IT Architect Jobs in Colorado
IT Architect jobs in Colorado are concentrated in enterprise technology, aerospace, defense, and financial services, with demand at every level from mid-career technical architects to principal and distinguished-level roles. Denver, Colorado Springs, and Boulder are the largest hiring metros, anchored by long-established employers such as Lockheed Martin, Ball Corporation, and Charles Schwab. The most in-demand specialties are cloud architecture, enterprise systems integration, and cybersecurity-aligned infrastructure design. Scan the live roles below and apply to whichever ones fit.
Find IT Architect JobsOverview
Open roles8
Top employerBoston Consulting
Top cityDenver, CO
Cities hiring6
Work type40% On-site
Top industryConsulting
Showing 5 of 8+ IT Architect jobs
SASE Architect (IT Engineering)
We won't show you this job again
Added 5d ago
Keysight Technologies
SASE Architect (IT Engineering)
Colorado Springs, Colorado
Added 5d ago
Senior IT Architect
We won't show you this job again
Added 3w ago
Children's Hospital Colorado
Senior IT Architect
Aurora, Colorado
Added 3w ago
IT Solutions Architect – Denver International Airport
We won't show you this job again
Added 1mo ago
City and County of Denver
IT Solutions Architect – Denver International Airport
Denver International Airport, Colorado
Added 1mo ago
IT Solutions Architect 4
We won't show you this job again
Added 1mo ago
United Launch Alliance (ULA)
IT Solutions Architect 4
Centennial, Colorado
Added 1mo ago
AI Factory Compute & IT Infrastructure Architect
We won't show you this job again
Added 1mo ago
Siemens
AI Factory Compute & IT Infrastructure Architect
Lakewood, Colorado
Added 1mo ago
Added 5d ago
SASE Architect (IT Engineering)
Keysight Technologies·Colorado Springs, Colorado
Job functions:
$111k - $184k/yr
Remote (US)
Bachelor's degree in information technology
10,000+ employees
Job Description
Overview:
Our award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.
Lead the evolution of Keysight's global Secure Access Service Edge (SASE) strategy and architecture. As a senior technical leader, you will drive the design and implementation of Zero Trust security solutions that support a global workforce and complex enterprise environment. This role offers the opportunity to influence long-term security strategy, partner with senior leadership, and help define the future state of secure access across Keysight.
In this highly visible role, you will serve as a trusted technical leader responsible for advancing Keysight's global secure access architecture. You'll define technology standards, guide strategic initiatives, and partner with cross-functional teams to deliver innovative security solutions that enable business growth while protecting critical assets. Working with cutting-edge cloud, network, and security technologies, you'll help drive the transformation of secure access across the enterprise and influence the direction of cybersecurity for years to come.
Responsibilities:
Technical Leadership & Operational Excellence
Cross-Functional Collaboration & Vendor Leadership
Qualifications:
Basic Qualifications
Preferred Certifications
Required Technical Experience
Desired Technical Skills
Additional Requirements
Careers Privacy Statement
Keysight is an Equal Opportunity Employer
Colorado Pay Range: Minimum $110,600 – Maximum $184,330
Note: For other locations, pay ranges will vary by region
US Employees may be eligible for the following benefits:
Keysight is at the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimization. Our ~15,000 employees create world-class solutions in communications, 5G, automotive, energy, quantum, aerospace, defense, and semiconductor markets for customers in over 100 countries. Learn more about what we do.
Our award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.
Lead the evolution of Keysight's global Secure Access Service Edge (SASE) strategy and architecture. As a senior technical leader, you will drive the design and implementation of Zero Trust security solutions that support a global workforce and complex enterprise environment. This role offers the opportunity to influence long-term security strategy, partner with senior leadership, and help define the future state of secure access across Keysight.
In this highly visible role, you will serve as a trusted technical leader responsible for advancing Keysight's global secure access architecture. You'll define technology standards, guide strategic initiatives, and partner with cross-functional teams to deliver innovative security solutions that enable business growth while protecting critical assets. Working with cutting-edge cloud, network, and security technologies, you'll help drive the transformation of secure access across the enterprise and influence the direction of cybersecurity for years to come.
Responsibilities:
SASE Architecture & Strategy
- Define and own Keysight's global Secure Access Service Edge (SASE) and Security Service Edge (SSE) architecture, with Netskope Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (Private Access/ZTNA) as the core platform.
