Job SummaryWe are seeking a highly skilled and forward-thinking Security Architect (ESA) to join our Information Security team. Reporting to the VP of Information Security, and operating within the global security team under the Chief Information Security Officer (CISO), this role serves as the lead security architect responsible for designing and implementing secure architectures that enable the business while reducing risk. The Security Architect will work closely with IT, Venues, Infrastructure, Application Development, Legal, Compliance, and the Security Operations team to define and embed security standards into enterprise technology solutions. The ideal candidate will possess a blend of deep technical expertise, architectural experience, and strong business acumen to drive secure design practices across a complex and distributed environment.
Essential Functions- Secure Architecture Design:
- Develop and maintain security architecture standards, reference architectures, and design patterns across cloud, infrastructure, network, endpoint, identity, and application environments.
- Define secure architecture principles that support network segmentation, identity-driven access controls, and secure access to enterprise resources.
- Ensure new technologies and solutions are designed with security in mind and align with organizational security, risk, and compliance requirements.
- Collaborate with business and technology stakeholders to ensure security architecture initiatives support strategic objectives and CISO priorities.
- Create architecture guidance for enterprise applications, cloud platforms, integrations, identity services, and venue technologies.
- Incorporate threat intelligence, threat modeling, and emerging risks into architecture decisions and security design standards.
- Solution Reviews and Advisory:
- Provide hands-on security guidance throughout solution design, implementation, and deployment efforts.
- Lead security architecture reviews and deliver risk-based recommendations for new technologies, major initiatives, and significant system changes.
- Work closely with engineering and operations teams to implement approved security architectures and controls.
- Evaluate and recommend security controls that balance risk reduction with business and operational needs.
- Cross-Functional Engagement:
- Partner with IT, Application Development, Infrastructure, Security Operations, and PMO teams to align security requirements and integration efforts.
- Serve as the security subject matter expert within project teams, helping stakeholders navigate security requirements, risks, and tradeoffs.
- Security Standards and Frameworks:
- Develop and maintain enterprise reference architectures, secure configuration standards, and reusable security patterns.
- Align architecture principles and security controls with frameworks such as NIST, ISO 27001, CIS Controls, and other regulatory requirements.
- Cloud and SaaS Security Enablement:
- Lead security architecture and design reviews for cloud platforms, SaaS solutions, enterprise applications, integrations, and emerging technologies.
- Partner with Cloud Engineering and DevOps teams to implement secure deployment and operational practices.
- Provide architectural guidance for cloud services, enterprise applications, and security technology implementations.
- Innovation and Future-State Planning:
- Monitor emerging threats, technologies, and industry trends to identify opportunities for improving the organization's security posture.
- Contribute to the long-term security architecture roadmap in support of business, technology, and security strategies.
Required Qualifications- BA/BS Degree (4-year) (Advanced Degree Preferred) Computer Science, Cybersecurity, Engineering, Information Systems, or related field. Master's degree or advanced certifications preferred.
- 8-10 years Experience in information security, cybersecurity, or information technology, including at least 5 years in security architecture, security engineering, or related technical leadership roles.
- Demonstrated experience designing and securing enterprise solutions across on-premises, cloud, and hybrid environments.
- Hands-on experience with identity and access management, network segmentation, encryption, logging and monitoring, and SSDLC practices.
- Experience developing security architecture standards, reference architectures, and secure design guidance.
- Experience performing architecture risk assessments, threat modeling, and security reviews for enterprise systems and technologies.
- Proven ability to work with engineering, infrastructure, application development, and business stakeholders to deliver secure technology solutions.
- Deep understanding of security technologies including firewalls, WAFs, IAM, endpoint protection, cloud security tools, and SIEM/SOAR platforms.
- Experience designing and securing identity and access management solutions, including authentication, authorization, federation, and privileged access controls.
- Familiarity with modern IT architectures including cloud-native platforms (Azure, AWS, GCP), containerization (Docker/Kubernetes), and DevOps pipelines.
- Strong analytical, critical thinking, and problem-solving skills with the ability to assess technical risk and provide sound recommendations.
- Excellent written and verbal communication skills, including the ability to convey complex topics to non-technical audiences.
- Strong relationship-building and collaboration skills across IT, Security, Legal, and business teams.
- Proficiency with architecture modeling tools and documentation platforms (e.g., Lucidchart, Visio, Confluence).
- Ability to balance strategic thinking with tactical execution in a fast-paced environment.
- Strong understanding of network segmentation strategies and modern identity-centric security models.
- Licenses/Certifications Relevant certifications such as CISSP, CCSP, SABSA, TOGAF, AWS Certified Security - Specialty (SCS-C03), Microsoft Azure Security Engineer Associate, CISA, or equivalent certifications preferred.
Pay Scale: $200,000.00 - $214,000.00
The pay scale shown above is for the LA Metro area. Actual pay scale may differ based on geographic region.
Bonus: This position is eligible for a bonus under the current bonus plan requirements.
Benefits:We offer a comprehensive benefits package that includes: medical, dental and vision insurance, paid holidays, vacation and sick time, company paid basic life insurance, voluntary life insurance, parental leave, 401k Plan (with a current employer match of 3%), flexible spending and health savings account options, and wellness offerings.
AEG reserves the right to change or modify the employee's job description whether orally or in writing, at any time during the employment relationship. AEG may require an employee to perform duties outside their normal description.
