Cybersecurity Architect

NextEra Energy, Inc.

. Lead cybersecurity architecture reviews for complex projects, platforms, applications, infrastructure, cloud services, SaaS platforms, vendor solutions, APIs, and enterprise integrations .

Posted 11/6/2026full-timeJuno Beach • Florida • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity architecture, risk assessment, and cloud security principles, with a strong focus on threat modeling, security controls, and compliance standards. Capable of leading architecture reviews and mentoring cybersecurity professionals while effectively communicating technical risks and mitigation strategies.

Highest-signal resume keywords

Cybersecurity ArchitectureCloud Security ArchitectureThreat ModelingRisk AssessmentIdentity And Access Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network SecurityApplication SecurityData SecurityVulnerability AssessmentEncryptionSecure Design PatternsThird-Party EvaluationsSecurity ControlsLogging And MonitoringCompliance Standards

Soft Skills

Analytical SkillsCritical ThinkingProblem SolvingWritten CommunicationInterpersonal Skills

Tools & Technologies

AWSAzureGCPNIST CSFNIST SP 800-53NERC CIPISO/IEC 27001

Certifications & Qualifications

CISSPCCSPCISA

Industry Keywords

CybersecurityRisk MethodologiesSecurity ArchitectureEnterprise EnvironmentsSaaS Platforms

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDNSFirewallsGoogle Cloud PlatformSDLC

About the role

Key responsibilities & impact

Lead cybersecurity architecture reviews for complex projects, platforms, applications, infrastructure, cloud services, SaaS platforms, vendor solutions, APIs, and enterprise integrations
Analyze solution architectures, network and data flows, trust boundaries, authentication models, integrations, external connectivity, and security controls
Perform threat modeling to identify threat scenarios, attack paths, trust-boundary concerns, and security weaknesses
Identify cybersecurity risks and assign risk ratings using enterprise risk methodologies and professional judgment
Communicate technical and business implications of cybersecurity risks
Define required and recommended security controls and practical mitigation strategies
Produce concise, defensible risk documentation covering exposure, impact, risk rating, mitigation requirements, and residual risk
Document residual risks requiring Business Unit Director acceptance
Assess internet-facing technologies and external attack surfaces
Assess cloud architectures, application security, identity and access management, data security and privacy, and cybersecurity resiliency
Review vendor security architectures and supporting technical evidence
Recognize regulatory, privacy, and compliance implications, including NERC CIP
Develop reusable cybersecurity architecture patterns, reference architectures, standards, and implementation guidance
Facilitate architecture review sessions with application teams, project teams, technical stakeholders, and vendors
Guide migration and modernization strategies and coordinate with domain specialists
Mentor cybersecurity professionals and improve review methods, templates, and architecture quality
Monitor industry threats and technology trends
Manage a high volume of concurrent cybersecurity architecture assessments
Perform ongoing cybersecurity risk reviews for new and existing technologies and services
Support cybersecurity projects, develop requirements, implement security projects and tools, and define policies and control frameworks
Collaborate with IT and business units to select and deploy technical controls
Build processes and standards to maintain security requirements
Administer, operate, and monitor information security sensors, logging, alerting, and detection mechanisms
Act as subject matter expert for assigned cybersecurity technology stacks
Communicate cybersecurity activities, priorities, risk measurements, and mitigations
Provide guidance for SDLC and application development security activities
Participate in organizational projects and perform other assigned duties

Requirements

What you’ll need

High School Grad / GED
Bachelor's or Equivalent Experience
Minimum 4+ years of experience
Demonstrated senior-level experience performing cybersecurity architecture, solution security, or technology risk assessments in large and complex enterprise environments
Strong understanding of cybersecurity architecture principles across diverse technology environments
Strong working knowledge of cloud security architecture, including IAM, networking, data protection, workload security, logging/monitoring, encryption, and shared-responsibility models (AWS, Azure, and/or GCP)
Strong working knowledge of network and infrastructure security, including segmentation, firewalls, WAFs, proxies, DNS, load balancers, certificates, encryption, remote access, and secure connectivity
Strong working knowledge of application security, including authentication and authorization, APIs, web application security, secrets management, secure design patterns, OWASP risks, and third-party integrations
Strong working knowledge of identity and access management, including SSO, federation, MFA, RBAC, privileged access, service/workload identities, and least privilege
Strong knowledge of data security and privacy architecture, including data classification, encryption, key management, tokenization, and DLP
Demonstrated ability to perform threat modeling and identify attack surfaces, trust boundaries, realistic threat scenarios, and potential attack paths
Ability to interpret vulnerability assessments, penetration-test findings, and vendor-provided security assessment results
Experience evaluating third-party/vendor technologies
Working knowledge of NIST CSF, NIST SP 800-53, NERC CIP, and ISO/IEC 27001
Ability to independently lead architecture review meetings and manage multiple concurrent assessments
Strong analytical, critical-thinking, problem-solving, written communication, and interpersonal skills
Ability to translate technical cybersecurity concerns into practical mitigation requirements
Ability to work independently with minimal supervision
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline is preferred; equivalent relevant professional experience will be considered
Industry certifications such as CISSP, CCSP, or comparable certifications are preferred
CISA certification is preferred

Benefits

Comp & perks

NextEra Energy offers a wide range of benefits to support employees and their eligible family members
Relocation provided, if applicable
Reasonable accommodations in the application and selection process
Equal opportunity employment
Full-time exempt employee status