Vice President - Enterprise Security Architecture

Raymondjames; Saint Petersburg (FL); Hybrid; USD 180,000 - 260,000; Full time

Job summary

Raymond James in St. Petersburg, FL seeks a Senior Security Architect to own the security architecture across the firm’s technology estate.

You will drive the target state for zero trust, identity, data protection and cloud security, embedding security into modernization programs from design onward. The role requires AI-forward expertise, hands-on security of AI/agentic systems, and the credibility to engage with senior engineers, the CISO, auditors and regulators in fast-paced discussions.

Qualifications

• 15+ years in security architecture with hands-on practice.
• Experience at a large technology company or financial institution.
• AI-forward mindset with production security of AI/agentic systems.

Responsibilities

• Define and maintain enterprise security target architecture and roadmap (zero trust, IAM for workforce and non-human identities).
• Own security architecture standards for AI and agentic systems: identity, tool permissions, prompt-injection controls, data provenance.
• Lead use of AI coding agents to speed up security architecture work (threat modeling, policy-as-code, control mapping).
• Build security into delivery: secure-by-default paths, pipeline security controls, SBOMs, supply-chain provenance, policy-as-code.
• Set cloud security architecture for AWS and Azure with guardrails and continuous compliance.
• Lead security architecture reviews for major initiatives and third-party platforms with traceable decisions.
• Translate regulatory expectations into reusable controls and audit-ready architecture evidence.
• Measure practice adoption, track exceptions, and report improvements.
• Develop and mentor the Lead Security Architect and foster a security architecture community.

Skills

Security architecture

Zero trust

Identity & access mgmt

AI/ML security

Cloud security

Threat modeling

Executive communication

Job description

Job Description Summary

Note: This position follows our hybrid-friendly schedule, so you get the best of both worlds - flexibility and collaboration. In office days are 3 days per week (including a Monday or Friday), in our St Petersburg, FL Corporate Office.

This role is not eligible for Work Visa sponsorship, either currently or in the future.

Job Description

This senior technology leader will own the security architecture of the firm's technology estate: the reference architectures, standards and patterns that decide whether the secure path is also the easy path for every team building at Raymond James. The role sets the target state for zero trust, identity, data protection and cloud security. It builds security into the firm's modernization programs at the first design decision, not at the last review gate.

The role is built for an AI-forward practitioner. Agentic AI is changing both how the firm builds software and what it must secure. The leader in this seat uses AI coding agents such as Claude Code every day in their own work. They also own the architecture that lets the firm adopt agents safely: agent and workload identity, least-privilege tool access, controls against prompt injection and data exfiltration, and audit evidence that holds up with examiners. Success means engineers seek this leader out because security made them faster.

The role sits in Enterprise Architecture and leads the Lead Security Architect. It partners closely with the Information Security organization, which keeps ownership of security operations, risk acceptance and policy. This role owns the architecture, the standards and the patterns teams build on. It demands strong executive presence, and the credibility to hold a deep technical conversation with senior engineers and a risk conversation with the CISO, auditors and regulators in the same day.

Essential Duties and Responsibilities:

• Define and maintain the enterprise security target architecture and the roadmap from current state to target. This covers zero trust; identity and access management for workforce, client and non-human identities; network segmentation; encryption and key management; and data protection.
• Own the security architecture standard for AI and agentic systems: agent and workload identity, scoped tool permissions and human approval gates, prompt-injection and data-exfiltration controls, model and data provenance, logging that makes every agent action auditable.
• Use AI coding agents and agentic tooling hands-on to speed up security architecture work, including threat modeling, policy-as-code, control mapping, architecture review and reference implementations. Set the pattern for how architecture and engineering teams use these tools safely.
• Build security into delivery: threat modeling at design time, secure-by-default golden paths, and pipeline security controls, built so the compliant path is the fastest path. The pipeline controls include static, dynamic and dependency scanning (SAST, DAST, SCA), secrets management, software bills of materials (SBOMs) and supply-chain provenance, and policy-as-code.
• Set cloud security architecture for AWS and Azure with Enterprise & Cloud Architecture. This covers landing-zone guardrails, identity federation, network and data-perimeter controls, and continuous compliance.
• Lead security architecture review for major initiatives and for third-party, SaaS and vendor platforms. Use consistent, published criteria, record decisions, and make exceptions time-bound and tracked to closure.
• Translate regulatory and examination expectations (SEC, FINRA, GLBA, NIST CSF, NIST AI RMF) into architecture standards and reusable controls, and supply the architecture evidence for audits and exams.
• Measure the practice and report on it: pattern adoption, exception aging, and the share of findings caught at design time rather than in production.
• Lead and develop the Lead Security Architect, and grow a security architecture community of practice across the technology organization.
• Collaborate with senior executives on security strategy, investment cases, and executive-level communications and presentations.
• Keep a strong external view of the threat landscape and emerging AI-security research and frameworks, such as the OWASP Top 10 for LLM Applications and MITRE ATLAS.

What We're Looking For:

• A recognized subject-matter expert, with deep, hands-on mastery of security architecture built over 15+ years and the judgment to know which controls matter and which are theater.
• Proven where the stakes are highest. Experience at a large technology company or hyperscaler, or at a major financial institution such as a Wall Street bank, exchange, broker-dealer or asset manager, where the architecture was tested by real adversaries, regulators and scale.
• AI-forward by habit, not by title. Uses Claude Code or similar agentic tools daily, and has evidence of securing AI or agentic systems in production rather than only writing policy about them.