- Develop and maintain the SASE technology roadmap, reference architectures, design standards, and policy frameworks that support secure web access, SaaS and cloud services, and private application access across 130+ global sites and a hybrid workforce.
- Lead architecture and technical decision-making for major initiatives, including migration from legacy VPN, proxy, and firewall-based access solutions to Netskope, cloud and SaaS adoption, M&A integrations, and strategic security enhancements.
- Design and oversee integrations between Netskope and identity, endpoint, cloud, and security platforms, including SSO, MFA, Conditional Access, SIEM/SOAR, DLP, and cloud-native services, to deliver consistent end-to-end security.
- Evaluate emerging technologies, vendor roadmap developments, licensing strategies, and cost optimization opportunities; develop architecture decision records, recommendations, and business cases for leadership.
- Partner closely with Information Security, Identity, Cloud, Endpoint, Infrastructure, and Application teams to ensure solutions align with security, compliance, privacy, and business requirements.
Technical Leadership & Operational Excellence
- Serve as the senior technical authority and Tier 3 escalation point for the Netskope platform, providing guidance on complex incidents, troubleshooting, root cause analysis, and long-term corrective actions.
- Mentor and coach engineers while promoting best practices, operational excellence, automation, infrastructure-as-code, and scalable support models.
- Drive adoption of APIs, Python, Terraform, and other automation technologies to improve reliability, consistency, operational efficiency, and service scalability.
- Define monitoring standards, service-level objectives (SLOs), capacity planning, resiliency requirements, failover strategies, and business continuity designs for SASE services.
- Establish architectural and operational standards that reduce risk, improve user experience, and support long-term platform growth.
Cross-Functional Collaboration & Vendor Leadership
- Collaborate with business and IT stakeholders to translate business requirements into scalable security architectures and communicate design decisions, trade-offs, and recommendations to both technical and non-technical audiences.
- Manage strategic relationships with Netskope and other technology partners, including roadmap discussions, escalations, proof-of-concept evaluations, and technical reviews.
- Influence enterprise security strategy by guiding technology direction and supporting the adoption of modern Zero Trust and secure access capabilities across the organization.
Qualifications:
We're looking for a highly skilled security and network architect with deep expertise in modern secure access technologies and a proven ability to lead enterprise-scale security initiatives.
Basic Qualifications
- Bachelor's degree in Engineering, Computer Science, Information Technology, or an equivalent combination of certifications and experience.
- 8+ years of hands-on network and/or network security experience, including 3+ years architecting and deploying SASE/SSE, cloud proxy, or Zero Trust solutions in a large enterprise environment.
- Deep expertise in Zero Trust architecture, Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (ZTNA) design, including TLS inspection, Data Loss Prevention (DLP), and traffic steering strategies.
- Strong understanding of TCP/IP, DNS, TLS/PKI, identity federation technologies (SAML, OIDC, SCIM), and cloud networking and security concepts.
- Proven ability to lead complex cross-functional initiatives and communicate architecture, strategy, and technical recommendations to both executives and engineering teams.
Preferred Certifications
- Netskope certifications such as NCSE, NCSP, or NCSA.
- Security and architecture certifications such as CISSP, CCSP, CCNP Security, SABSA, TOGAF, or similar credentials.
Required Technical Experience
- Hands-on architecture and administration experience with Netskope (SWG, CASB, and Private Access/ZTNA) or an equivalent enterprise Security Service Edge (SSE) platform such as Zscaler or Prisma Access.
- Experience designing and implementing identity and conditional access solutions using platforms such as Entra ID and Okta.
- Strong understanding of enterprise networking fundamentals, including LAN/WAN, routing, and DNS.
Desired Technical Skills
Experience with several of the technologies below is highly desirable:
- Data Loss Prevention (DLP) program development, policy design, and tuning.
- SaaS and IaaS security posture management across Microsoft 365, Google Workspace, Salesforce, AWS, Azure, and GCP environments.
- Endpoint management, endpoint security, and EDR integrations, including Intune, Jamf, CrowdStrike, and Microsoft Defender.
- SIEM/SOAR integrations and security incident response processes.
- Palo Alto Networks and Fortinet firewall technologies.
- Automation and Infrastructure-as-Code using Python, PowerShell, Terraform, and REST APIs.
- ITIL-based incident, problem, and change management practices, including ServiceNow.
- Enterprise architecture frameworks, technical standards development, architecture governance, and technical documentation.
