Enterprise Security Architect Jobs
Enterprise Security Architect jobs are open across financial services, healthcare, defense, technology, and government contracting, from senior to principal and staff levels, with specializations in cloud security, zero-trust architecture, and identity and access management. See the openings below and apply to the ones that match your experience.
Find JobsOverview
Showing 5 of 20+ Enterprise Security Architect jobs
The Opportunity:
Everyone knows security needs to be “baked in” to a system architecture—you actually know how to bake it in. You can identify and implement ways to harden systems and reduce their attack surface. What if you could use your cyber skills to lead the design and development of secure systems? We’re looking for a forward-learning cybersecurity thinker who can create solutions for Fortune 250 clients that will withstand even the most advanced cyber threats.
As a lead Enterprise Security Architect at Booz Allen Defy, you’ll support the growth, delivery, and continuous evolution of the company’s threat detection and response capability. This role combines deep technical credibility with the insight, communication, and commercial leadership required to advise complex organizations, lead multidisciplinary teams, shape target-state capabilities, and deliver measurable improvements in detection and response.
The successful candidate will be a broad cybersecurity practitioner with strong depth in detection engineering, endpoint security, security telemetry, log pipelining, data ingestion, and ETL. They will translate client problems into practical architectures, operating models, roadmaps, and implementation plans, serve as a trusted subject matter expert in proposals and client pursuits, and apply sound AI principles to emerging detection and response challenges with appropriate security, governance, and human oversight.
What You’ll Work On:
- Execute the vision, priorities, and delivery standards for the threat detection and response capability, aligned to client risk, business outcomes, and market needs.
- Build and maintain reusable methods, reference architectures, playbooks, accelerators, and points of view across detection engineering, endpoint, telemetry, and response.
- Coach and develop cybersecurity practitioners, technical leads, and emerging consultants and create an environment that values technical rigor, practical delivery, and clear communication.
- Lead or oversee cybersecurity engagements from problem definition through architecture, roadmap, implementation support, and executive readout.
- Assess current-state detection and response capabilities and define target states that improve visibility, triage, investigation, response, resilience, and measurable outcomes.
- Design and review detection engineering approaches, including use-case development, content lifecycle management, detection-as-code, testing, tuning, threat-informed coverage, and operational handoff.
- Develop practical approaches for endpoint security, XDR/SIEM integration, telemetry strategy, log routing, streaming, ingestion, data quality, pipeline resilience, and ETL or data transformation.
- Translate complex technical issues into concise recommendations for executives, business leaders, security practitioners, and engineering teams.
- Facilitate workshops and working sessions that bring together cybersecurity, IT, cloud, application, identity, network, data, operations, and business stakeholders.
- Identify and apply where AI, machine learning, generative AI, and agentic capabilities can improve detection, triage, investigation, threat hunting, engineering productivity, and response execution.
Join us. The world can’t wait.
You Have:
- 10+ years of experience in architecture and transformation, including current-state assessment, target-state architecture, integration patterns, cloud and hybrid environments, operating models, roadmaps, implementation governance, or adoption and change
- 10+ years of experience leading consulting engagements, technical workstreams, or cybersecurity transformation programs for complex organizations
- 10+ years of experience turning ambiguous problems into practical capabilities, repeatable methods, and measurable delivery results
- 5+ years of experience in threat detection and response, including detection strategy, use-case engineering, threat hunting, incident response, case management, SOC operating models, SOAR, XDR/SIEM, or metrics and continuous improvement
- 5+ years of experience in detection engineering, including detection lifecycle, detection-as-code, analytic logic, rule development, testing and validation, tuning, content governance, ATT&CK-informed coverage, or engineering workflows
- 5+ years of experience in endpoint and identity, including EDR/XDR, endpoint telemetry, endpoint controls, identity-aware detection, privileged access, containment and remediation workflows, or endpoint response constraints
- 5+ years of experience in telemetry and data engineering, including logging strategy, source onboarding, log pipelines, routing and forwarding, streaming and batch patterns, ingestion, normalization, enrichment, data quality, ETL, or evidence resilience
- 2+ years of experience in AI for cybersecurity, including AI/ML fundamentals, generative AI, retrieval and grounding, agentic workflows, evaluation, prompt, and model risk, human-in-the-loop design, or responsible automation
- Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or Engineering
Nice If You Have:
- 10+ years of experience in a professional services, systems integration, advisory, or consulting environment
- 5+ years of experience responding to RFPs and developing client-ready solutions, estimates, delivery plans, and executive presentations
- 5+ years of experience with major security platforms such as Microsoft Sentinel or Defender, Splunk, CrowdStrike, Google Chronicle, Elastic, QRadar, or comparable technologies
- 2+ years of experience with cloud platforms, data platforms, event streaming, security orchestration, infrastructure-as-code, or software engineering practices
- CISSP, GIAC, SABSA, TOGAF, CCSP, Cloud Security, or Vendor-specific Security Certifications
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $112,800.00 to $257,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided .
