Senior Cybersecurity Architect

NextEra Energy, Inc.

. Lead cybersecurity architecture reviews for complex projects, platforms, applications, infrastructure, cloud services, SaaS platforms, vendor solutions, APIs, and enterprise integrations .

Posted 11/6/2026full-timeMiami • Florida • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cybersecurity architecture, risk assessment, and cloud security principles, with a strong focus on threat modeling, data protection, and compliance standards. Capable of leading architecture reviews, mentoring professionals, and developing security controls and mitigation strategies.

Highest-signal resume keywords

Cybersecurity ArchitectureCloud Security ArchitectureThreat ModelingRisk AssessmentIdentity And Access Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity Architecture PrinciplesCloud Security (AWS, Azure, GCP)Network SecurityApplication SecurityData SecurityVulnerability AssessmentPenetration TestingSecurity ControlsRisk DocumentationCompliance Standards

Soft Skills

Analytical SkillsCritical ThinkingProblem SolvingWritten CommunicationInterpersonal Skills

Tools & Technologies

IAMEncryptionFirewallsWAFsLoad BalancersDNSRemote Access SolutionsSecurity Assessment ToolsArchitecture DocumentationMonitoring Tools

Certifications & Qualifications

CISSPCCSPBachelor's DegreeComparable Certifications

Industry Keywords

NIST CSFNIST SP 800-53NERC CIPISO/IEC 27001Regulated Industry ExperienceOT/ICS FamiliarityAI/GenAI Security Awareness

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDNSFirewallsGoogle Cloud Platform

About the role

Key responsibilities & impact

Lead cybersecurity architecture reviews for complex projects, platforms, applications, infrastructure, cloud services, SaaS platforms, vendor solutions, APIs, and enterprise integrations
Analyze solution architectures, network and data flows, trust boundaries, authentication models, integrations, external connectivity, and security controls
Perform threat modeling to identify threat scenarios, attack paths, trust-boundary concerns, and security weaknesses
Identify cybersecurity risks and assign risk ratings using enterprise methodologies and professional judgment
Communicate technical and business implications of cybersecurity risks
Define required and recommended security controls and practical mitigation strategies
Produce concise, defensible risk documentation covering exposure, impact, risk rating, mitigation requirements, and residual risk
Assess internet-facing technologies, external attack surfaces, cloud architectures, application security, IAM, data security, privacy, and cybersecurity resiliency
Review vendor security architectures and supporting evidence, including security assessments, penetration-test results, vulnerability scans, and architecture documentation
Recognize regulatory, privacy, and compliance implications, including NERC CIP
Develop reusable cybersecurity architecture patterns, reference architectures, standards, and implementation guidance
Facilitate architecture review sessions with application teams, project teams, technical stakeholders, and third-party vendors
Guide migration and modernization strategies and coordinate with domain specialists
Mentor cybersecurity professionals and improve review methods, templates, and architecture quality
Monitor industry threats and technology trends and update architecture standards and patterns
Manage a high volume of concurrent cybersecurity architecture assessments while meeting review timelines
Work with business partners to define technology requirements, principles, and models
Communicate and enforce technology standards
Drive digital innovation and develop technology roadmaps
Define high-level migration plans
Coach, mentor, and lead technical subject matter experts
Design and own governance, assurance, and standards activities
Evaluate, risk-assess, select, and design hardware and software technology and product standards
Deliver technology architecture artifacts, including reference architectures or concepts of operation

Requirements

What you’ll need

Demonstrated senior-level experience performing cybersecurity architecture, solution security, or technology risk assessments in large and complex enterprise environments
Strong understanding of cybersecurity architecture principles
Strong working knowledge of cloud security architecture, including IAM, networking, data protection, workload security, logging/monitoring, encryption, and shared-responsibility models across AWS, Azure, and/or GCP
Strong working knowledge of network and infrastructure security, including segmentation, firewalls, WAFs, proxies, DNS, load balancers, certificates, encryption, remote access, and secure connectivity
Strong working knowledge of application security, including authentication and authorization, APIs, web application security, secrets management, secure design patterns, OWASP risks, and third-party integrations
Strong working knowledge of identity and access management, including SSO, federation, MFA, RBAC, privileged access, service/workload identities, and least privilege
Strong knowledge of data security and privacy architecture, including data classification, encryption, key management, tokenization, and DLP
Demonstrated ability to perform threat modeling and identify attack surfaces, trust boundaries, realistic threat scenarios, and attack paths
Ability to interpret vulnerability assessments, penetration-test findings, and vendor-provided security assessment results
Experience evaluating third-party/vendor technologies and challenging unsupported vendor security assertions
Working knowledge of NIST CSF, NIST SP 800-53, NERC CIP, and ISO/IEC 27001
Ability to lead architecture review meetings and manage multiple concurrent assessments
Strong analytical, critical-thinking, problem-solving, written communication, and interpersonal skills
Ability to translate technical cybersecurity concerns into practical mitigation requirements
Ability to work independently with minimal supervision
High School Grad / GED
Bachelor's or Equivalent Experience
Minimum 4+ years of experience
Bachelor's degree, CISSP, CCSP, comparable certifications, cloud-platform experience, OT/ICS familiarity, AI/GenAI security awareness, and regulated-industry experience are preferred

Benefits

Comp & perks

Relocation provided, if applicable
Benefits available for employees and eligible family members
Reasonable accommodation in the application and selection process
Full-time exempt employee status