Additional Requirements
- Willingness to work flexible hours, including occasional weekend and holiday support for critical projects, deployments, or incident response activities.
- Ability to travel occasionally to support global deployments, architecture reviews, and stakeholder engagement.
Careers Privacy Statement
Keysight is an Equal Opportunity Employer
Keysight Technologies Inc. is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other protected categories under all applicable laws.
Pay Transparency
The level of role will be based on applicable experience, education, and skills. Most offers will be between the minimum and the midpoint of the Salary Range listed below.
Colorado Pay Range: Minimum $110,600 – Maximum $184,330
Note: For other locations, pay ranges will vary by region
US Employees may be eligible for the following benefits:
- Medical, dental and vision
- Health Savings Account
- Health Care and Dependent Care Flexible Spending Accounts
- Life, Accident, Disability insurance
- Business Travel Accident and Business Travel Health
- 401(k) Plan
- Flexible Time Off, Paid Holidays
- Paid Family Leave
- Discounts, Perks
- Tuition Reimbursement
- Adoption Assistance
- Incentive Programs
- ESPP (Employee Stock Purchase Plan)
Keysight Technologies
SASE Architect (IT Engineering)
Colorado Springs, Colorado
Added 5d ago10,000+ employees
Job functions:
$111k - $184k/yr
Remote (US)
Bachelor's degree in information technology
Job Description
Overview:
Our award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.
Lead the evolution of Keysight's global Secure Access Service Edge (SASE) strategy and architecture. As a senior technical leader, you will drive the design and implementation of Zero Trust security solutions that support a global workforce and complex enterprise environment. This role offers the opportunity to influence long-term security strategy, partner with senior leadership, and help define the future state of secure access across Keysight.
In this highly visible role, you will serve as a trusted technical leader responsible for advancing Keysight's global secure access architecture. You'll define technology standards, guide strategic initiatives, and partner with cross-functional teams to deliver innovative security solutions that enable business growth while protecting critical assets. Working with cutting-edge cloud, network, and security technologies, you'll help drive the transformation of secure access across the enterprise and influence the direction of cybersecurity for years to come.
Responsibilities:
Technical Leadership & Operational Excellence
Cross-Functional Collaboration & Vendor Leadership
Qualifications:
Basic Qualifications
Preferred Certifications
Required Technical Experience
Desired Technical Skills
Additional Requirements
Careers Privacy Statement
Keysight is an Equal Opportunity Employer
Colorado Pay Range: Minimum $110,600 – Maximum $184,330
Note: For other locations, pay ranges will vary by region
US Employees may be eligible for the following benefits:
Keysight is at the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimization. Our ~15,000 employees create world-class solutions in communications, 5G, automotive, energy, quantum, aerospace, defense, and semiconductor markets for customers in over 100 countries. Learn more about what we do.
Our award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.
Lead the evolution of Keysight's global Secure Access Service Edge (SASE) strategy and architecture. As a senior technical leader, you will drive the design and implementation of Zero Trust security solutions that support a global workforce and complex enterprise environment. This role offers the opportunity to influence long-term security strategy, partner with senior leadership, and help define the future state of secure access across Keysight.
In this highly visible role, you will serve as a trusted technical leader responsible for advancing Keysight's global secure access architecture. You'll define technology standards, guide strategic initiatives, and partner with cross-functional teams to deliver innovative security solutions that enable business growth while protecting critical assets. Working with cutting-edge cloud, network, and security technologies, you'll help drive the transformation of secure access across the enterprise and influence the direction of cybersecurity for years to come.
Responsibilities:
SASE Architecture & Strategy
- Define and own Keysight's global Secure Access Service Edge (SASE) and Security Service Edge (SSE) architecture, with Netskope Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (Private Access/ZTNA) as the core platform.
- Develop and maintain the SASE technology roadmap, reference architectures, design standards, and policy frameworks that support secure web access, SaaS and cloud services, and private application access across 130+ global sites and a hybrid workforce.
- Lead architecture and technical decision-making for major initiatives, including migration from legacy VPN, proxy, and firewall-based access solutions to Netskope, cloud and SaaS adoption, M&A integrations, and strategic security enhancements.
- Design and oversee integrations between Netskope and identity, endpoint, cloud, and security platforms, including SSO, MFA, Conditional Access, SIEM/SOAR, DLP, and cloud-native services, to deliver consistent end-to-end security.
- Evaluate emerging technologies, vendor roadmap developments, licensing strategies, and cost optimization opportunities; develop architecture decision records, recommendations, and business cases for leadership.
