Cybersecurity Enterprise Architect

JOB RESPONSIBILITIES

:

• Architect and implement secure-by-design cybersecurity components in enterprise-wide systems, including those incorporating AI/ML technologies across cloud platforms (AWS, Azure, GCP), hybrid environments and on-prem infrastructure.

• Define and enforce architectural standards for secure cloud adoption, container security, identity and access management (IAM), network segmentation, and integration of AI models, services, and data pipelines into business processes and products.

• Design cybersecurity strategies that integrate AI/ML components securely, addressing risks such as model poisoning, adversarial inputs, and data exposure.

• Lead the secure integration of AI into cloud-native platforms and DevSecOps pipelines, including AI model deployment, governance, and monitoring.

• Address complex challenges in security, integration, interoperability, and multi-cloud or hybrid platforms, including secure AI lifecycle management.

• Act as a technical expert on security architecture for traditional systems and next-gen platforms using generative AI, large language models (LLMs), and machine learning.

• Serve as a technical expert in security architecture, including cloud workload protection, cloud security posture management (CSPM), and compliance alignment.

• Collaborate with IT, CloudOps, Security, Data Science, and business units to ensure secure system design aligned to enterprise goals.

• Lead security architecture reviews and cloud adoption efforts, including migrations, SaaS evaluations, and third-party integrations.

• Influence strategic direction by communicating the value and necessity of cybersecurity architecture—including emerging AI risk—across leadership, IT, and business lines.

ADDITIONAL RESPONSIBILITIES:

• Define reference architectures and security patterns for securing AI/ML pipelines on cloud platforms.

• Guide the application of Zero Trust principles to multi-cloud environments, identity management, and federated data systems.

• Contribute to the development and enforcement of enterprise cloud security policies, standards, and compliance controls (e.g., NIST, ISO, FedRAMP, SOC 2).

• Stay ahead of evolving cloud and AI security trends, regulatory requirements (e.g. NIST), and best practices.

• Coach and mentor both engineers and architects on secure development practices for cloud-native and AI-enabled applications.

EDUCATION:

• Bachelor's degree in Information Security or related field and/or equivalent combination of education and experience.

EXPERIENCE:

• At least 10 years of experience in an information technology or security engineering department, preferably as a Lead Engineer.

• 10+ years of experience in cybersecurity or information security roles, with at least 5 years in a leadership or architecture capacity.

• 5+ years of hands-on experience with cloud platforms (AWS, Azure, GCP), including native security tools and cloud infrastructure design.

• Experience securing large-scale, mission-critical enterprise environments, including hybrid and multi-cloud architectures.

• Demonstrated experience with AI security or machine learning governance is strongly preferred.

• Strong technical experience with the implementation of cybersecurity technologies in diverse, enterprise environments to include IDS, IPS, EDR, DLP.

• Ability to obtain and maintain security clearance is required.

COMPETENCIES – SKILLS/KNOWLEDGE/ABILITIES:

• Effectively manage objectives, priorities, tradeoffs and risks for the organization.

• Ability to foster an environment of experimentation and continual improvement.

• Provide both technical leadership and mentorship of people managers.

• Organize, plan, prioritize and follow through on work.

• Use good judgement, problem-solving and decision-making skills.

• Work in a fast-paced environment where deadlines are essential.

• Strong communication and interpersonal skills with technical & non-technical clients as well as executive staff.

• Build strong relationships between cybersecurity, IT and business users.

• A working knowledge of industry security best practices.

Compensation range for this position is - $125,000 - $150,000 annually, depending on experience.

#LI-Hybrid

#LI-CW1

Our benefits package includes medical, dental, vision, HSA and FSA, generous earned time off, 401K/student loan repayment, life insurance & AD&D insurance, employee assistance program, employee stock purchase program, tuition reimbursement, performance-based incentive pay, short- and long-term disability, and a robust wellness program. Click here to learn more about our benefits: .

Nelnet is committed to providing a welcoming and respectful workplace where all associates have the opportunity to succeed. As an Equal Opportunity Employer, we ensure that all qualified applicants are considered for employment. Employment decisions are made without regard to race, color, religion/creed, national origin, gender, sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by federal, state, or local law. We value the unique contributions of every team member and believe that a positive work environment benefits everyone.

Nelnet is a Drug Free and Tobacco Free Workplace.

Use of Artificial Intelligence in Hiring

We may use automated or artificial intelligence enabled tools to assist with the initial review of applications, such as identifying relevant skills or experience. These tools are used to support human review and do not make hiring decisions. A recruiter reviews applications and determines which candidates move forward in the hiring process. For more information, see our Privacy Policy and Pre-Use Notice: Automated Tools in Hiring