Strategic Security Architect: Threat Modeling & Zero Trust

MetLife; Cary (NC); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Health plan

401(k) with employer match

Parental leave

Wellness programs

Job summary

MetLife is seeking a Principal Security Architect to lead risk-based security architecture reviews and provide enterprise-grade guidance for technology initiatives. You will evaluate proposed architectures, identify material risks, and develop reusable reference architectures to guide enterprise security transformation.

The role requires deep expertise across IAM, network, devices, applications, data, cloud, SOC, governance/compliance, and AI security, with a focus on threat modeling, risk

Qualifications

• 8-10 years of overall experience.
• Experience reviewing or designing complex technology solutions.
• Expertise in threat modeling, risk assessment, attack path analysis, trust-boundary assessment, control gap analysis, and remediation planning.
• Understanding of IAM, network, devices, applications, data, SOC, cloud, governance/risk/compliance, and AI security.
• Experience developing reference architectures, standards, guardrails, and reusable design patterns.
• Knowledge of current-state and target-state architecture, roadmaps, and transformation leadership.

Responsibilities

• Lead Security Architecture Review (SAR) assessments for enterprise initiatives (apps, platforms, cloud, infrastructure, AI).
• Perform threat modeling and risk assessments to identify design gaps and data exposure risks.
• Evaluate security controls and technologies against architecture requirements and standards.
• Design secure architecture patterns across identity, network, endpoint/device, application, data, cloud, and AI domains.
• Develop reusable security reference architectures and design principles to accelerate secure delivery at scale.
• Provide identity-centric security guidance including authentication/authorization models and privileged access.
• Advise on network segmentation, micro-segmentation, zero trust, and secure connectivity for various integrations.
• Design risk-based access policies considering sensitivity and criticality.
• Assess current-state security architecture and define target-state, roadmaps, and maturity models.
• Collaborate with EA, product teams, cloud/platform teams, IAM, data protection, SOC, GRC, privacy, and risk stakeholders.
• Document architecture decisions, risks, and remediation actions clearly for technical teams and leadership.

Skills

Threat modeling

Risk assessment

Security architecture

Identity-centric security

Zero trust

Network segmentation

Secure access

IAM security

Cloud security

Architecture review

Job description

MetLife is seeking a Principal Security Architect to lead risk-based security architecture reviews and provide enterprise-grade guidance for technology initiatives. You will evaluate proposed architectures, identify material risks, and develop reusable reference architectures to guide enterprise security transformation.

The role requires deep expertise across IAM, network, devices, applications, data, cloud, SOC, governance/compliance, and AI security, with a focus on threat modeling, risk