Lead Security Engineer - Architecture Enablement

Role Overview

The Lead Security Architecture Enablement Engineer focuses on developing and managing systems, tools, and workflows that foster scalable, measurable, and repeatable security architecture practices. This role transforms architectural principles and sanctioned decisions into actionable enablement capabilities by managing architecture repositories, decision-record workflows, standards and pattern lifecycle processes, model creation, validation efforts, evidence gathering, and architecture-performance metrics.

Key Responsibilities

• Design, build, and operate the security architecture enablement platform, encompassing repositories, templates, automated workflows, integrations, and lifecycle governance.
• Develop and sustain the architecture decision record (ADR) system, knowledge repositories, standards and pattern catalogs, reference model libraries, and related publishing processes.
• Create and update architecture models and diagrams employing approved notations, including context, deployment, identity, data flow, trust boundary, integration, and sequence views.
• Support validation and assurance initiatives by establishing evidence-collection workflows, implementing automated compliance checks, interpreting results, and notifying architects of significant deviations.
• Collaborate with domain architects by conducting focused research, technology assessments, control-to-requirement mappings, pattern development, threat model preliminary analysis, comparative evaluations, and proof-of-concept demonstrations.
• Convert validated architectural methodologies into reusable templates, checklists, evidence requirements, workflow procedures, and automated guardrails.
• Maintain comprehensive documentation and operational runbooks for architecture tools, workflow automations, repositories, data models, integrations, and control mappings.

Required Qualifications and Experience

• At least 6 years of progressively responsible experience in cybersecurity.
• Solid understanding of security architecture fundamentals and expertise in at least two of these areas: cloud and platform security, network security, identity and access management, application security, data protection, threat and response, control design, or architecture decision records.
• Practical experience in developing tools or platforms utilizing frameworks and scripting languages.
• Experience working with AI-assisted development workflows.

Preferred Qualifications

• Relevant industry certifications such as CISSP, CCSP, SABSA, TOGAF, or cloud architecture/security credentials from Microsoft, AWS, or Google Cloud.
• Familiarity with architecture repositories, modeling tools or ArchiMate notation, and policy-as-code approaches.