Lead Security Engineer - Architecture Enablement

The Lead Security Architecture Enablement Engineer builds and operates the systems, tools, workflows, and reusable assets that make Security Architecture repeatable, measurable, and scalable. The role translates architecture methods and approved decisions into practical enablement capabilities including architecture repositories, decision-record workflows, standards and pattern lifecycle processes, modeling, validation and assurance, evidence collection, and architecture metrics.

Duties & Responsibilities

· Engineer and operate the Security Architecture enablement platform, including repositories, templates, workflow automation, integrations, and lifecycle controls.

· Develop and maintain the architecture decision record (ADR) system, architecture knowledge repository, standards and pattern catalog, reference-model library, and associated publishing workflows.

· Produce and maintain architecture models and diagrams using approved notation, including context, deployment, identity, data-flow, trust-boundary, integration, and sequence views.

· Support assurance and validation by defining evidence collection workflows, implementing repeatable conformance checks, analyzing results, and escalating material deviations to the accountable architect.

· Support domain architects with targeted research, technology analysis, control-to-requirement mapping, pattern development, threat-model pre-analysis, comparative evaluation, and proof-of-concept execution.

· Convert approved architecture methods into reusable templates, checklists, evidence requirements, workflow steps, and automated guardrails.

· Maintain operating documentation and runbooks for architecture tools, workflow automations, repositories, data models, integrations, and control mappings.

Requirements

6+ years of progressively complex related experience in cybersecurity

Basic Qualifications

· Strong foundation in security architecture concepts and 2 or more of the following: cloud and platform security, network security, identity and access management, application security, data protection, threat and response, control design, and architecture decision records.

· Hands-on experience building tooling or platforms using frameworks, scripting languages, etc.

· Hands-on experience with AI-assisted development workflows

Preferred Qualifications

· Relevant certification such as CISSP, CCSP, SABSA, TOGAF, Microsoft/AWS/Google Cloud architecture or security certification, or comparable engineering credentials.

· Experience with architecture repositories, modeling tools or ArchiMate, policy-as-code,