Work Model
Our people-first culture prioritizes the benefits of collaboration. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.
- Remote : If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
- Hybrid : If this position is listed as hybrid, you will be expected to work from a Booz Allen or customer facility, in alignment with your leadership's expectations and the needs of the role.
- Onsite : If this position is listed as onsite, work will primarily be performed full-time at a customer facility, where employees will collaborate directly with colleagues and customers as required by the role.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
The Opportunity:
Everyone knows security needs to be “baked in” to a system architecture—you actually know how to bake it in. You can identify and implement ways to harden systems and reduce their attack surface. What if you could use your cyber skills to lead the design and development of secure systems? We’re looking for a forward-learning cybersecurity thinker who can create solutions for Fortune 250 clients that will withstand even the most advanced cyber threats.
As a lead Enterprise Security Architect at Booz Allen Defy, you’ll support the growth, delivery, and continuous evolution of the company’s threat detection and response capability. This role combines deep technical credibility with the insight, communication, and commercial leadership required to advise complex organizations, lead multidisciplinary teams, shape target-state capabilities, and deliver measurable improvements in detection and response.
The successful candidate will be a broad cybersecurity practitioner with strong depth in detection engineering, endpoint security, security telemetry, log pipelining, data ingestion, and ETL. They will translate client problems into practical architectures, operating models, roadmaps, and implementation plans, serve as a trusted subject matter expert in proposals and client pursuits, and apply sound AI principles to emerging detection and response challenges with appropriate security, governance, and human oversight.
What You’ll Work On:
- Execute the vision, priorities, and delivery standards for the threat detection and response capability, aligned to client risk, business outcomes, and market needs.
- Build and maintain reusable methods, reference architectures, playbooks, accelerators, and points of view across detection engineering, endpoint, telemetry, and response.
- Coach and develop cybersecurity practitioners, technical leads, and emerging consultants and create an environment that values technical rigor, practical delivery, and clear communication.
- Lead or oversee cybersecurity engagements from problem definition through architecture, roadmap, implementation support, and executive readout.
- Assess current-state detection and response capabilities and define target states that improve visibility, triage, investigation, response, resilience, and measurable outcomes.
- Design and review detection engineering approaches, including use-case development, content lifecycle management, detection-as-code, testing, tuning, threat-informed coverage, and operational handoff.
- Develop practical approaches for endpoint security, XDR/SIEM integration, telemetry strategy, log routing, streaming, ingestion, data quality, pipeline resilience, and ETL or data transformation.
- Translate complex technical issues into concise recommendations for executives, business leaders, security practitioners, and engineering teams.
- Facilitate workshops and working sessions that bring together cybersecurity, IT, cloud, application, identity, network, data, operations, and business stakeholders.
- Identify and apply where AI, machine learning, generative AI, and agentic capabilities can improve detection, triage, investigation, threat hunting, engineering productivity, and response execution.
Join us. The world can’t wait.
You Have:
- 10+ years of experience in architecture and transformation, including current-state assessment, target-state architecture, integration patterns, cloud and hybrid environments, operating models, roadmaps, implementation governance, or adoption and change
- 10+ years of experience leading consulting engagements, technical workstreams, or cybersecurity transformation programs for complex organizations
- 10+ years of experience turning ambiguous problems into practical capabilities, repeatable methods, and measurable delivery results
- 5+ years of experience in threat detection and response, including detection strategy, use-case engineering, threat hunting, incident response, case management, SOC operating models, SOAR, XDR/SIEM, or metrics and continuous improvement
- 5+ years of experience in detection engineering, including detection lifecycle, detection-as-code, analytic logic, rule development, testing and validation, tuning, content governance, ATT&CK-informed coverage, or engineering workflows
- 5+ years of experience in endpoint and identity, including EDR/XDR, endpoint telemetry, endpoint controls, identity-aware detection, privileged access, containment and remediation workflows, or endpoint response constraints
- 5+ years of experience in telemetry and data engineering, including logging strategy, source onboarding, log pipelines, routing and forwarding, streaming and batch patterns, ingestion, normalization, enrichment, data quality, ETL, or evidence resilience
- 2+ years of experience in AI for cybersecurity, including AI/ML fundamentals, generative AI, retrieval and grounding, agentic workflows, evaluation, prompt, and model risk, human-in-the-loop design, or responsible automation
- Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or Engineering
Nice If You Have:
- 10+ years of experience in a professional services, systems integration, advisory, or consulting environment
- 5+ years of experience responding to RFPs and developing client-ready solutions, estimates, delivery plans, and executive presentations
- 5+ years of experience with major security platforms such as Microsoft Sentinel or Defender, Splunk, CrowdStrike, Google Chronicle, Elastic, QRadar, or comparable technologies
- 2+ years of experience with cloud platforms, data platforms, event streaming, security orchestration, infrastructure-as-code, or software engineering practices
- CISSP, GIAC, SABSA, TOGAF, CCSP, Cloud Security, or Vendor-specific Security Certifications
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $112,800.00 to $257,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided .
Work Model
Our people-first culture prioritizes the benefits of collaboration. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.
- Remote : If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
- Hybrid : If this position is listed as hybrid, you will be expected to work from a Booz Allen or customer facility, in alignment with your leadership's expectations and the needs of the role.
- Onsite : If this position is listed as onsite, work will primarily be performed full-time at a customer facility, where employees will collaborate directly with colleagues and customers as required by the role.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
Enterprise Security Architect Jobs by Experience Level
See All 20 Enterprise Security Architect Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsEnterprise Security Architect Job Market
Who's Hiring
What Employers Look For
The qualifications that appear most often in enterprise security architect jobs.
- CISSP or equivalent security certification such as CISM, CCSP, or CASP+
- Experience designing enterprise security architectures across hybrid or multi-cloud environments
- Proficiency with security frameworks including NIST CSF, ISO 27001, or MITRE ATT&CK
- Hands-on background with zero-trust principles, identity and access management, and network segmentation
- Seven or more years of progressive information security experience with at least three in an architect role
- Bachelor's degree in computer science, information security, or a closely related technical field
Tips for Your Enterprise Security Architect Job Search
Tailor your resume to framework fluency
Enterprise security architect job descriptions consistently call out NIST CSF, TOGAF, SABSA, or MITRE ATT&CK by name. Mirror that exact language in your resume's skills and project sections so automated screening tools surface your application.
Lead with business impact, not tools
Hiring managers for this role are often C-suite stakeholders. Frame accomplishments around risk reduction, compliance outcomes, and program scope rather than listing platforms. 'Designed zero-trust architecture reducing lateral movement risk across a 15,000-seat environment' outperforms a tools list.
Apply early to roles that fit
Migrate Mate lists enterprise security architect openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Filter by industry to target your certifications
Defense and federal contractors require clearance-compatible certs like CISSP or CASP+, while cloud-native companies weight AWS Security Specialty or CCSP. Narrowing your search by industry first helps you apply only where your credentials are a direct match.
Prepare a threat-modeling case study
Many enterprise security architect interviews include a whiteboard or take-home exercise where you design a secure architecture from scratch. Prepare a documented example from your past work that walks through threat modeling, control selection, and trade-off decisions you can walk through live.
Negotiate scope alongside compensation
At the architect level, your influence over tooling decisions, team structure, and program roadmap matters as much as pay. During offer discussions, clarify reporting lines, budget authority, and whether the role is greenfield or remediation-focused before accepting.
Enterprise Security Architect Jobs: Frequently Asked Questions
Which companies are hiring the most enterprise security architects?
The most active employers for enterprise security architects right now are Booz Allen Hamilton, EY, and Gordon Food Service, and the most openings are in Virginia, California, and Florida, based on current listings on Migrate Mate as of November 2026. Financial services, defense contractors, and large health systems tend to post the highest volume of architect-level security roles year-round.
How many enterprise security architect jobs are remote?
About 100% of enterprise security architect openings are fully remote or hybrid as of November 2026, reflecting strong demand for distributed senior talent. Cloud security and GRC-focused architect roles tend to be the most remote-friendly, while positions tied to on-premise data centers or federal contracts more commonly require on-site presence.
How do you become an enterprise security architect?
Start by building deep hands-on experience in at least one security domain, such as network security, cloud security, or identity management, then broaden into adjacent areas. Earning a certification like CISSP establishes baseline credibility. Progress through senior engineering or security analyst roles, take on cross-functional project ownership, and develop the ability to translate technical risk into business language for executive stakeholders.
How do you get hired as an enterprise security architect with little experience?
Most employers expect seven-plus years in security before hiring at the architect level, so the practical path is positioning yourself for associate or junior architect titles at smaller organizations or managed security service providers. Contribute to architecture documentation, threat-modeling exercises, or security review boards in your current role, and pursue SABSA or TOGAF training to demonstrate architectural thinking before you hold the title formally.
What does the enterprise security architect interview process look like?
Expect a multi-stage process that opens with a recruiter screen, followed by a technical interview covering framework knowledge, threat modeling, and architecture design principles. Most employers then include a panel or whiteboard round where you design a secure architecture under realistic constraints. Final rounds typically involve a conversation with a CISO or senior engineering leader focused on strategic judgment, stakeholder communication, and program leadership experience.
Where can I find and apply to enterprise security architect jobs?
You can find and apply to enterprise security architect jobs on Migrate Mate, which lists current openings from across the United States. Search the listings to find roles that fit your experience level, industry background, and preferred location, then apply directly to each opening that matches.
See All 20 Enterprise Security Architect Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs