10601 - Senior Manager, Security Architecture & Engineering
Location: Irvine, HQ
Role Overview
The Senior Manager, Security Architecture & Engineering owns the enterprise security reference architecture, secure-by-design standards, and the engineering and lifecycle management of security controls and tooling across cloud, network, endpoint, identity, data, and application environments. This leader manages a team of security architects and engineers and partners closely with Infrastructure, Cloud, Application Security, SOC/Incident Response, and Governance, Risk & Compliance (GRC) teams to design, build, and operate security solutions that protect the availability, integrity, and confidentiality of company information resources. The role also advises the organization on emerging security technologies and architectural patterns.
This position defines and maintains the multi-year security architecture roadmap and target state, aligned with control frameworks and architectural principles including Zero Trust, cloud security, identity and access management, network segmentation, and detection tooling. The Senior Manager sets technology standards for the security stack and leads team hiring, mentoring, performance development, workload prioritization, and delivery.
Key Responsibilities
• Own enterprise and solution security architecture, including threat modeling, architecture and design reviews, and reference architectures for cloud, network segmentation, identity, endpoint, data protection, and application security.
• Lead the engineering and implementation of security solutions and own the technology lifecycle and roadmap for security controls and tooling, with measurable goals for coverage, modernization, and retirement of legacy technologies.
• Translate approved policy into technical security standards, baselines, and reference architectures; chair or participate in the architecture review board; and manage exception and risk-acceptance processes for technical deviations.
• Support the development of security policies, standards, procedures, and related documentation.
• Gather and organize technical information regarding the organization's mission, goals, needs, existing security products, and ongoing information security programs.
• Interpret regulatory and framework requirements, including NIST CSF, NIST SP 800-53, ISO 27001, CIS Controls, PCI, and CCPA, into technical control requirements and architecture decisions.
• Implement automated control enforcement and compliance-as-code, and provide technical evidence and control telemetry to GRC.
• Conduct security design assessments, architecture gap analyses, and control validation for engineered solutions, and lead remediation of identified findings.
• Review application and system development plans from an information security perspective and provide recommendations and corrective guidance.
• Design and engineer identity and access architecture, including IAM, PAM, MFA, conditional access, least-privilege, and Zero Trust models.
• Participate in and support third-party audit activities.
• Prepare and manage security reports, status updates, project presentations, executive summaries, and related documentation.
• Participate in the preparation of disaster recovery and business continuity plans for information systems.
Basic Qualifications
• Bachelor's degree or equivalent, with major coursework in computer science or a related field.
• Minimum of ten (10) years of progressive experience in computing and security.
• Minimum of five (5) years of experience leading security architecture or security engineering teams.
• Experience designing and implementing enterprise security architecture across hybrid and multi-cloud environments, including AWS and Azure, as well as network, identity, endpoint, SIEM, EDR/MDR, and application security domains in multi-platform environments.
• Hands-on knowledge of Zero Trust, DevSecOps, secure software development lifecycle practices, automation, and infrastructure-as-code.
• Experience with security assessments and incident response in a dynamic IT environment.
• Knowledge of disaster recovery and business continuity planning.
• Knowledge of preventive, detective, and corrective controls, including principles and techniques associated with system compromise and denial-of-service incidents and the tools used to detect and prevent them.
• Knowledge of information security issues, requirements, trends, and applicable laws.
Preferred Qualifications
• CISSP (Certified Information Systems Security Professional).
• Architecture and technical certifications such as CISSP-ISSAP, CCSP, SABSA, or TOGAF.
• Cloud security certifications such as AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or Microsoft Certified: Cybersecurity Architect Expert (SC-100).
Salary Range: $181,240 - $259,160
In addition to a competitive salary, this position offers a fantastic benefits package that includes comprehensive medical/dental coverage, generous PTO, education assistance, and annual merit increase eligibility in a growth-focused work environment.
Team Culture
Our team thrives on collaboration, innovation, and continuous learning. We foster a supportive environment where every member is encouraged to share ideas and contribute to problem-solving. We value:
• Passion for Technology: We are enthusiastic about emerging technologies and their potential to transform the automotive industry.
• Agility: We work in an agile environment, adapting quickly to changes and continuously improving our processes.
• Teamwork: We believe in the power of teamwork and collaboration, supporting each other to achieve common goals.
• Growth: We prioritize personal and professional growth, offering opportunities for learning and development.
• Inclusivity: We maintain an inclusive culture where diverse perspectives are valued and everyone feels welcome.
