability and deployment efficiency.

Qualifications

• Bachelor’s degree or equivalent with 7+ years IT security experience.
• Experience designing and governing SDLC security controls at scale (SAST, SCA, OSS governance).
• Hands-on with policy as code frameworks (OPA, Sentinel) and policy reviews.
• Experience producing architecture decision records and threat models.
• Strong written and verbal communication translating decisions to compliance artifacts.
• Track record driving adoption through influence.
• Strong scripting background (Python, PowerShell).

Responsibilities

• Govern architecture standards across all verticals and ensure traceability to compliance.
• Operate the design governance toolchain and ADR lifecycles.
• Build integrations between spec platform and dev tools to improve continuous compliance.

Skills

SAST

SCA

OSS governance

Container scanning

Policy as code

Architecture governance

Threat modeling

Python scripting

PowerShell scripting

Education

Bachelor’s degree

Tools

GitHub Advanced Security

Snyk

WhiteSource

Sonatype

X-Ray

Wiz

Jenkins

Kubernetes

Docker

Job description

Morgan Stanley in Alpharetta, GA seeks a Senior Security Architecture Specialist (VP) to drive security design governance across the firm. You will steward architecture standards, enable compliant patterns, and partner with principal engineers to implement security controls at scale.

You will translate regulatory obligations into actionable architecture artifacts, define ADR lifecycles, and integrate security tooling with development pipelines to improve traceability and deployment efficiency.