- Partner closely with Information Security, Identity, Cloud, Endpoint, Infrastructure, and Application teams to ensure solutions align with security, compliance, privacy, and business requirements.
Technical Leadership & Operational Excellence
- Serve as the senior technical authority and Tier 3 escalation point for the Netskope platform, providing guidance on complex incidents, troubleshooting, root cause analysis, and long-term corrective actions.
- Mentor and coach engineers while promoting best practices, operational excellence, automation, infrastructure-as-code, and scalable support models.
- Drive adoption of APIs, Python, Terraform, and other automation technologies to improve reliability, consistency, operational efficiency, and service scalability.
- Define monitoring standards, service-level objectives (SLOs), capacity planning, resiliency requirements, failover strategies, and business continuity designs for SASE services.
- Establish architectural and operational standards that reduce risk, improve user experience, and support long-term platform growth.
Cross-Functional Collaboration & Vendor Leadership
- Collaborate with business and IT stakeholders to translate business requirements into scalable security architectures and communicate design decisions, trade-offs, and recommendations to both technical and non-technical audiences.
- Manage strategic relationships with Netskope and other technology partners, including roadmap discussions, escalations, proof-of-concept evaluations, and technical reviews.
- Influence enterprise security strategy by guiding technology direction and supporting the adoption of modern Zero Trust and secure access capabilities across the organization.
Qualifications:
We're looking for a highly skilled security and network architect with deep expertise in modern secure access technologies and a proven ability to lead enterprise-scale security initiatives.
Basic Qualifications
- Bachelor's degree in Engineering, Computer Science, Information Technology, or an equivalent combination of certifications and experience.
- 8+ years of hands-on network and/or network security experience, including 3+ years architecting and deploying SASE/SSE, cloud proxy, or Zero Trust solutions in a large enterprise environment.
- Deep expertise in Zero Trust architecture, Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (ZTNA) design, including TLS inspection, Data Loss Prevention (DLP), and traffic steering strategies.
- Strong understanding of TCP/IP, DNS, TLS/PKI, identity federation technologies (SAML, OIDC, SCIM), and cloud networking and security concepts.
- Proven ability to lead complex cross-functional initiatives and communicate architecture, strategy, and technical recommendations to both executives and engineering teams.
Preferred Certifications
- Netskope certifications such as NCSE, NCSP, or NCSA.
- Security and architecture certifications such as CISSP, CCSP, CCNP Security, SABSA, TOGAF, or similar credentials.
Required Technical Experience
- Hands-on architecture and administration experience with Netskope (SWG, CASB, and Private Access/ZTNA) or an equivalent enterprise Security Service Edge (SSE) platform such as Zscaler or Prisma Access.
- Experience designing and implementing identity and conditional access solutions using platforms such as Entra ID and Okta.
- Strong understanding of enterprise networking fundamentals, including LAN/WAN, routing, and DNS.
Desired Technical Skills
Experience with several of the technologies below is highly desirable:
- Data Loss Prevention (DLP) program development, policy design, and tuning.
- SaaS and IaaS security posture management across Microsoft 365, Google Workspace, Salesforce, AWS, Azure, and GCP environments.
- Endpoint management, endpoint security, and EDR integrations, including Intune, Jamf, CrowdStrike, and Microsoft Defender.
- SIEM/SOAR integrations and security incident response processes.
- Palo Alto Networks and Fortinet firewall technologies.
- Automation and Infrastructure-as-Code using Python, PowerShell, Terraform, and REST APIs.
- ITIL-based incident, problem, and change management practices, including ServiceNow.
- Enterprise architecture frameworks, technical standards development, architecture governance, and technical documentation.
Additional Requirements
- Willingness to work flexible hours, including occasional weekend and holiday support for critical projects, deployments, or incident response activities.
- Ability to travel occasionally to support global deployments, architecture reviews, and stakeholder engagement.
Careers Privacy Statement
Keysight is an Equal Opportunity Employer
Keysight Technologies Inc. is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other protected categories under all applicable laws.
Pay Transparency
The level of role will be based on applicable experience, education, and skills. Most offers will be between the minimum and the midpoint of the Salary Range listed below.
