{"id":2572736,"url":"https://alion.io/job/american-information-security-architect","title":"Information Security Architect","company":{"id":96860,"name":"American University","domain":"american.edu","url":"https://alion.io/company/american-2","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":22,"ghost_share":0,"stale_share":0.864,"repost_share":0,"time_to_fill_p50_days":30,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":108000,"max_usd":216000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":451},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"OpenTofu","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"ServiceNow","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-10-14T23:18:19Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-11-07T04:58:43Z","board_verified":true,"closed_at":null,"days_open":23,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":23},"description":"American University is a student-centered research institution located in Washington, DC, with highly-ranked schools and colleges, internationally-renownedfaculty, and a reputation for creating meaningful change in the world. Learn more about American University\nDepartment:\nInformation SecurityTime Type:\nFull timeJob Type:\nRegularFLSA Status:\nExemptWork Modality:\nHybrid 04 (On Campus 1 day/Month)Union:\nSEIU Local 500 - Provost & Enrollment DivisionThis position is part of a collective bargaining unit represented by SEIU Local 500 - Provost & Enrollment Division. That means the terms and conditions of your employment are governed by university policy (including the Staff Personnel Policies Manual) and any collective bargaining agreement entered into between American University and SEIU Local 500 - Provost & Enrollment Division.Job Description:\nSummary:\nThe Information Security Architect serves as the university’s senior technical security architect and a key advisor on enterprise security strategy, architecture, and engineering. Reporting to the Chief Information Security Officer, this role leads the design and integration of security controls across a complex technology environment, including cloud platforms, infrastructure, identity, applications, and research computing. The position partners closely with technical and business stakeholders to ensure security is embedded into solutions by design, aligned with institutional priorities, risk management objectives, and regulatory requirements. This role also drives security engineering innovation through automation, Infrastructure as Code, DevSecOps, and platform integration. The architect provides leadership on security reviews, technical standards, and emerging technology assessments while mentoring engineering staff and helping strengthen the overall maturity of the university’s security program.\nEssential Functions:\n1.) Security Architecture and Technical Governance\nDevelop and maintain enterprise security architectures, reference architectures, and design patterns that integrate security into technology solutions by design.\nLead architecture and security design reviews for infrastructure, cloud, networking, identity, data, and application initiatives.\nEstablish technical security standards and requirements for technology procurement, implementation, and enterprise initiatives.\nEnsure security architecture aligns with university objectives, risk tolerance, regulatory requirements, and industry best practices.\n2.) Security Engineering, Automation, and Platform Strategy\nDesign and implement automation solutions using APIs, orchestration technologies, scripting languages, and Infrastructure as Code.\nDefine engineering standards, reusable patterns, and technical roadmaps for enterprise security platforms.\nLead integration efforts between security and enterprise technology platforms.\nGuide adoption of automation, DevSecOps, and Infrastructure as Code practices across the Information Security program.\n3.) Security Reviews, Risk Assessment, and Advisory Services\nLead security assessments of university technologies, cloud services, applications, vendors, and third-party solutions.\nEvaluate security risks associated with strategic initiatives and recommend mitigation strategies.\nProvide technical security guidance to project teams, architects, engineers, and university leadership.\nParticipate in Enterprise Architecture activities and strategic technology planning.\nSupport compliance, audit, privacy, and regulatory initiatives through architecture and technical review activities.\n4.) Security Program Leadership and Engineering Enablement\nMentor and provide technical guidance to Security Engineers and Senior Security Engineers, building team capability and depth.\nEstablish security engineering implementation guidance and operational best practices.\nSupport roadmap development and security program planning.\nContribute to development of security metrics, reporting, and maturity assessments.\n5.) Research, Innovation, and Emerging Technology\nEvaluate emerging technologies, threats, and security trends, including the security roadmaps of major enterprise platforms such as Microsoft, Workday, Salesforce, and ServiceNow.\nAssess opportunities to improve security through automation, AI, analytics, and engineering innovation.\nRecommend improvements to university security capabilities and long-term technology strategy.\nParticipate in professional organizations, industry working groups, and technical communities.\n\nCompetencies:\nServing Customers.\nDisplaying Creativity.\nPrioritizing and Organizing.\nAcquiring and Analyzing Information.\nSupporting Coworkers.\nPosition Type/Expected Hours of Work:\nFull-time.\n35 hours per week.\nThis position works Monday through Friday with a one-hour lunch break in a hybrid modality with one day a month required to work from the office.\nThis position participates in a published on-call rotation, typically one week out of every four weeks, with more frequent rotations possible during staffing shortages or unplanned absences.Purpose of on-call rotation: The Information Security on-call rotation ensures timely detection, response, and coordination for security alerts and incidents that occur outside of standard business hours. This rotation is a critical operational responsibility of Information Security staff and supports the institution’s overall risk-management and incident-response obligations.\nDuring an on-call rotation, the designated employee performs their regularly work duties and must be readily available throughout the day (including evenings, weekends, and holidays) to proactively monitor alerts, queues and dashboards and respond to incidents.\nOutside of on-call rotations, all team members are expected to be reasonably available to respond to emergencies and critical or time-sensitive security incidents.\nThis role may require frequent interrupted nights and weekends.\n\nThe on-call designee will be required to work remotely, during unplanned closures or weather emergencies. The rest of the team is expected to be on call and available to work remotely to address emergency IT issues.\nOIT staff are prohibited from taking non-emergency leave during the three-week period at the start of each semester, this includes the week before the start of the Fall and Spring term and the first two weeks of classes for the Fall and Spring term. Requests for support peak during these times and system availability is also critical, which requires all staff members to be working during these times. \nSalary Range:\n$150,000.00 - $160,000.00 annually.\n\nRequired Education and Experience:\nBachelor's degree or equivalent.\n8 - 10 years of experience.\nPreferred Education and Experience:\nBachelor's degree.\nExperience working in higher education or similarly complex, decentralized organizations is preferred.\nRelevant industry certifications such as CISSP, CCSP, GIAC, AWS Security Specialty, Azure Security Engineer Associate, Terraform Associate, or equivalent certifications are preferred.\nAdditional Eligibility Qualifications:\nBachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or an equivalent combination of education and experience.\n8 - 10 years of experience in cybersecurity, systems engineering, cloud engineering, DevSecOps, infrastructure engineering, or related disciplines.\nDemonstrated experience designing, implementing, and maintaining enterprise security architectures in complex organizations.\nExtensive experience with AWS, Azure, or Google Cloud Platform.\nExperience with Infrastructure as Code and automation technologies, including Terraform, OpenTofu, CloudFormation, Bicep, Ansible, Git, CI/CD platforms, and scripting languages such as Python, PowerShell, or Bash.\nExperience integrating enterprise platforms through APIs, automation frameworks, orchestration tools, and workflow development.\nExperience with security operations, including detection engineering, security automation, and Security Orchestration Automation and Response (SOAR) platforms.\nExperience designing secure research, regulated, or high-assurance computing environments.\nExperience with enterprise security technologies, security engineering practices, and modern cloud-native security controls.\nKnowledge of security standards and frameworks including NIST, ISO 27001, FERPA, HIPAA, and higher education security practices.\nExcellent technical, analytical, problem-solving, written and verbal communication skills.\nMust uphold high standards of personal and professional integrity in a position of trust.\nOther Duties:\nPlease note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.\nBenefits\nAU offers a competitive benefits package. Click here to learn about American University's unique benefit options.\nOther Details\nHiring offers for this position are contingent on successful completion of a background check.\n\nEmployees in staff positions at American University must deliver their services to the university from either the District of Columbia, Maryland, or Virginia, or perform work on-site at the university.\n\nPlease note this job announcement is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.\n\nAmerican University is an E-Verify employer.\n\nCurrent American University Employees\nAmerican University current employees must apply through their employee Workday account. If you are a current employee at American University, please log into Workday and select the Find Jobs report which will take you to our internal career listings.\nContact Us\nFor more information or assistance with the American University careers site, email .\nAmerican University is an equal opportunity, affirmative action institution that operates in compliance with applicable laws and regulations. The university does not discriminate on the basis of race, color, national origin, religion, sex (including pregnancy), age, sexual orientation, disability, marital status, personal appearance, gender identity and expression, family responsibilities, political affiliation, source of income, veteran status, an individual’s genetic information or any other bases under federal or local laws (collectively \"Protected Bases\") in its programs and activities.","description_format":"text","description_chars":10678,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Education","Higher Education"],"lifecycle":[{"event":"open","at":"2026-10-14T23:18:19Z"}],"visa":[],"liveness":{"score":44,"band":"fade","label":"Fading","p_open":1,"p_active":0.59,"p_room":0.75,"age_days":23,"expected_fill_days":30,"reasons":["conf:0","stale_co","win:late"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/american-information-security-architect","json_url":"https://alion.io/job/american-information-security-architect.json","meta":{"generated_at":"2026-11-07T21:14:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34128,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":96860},"rest":"https://alion.io/mcp/rest/get_company?id=96860"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famerican-information-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famerican-information-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famerican-information-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/american-information-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famerican-information-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2572736}},{"tool":"search_jobs","arguments":{"company":"american.edu","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2572736},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}