Job Summary
The Security Solution Architect designs secure, resilient, and operable solutions for business, technology, and security initiatives. The role translates enterprise security architecture direction, business requirements, and security controls into implementable solution designs across applications, integrations, data, infrastructure, cloud, security, and operations. The architect leads solution architecture from discovery through implementation and operational readiness while partnering with enterprise architects, engineering teams, security functions, and architecture governance forums.

Key Responsibilities
• Serve as a delivery partner to the Security Enterprise Architect by applying security strategy, standards, roadmaps, and reference architectures to initiatives and product solutions.
• Lead solution architecture activities from discovery and design through delivery, implementation, and operational readiness.
• Translate business capabilities, functional requirements, constraints, and nonfunctional requirements into clear and implementable solution designs.
• Evaluate solution options and document recommendations, tradeoffs, dependencies, risks, assumptions, and Architecture Decision Records.
• Work with engineering and delivery teams to clarify designs, resolve implementation issues, and ensure solutions remain aligned with approved architecture.
• Coordinate cross-domain design decisions involving applications, integrations, data, infrastructure, cloud, security, operations, and third-party services.
• Develop security solution architectures covering identity, privileged access, secrets and certificate management, application security, cloud and platform security, vulnerability management, adversarial testing, and software supply chain security.
• Perform threat modeling and security design reviews and define solution-level controls, trust boundaries, authentication and authorization flows, logging, monitoring, and evidence requirements.
• Design integrations among privileged access, secrets management, identity, governance, application, database, cloud, and operational platforms.
• Apply enterprise and domain standards, approved technologies, reference architectures, reusable patterns, and security guardrails to solution designs.
• Prepare architecture materials for design reviews and Architecture Review Board (ARB) discussions and maintain decision traceability through implementation.
• Identify deviations from standards, assess solution impacts, and document exceptions, compensating controls, and remediation commitments.
• Perform solution health checks to identify design drift, unresolved risks, operational gaps, and technical debt.
• Partner with security operations, application and platform engineering, infrastructure, data, cloud, privacy, risk, compliance, and delivery teams to develop feasible and supportable designs.
• Facilitate technical design sessions and communicate solution decisions to engineers, delivery leaders, business stakeholders, and architecture governance teams.
• Contribute reusable implementation guidance, lessons learned, and security architecture patterns to the enterprise architecture community.
• Mentor engineers and architects on secure design practices and effective application of security standards.

Required Qualifications
• Bachelor's degree in Computer Science, Engineering, Information Systems, or a related discipline, or equivalent practical experience.
• 8+ years of experience in solution architecture, engineering, or a related technology discipline, including experience leading complex enterprise solution designs.
• Demonstrated experience translating business and technical requirements into solution architectures spanning applications, integrations, data, infrastructure, security, and operations.
• Experience producing solution architecture designs, Architecture Decision Records, integration designs, nonfunctional requirements, and implementation guidance.
• Experience partnering with enterprise architects, product leaders, engineers, security, risk, and delivery teams from concept through implementation and operational readiness.
• Deep solution architecture experience with privileged access management platforms, with CyberArk strongly preferred, including credential vaulting, rotation, session controls, and just-in-time access.
• Experience designing secrets management solutions using platforms such as CyberArk Conjur or HashiCorp Vault.
• Working knowledge of identity and access management platforms such as Okta, PingOne, and SailPoint, including role-based access, lifecycle processes, certification, and least-privilege principles.
• Security solution design experience across Windows and Linux environments, major database platforms, cloud environments, APIs, applications, and software development lifecycles.
• Working knowledge of threat modeling, vulnerability remediation, adversarial testing, software supply chain security, and recognized security frameworks such as NIST, CIS, and ISO/IEC 27001.

Preferred Qualifications
• Advanced CyberArk experience, including PSM or CPM configuration, connector development, and enterprise integrations.
• Cloud security solution architecture experience, particularly AWS, including identity, key and secrets management, network security, and workload protection.
• Experience designing security controls for AI and large language model solutions.
• Experience working with architecture governance and Architecture Review Board processes.

Certifications
• CISSP certification.
• SABSA certification.
• AWS Certified Security - Specialty certification.
• CyberArk Defender or Sentry certification.