Colorado Pay Range: Minimum $110,600 – Maximum $184,330
Note: For other locations, pay ranges will vary by region
US Employees may be eligible for the following benefits:
- Medical, dental and vision
- Health Savings Account
- Health Care and Dependent Care Flexible Spending Accounts
- Life, Accident, Disability insurance
- Business Travel Accident and Business Travel Health
- 401(k) Plan
- Flexible Time Off, Paid Holidays
- Paid Family Leave
- Discounts, Perks
- Tuition Reimbursement
- Adoption Assistance
- Incentive Programs
- ESPP (Employee Stock Purchase Plan)
See All 8 IT Architect Jobs in Colorado
Find roles in Colorado that match your experience and apply in just a few clicks.
Find IT Architect JobsIT Architect Jobs by City in Colorado
Where Colorado roles are concentrated, by current openings.
Denver
2 jobsCentennial
2 jobsAurora
1 jobLakewood
1 jobColorado Springs
1 jobDenver International Airport
1 jobIT Architect Job Market in Colorado
A snapshot from current Colorado openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Consulting & Professional Services
What Colorado Employers Look For
The qualifications that appear most often in IT architect jobs across Colorado.
- Bachelor's degree in computer science, information systems, or a related engineering field
- Seven or more years of experience designing and implementing enterprise IT systems
- Proficiency with major cloud platforms such as AWS, Azure, or Google Cloud
- Experience creating architecture documentation, roadmaps, and governance frameworks
- Relevant certifications such as TOGAF, AWS Certified Solutions Architect, or CISSP
- Strong communication skills to present architecture decisions to executive stakeholders
IT Architect Jobs in Colorado: Frequently Asked Questions
How do you become a it architect in Colorado?
Colorado does not require a state-issued license to work as an it architect, so the path runs through education and employer-recognized credentials. Most roles require at minimum a bachelor's degree in computer science, information systems, or a closely related engineering discipline. From there, candidates typically build several years of hands-on experience in systems or infrastructure roles before moving into architecture. Industry certifications such as TOGAF and AWS Certified Solutions Architect carry significant weight with Colorado employers.
How much do IT architects make in Colorado?
IT architects in Colorado earn a median of about $139,580 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $76,140 for the lowest 10% to over $170,800 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire it architects in Colorado?
Companies currently hiring it architects in Colorado include Boston Consulting, United Launch Alliance (ULA), and Siemens, per current listings on Migrate Mate as of November 2026. Colorado's mix of aerospace primes, financial services firms, and federal contractors creates consistent year-round demand for architects with enterprise and cloud experience.
Which Colorado cities have the most it architect jobs?
Denver, Centennial, and Aurora have the most it architect openings in Colorado. Denver dominates as the state's primary enterprise technology hub, home to major financial services and corporate headquarters, while Colorado Springs draws demand from defense and federal contractors such as those supporting Peterson Space Force Base, and Boulder's technology and research corridor attracts cloud-focused and startup-stage architecture roles.
Are there remote it architect jobs in Colorado?
Yes, and more than most fields. About 60% of it architect openings tied to Colorado are remote or hybrid as of November 2026, reflecting how much of the role centers on design work, documentation, and stakeholder meetings that do not require a physical presence. Strategy, cloud design, and governance work tend to be most remote-friendly, while hands-on infrastructure buildouts or classified-facility roles in Colorado Springs typically require on-site presence.
How can I get hired as a it architect in Colorado with little or no experience?
The most realistic entry path is moving into architecture from a closely adjacent role such as systems administrator, network engineer, or cloud engineer, which are positions that Colorado employers hire at scale and often use as internal pipelines for architect-track candidates. Large Colorado technology employers and defense contractors frequently post associate architect or junior solution architect titles that accept candidates with fewer years of experience. Earning an entry-level cloud certification and building a portfolio of architecture diagrams, even from personal or academic projects, gives candidates a concrete edge when applying to these roles.
Where can I find and apply to it architect jobs in Colorado?
You can find and apply to it architect jobs in Colorado on Migrate Mate, which lists current Colorado openings. Search the roles available, find the ones that match your experience and location preferences, and apply directly to the ones that fit.
See All 8 IT Architect Jobs in Colorado
Find roles in Colorado that match your experience and apply in just a few clicks.
Find IT Architect JobsRelated Jobs in Colorado
IT Support Specialist JobsColorado
Network Coordinator JobsColorado
IT Administrator JobsColorado
Network Support Technician JobsColorado
IT Project Manager JobsColorado
Data Center Manager JobsColorado
Network Administrator JobsColorado
Senior IT Support Specialist JobsColorado
Technical Support Engineer JobsColorado