Security Architect II

ICW Group

. Develop and influence enterprise security architecture and strategic direction .

Posted 11/9/2026full-timeSan Diego • California • United StatesSeniorLead💰 $121,625 - $217,711 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and influencing enterprise security architecture, including frameworks, principles, and target-state architectures. Proficient in aligning security capabilities with business goals and regulatory obligations while providing technical leadership and mentorship across teams.

Highest-signal resume keywords

Security ArchitectureAWS Security ServicesIdentity And Access ManagementCloud Security ArchitectureCISSP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Enterprise Security ArchitectureSecurity StandardsThreat ModelingZero TrustApplication SecurityData ProtectionVulnerability ManagementSecurity MonitoringRisk-Based Control SelectionCloud-Native Control Patterns

Soft Skills

CommunicationStakeholder ManagementNegotiationFacilitationPresentation

Tools & Technologies

AWSNISTISOCISAI Security Controls

Certifications & Qualifications

CISSPISSAPCCSPAWS Certified Security - SpecialtyAWS Certified Solutions Architect - Professional

Industry Keywords

CybersecurityFinancial ServicesRegulated IndustriesProperty And Casualty InsuranceGenerative AI

Tech Stack

Tools & technologies

AWSCloudCyber Security

About the role

Key responsibilities & impact

Develop and influence enterprise security architecture and strategic direction
Develop, maintain, and communicate enterprise security architecture frameworks, principles, target-state architectures, reference architectures, roadmaps, and reusable security patterns
Map business goals, risk appetite, regulatory obligations, and enterprise strategy to security capabilities and technical implementation direction
Partner with enterprise, solution, cloud, data, integration, infrastructure, and AI architects to embed security into technology strategies and solution designs
Define current-state and target-state security capabilities, identify gaps and dependencies, and recommend sequenced initiatives
Provide architecture guidance for identity and access management, zero trust, network and cloud security, application security, data protection, cryptography, secrets management, logging and monitoring, resilience, vulnerability management, and third-party technology risk
Create decision records documenting security trade-offs, assumptions, risks, compensating controls, and follow-up actions
Develop and maintain enterprise security standards, guidelines, control patterns, procedures, minimum security requirements, and approved AWS/cloud security patterns
Contribute to exception and risk-acceptance criteria and maintain traceability across objectives, risks, policies, standards, decisions, controls, and evidence
Perform and document security architecture reviews for strategic initiatives, platforms, products, vendor solutions, integrations, and material technology changes
Present security-significant decisions and recommendations to the Architecture Review Board and governance forums
Identify threats, misuse cases, trust boundaries, attack paths, security requirements, and control responsibilities during initiative planning and solution design
Advise teams on secure architecture patterns and evaluate vendor products and services
Mentor architects and technical teams and serve as a trusted advisor on complex decisions
Define security architecture guidance and risk-based patterns for AI and generative AI solutions, including data protection, identity and authorization, model and supply-chain risk, prompt injection, tool misuse, unintended data disclosure, adversarial testing, monitoring, human oversight, and autonomous-action controls
Collaborate with data, privacy, legal, risk, and AI governance stakeholders to align AI security controls with recognized frameworks and acceptable risk
Provide technical leadership, architecture mentorship, and influence across teams and initiatives without direct supervisory responsibilities

Requirements

What you’ll need

Bachelor's degree from a four-year college or university in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field required; equivalent relevant experience may be considered in lieu of a degree
Minimum 8 years of progressively responsible IT or cybersecurity experience required
Minimum 4 years of experience in security architecture, cloud security architecture, enterprise architecture, or solution architecture with substantial security responsibility required
Experience defining security standards, reference architectures, technical controls, and architecture roadmaps in a complex enterprise environment required
Hands-on or architecture-level experience with AWS security services, identity and access management, network security, application security, data protection, security monitoring, and secure cloud adoption required
One senior-level security or security architecture certification required
CISSP preferred as the baseline credential; relevant alternatives include ISSAP, CCSP, AWS Certified Security - Specialty, AWS Certified Solutions Architect - Professional, GDSA, GCSA, relevant GIAC certification, CISM, or CRISC
Experience supporting regulated industries, financial services, or property and casualty insurance preferred
Experience with AI, machine learning, generative AI, or agentic-system security and governance preferred
Advanced knowledge of security architecture principles, threat modeling, zero trust, defense in depth, least privilege, secure-by-design, privacy-by-design, and risk-based control selection
Strong working knowledge of NIST, ISO, CIS, cloud security, and enterprise architecture practices
Advanced knowledge of AWS security architecture and cloud-native control patterns
Knowledge of application and API security, identity federation, privileged access, network segmentation, encryption, key management, secrets management, logging, monitoring, incident readiness, vulnerability management, and software supply-chain security
Working knowledge of AI security risks and controls
Ability to translate business goals, regulatory obligations, and risk scenarios into architecture requirements, technical standards, roadmaps, and solution options
Ability to communicate complex security topics to executives, business leaders, architects, engineers, and control functions
Strong facilitation, negotiation, written communication, presentation, and stakeholder-management skills
Ability to operate as a self-directed senior individual contributor across architecture, cybersecurity, engineering, operations, risk, compliance, legal, privacy, and audit teams
We are currently not offering employment sponsorship for this opportunity

Benefits

Comp & perks

Competitive benefits package
Generous medical, dental, and vision plans
401K retirement plan with company match
Bonus potential for all positions
Paid Time Off
Paid holidays throughout the calendar year
100% support for continued learning
Equal Opportunity Employer