{"id":3366963,"url":"https://alion.io/job/ensono-senior-security-architect","title":"Senior Security Architect","company":{"id":3084,"name":"Ensono","domain":"ensono.com","url":"https://alion.io/company/ensono","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":86,"open_postings":10,"ghost_share":0,"stale_share":0.5,"repost_share":0.1,"time_to_fill_p50_days":41,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":155000,"max":210000,"currency":"USD","period":"year","gross":null,"usd_annual":210000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Defense in Depth","optional":false},{"name":"GCP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Machine Learning","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"RAG","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false},{"name":"Function Calling","optional":true},{"name":"Kubernetes","optional":true},{"name":"LLM","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Microsoft Defender for Cloud","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"NIST AI RMF","optional":true},{"name":"NIST CSF","optional":true},{"name":"OWASP","optional":true}],"status":"live","first_seen_at":"2026-07-01T15:01:59Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-30T03:56:53Z","board_verified":true,"closed_at":null,"days_open":120,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":120},"description":"At Ensono, our Purpose is to be a relentless ally, disrupting the status quo and unleashing our clients to Do Great Things! We enable our clients to achieve key business outcomes that reshape how our world runs. As an expert technology adviser and managed service provider with cross-platform certifications, Ensono empowers our clients to keep up with continuous change and embrace innovation. \nWe can Do Great Things because we have great Associates. The Ensono Core Values unify our diverse talents and are woven into how we do business. These five traits are the key to achieving our purpose. Honesty, Reliability, Collaboration, Curiosity, Passion\nAbout the role and what you'll be doing: The Senior Security Architect is a senior technical leader responsible for defining and advancing secure architecture across Ensono’s enterprise technology environment, with primary emphasis on cloud platforms and artificial intelligence. The role translates business, technology, risk, privacy, and compliance requirements into practical security principles, reference architectures, design patterns, standards, and guardrails. This architect partners with Enterprise Architecture, Cloud Engineering, Application Development, Infrastructure, Security Operations, Risk and Compliance, Privacy, and business stakeholders to ensure solutions are secure by design, resilient, scalable, and support business growth.\nThe architect provides hands-on design leadership across Azure, AWS, GCP, SaaS, hybrid infrastructure, AI-enabled applications, generative AI platforms, AI agents, model and data pipelines, and third-party integrations. The role also supports broader security architecture domains, including identity, network, application security, data protection, Zero Trust, logging and monitoring, vulnerability management, resilience, and third-party risk.\nWhat You Will Do:\nOwn and evolve enterprise cloud and AI security architecture principles, roadmaps, reference architectures, reusable design patterns, and technical standards.\nLead security architecture reviews for new solutions, material changes, cloud deployments, AI use cases, AI agents, SaaS platforms, applications, APIs, and third-party integrations.\nTranslate business and technical requirements into risk-informed security requirements and designs that balance protection, usability, scalability, cost, and delivery speed.\nDesign and review secure multi-cloud and hybrid architectures, including cloud identity, privileged access, network segmentation, private connectivity, workload protection, containers, serverless services, data protection, key and secrets management, logging, monitoring, resilience, and recovery. \nDefine cloud governance guardrails using policy-as-code, infrastructure-as-code security, secure baselines, configuration standards, posture management, workload protection, and continuous compliance capabilities. \nAssess cloud architectures against shared-responsibility requirements and identify clear ownership for cloud service provider, Ensono, customer, and third-party controls.\nDefine security architecture for generative AI, machine learning, AI-enabled applications, retrieval-augmented generation, AI gateways, AI agents, plugins, tools, APIs, and Model Context Protocol integrations.\nEstablish AI security requirements covering data classification and handling, model and agent access, non-human identities, least privilege, prompt-injection defenses, secure retrieval sources, output validation, model and software supply chain risk, audit logging, monitoring, human oversight, and emergency disablement.\nPerform threat modeling and abuse-case analysis for cloud and AI solutions, documenting threats, attack paths, trust boundaries, mitigations, residual risk, and required monitoring.\nPartner with application and platform teams to embed security requirements into the system development lifecycle, CI/CD pipelines, cloud landing zones, architecture review gates, and deployment processes. \nProvide expert guidance on Zero Trust, identity-centric security, data-centric protection, secure APIs, segmentation, cryptography, security telemetry, and defense in depth.\nDocument architecture decisions, control mappings, exceptions, risks, and remediation recommendations; present design options and residual risk to technical and executive stakeholders. \nCollaborate with Security Operations and Incident Response to ensure cloud and AI architectures generate appropriate telemetry and support detection, investigation, containment, and recovery. \nEvaluate emerging technologies, security products, and supplier capabilities; contribute to technology selection, proofs of concept, and strategic security roadmaps. \nMentor engineers, architects, and delivery teams; deliver knowledge transfer and promote consistent application of security architecture standards.\nWe want all new Associates to succeed in their roles at Ensono. That's why we've outlined the job requirements below. To be considered for this role, it's important that you meet all Required Qualifications. If you do not meet all of the Preferred Qualifications, we still encourage you to apply. \n Required:\nBachelor’s degree in Computer Science, Information Security, Information Technology, Engineering, Mathematics, or a related field, or equivalent relevant experience.\n8+ years of cybersecurity experience, including significant responsibility for security architecture and the design and review of secure enterprise solutions.\nDesigned and reviewed security architectures for complex enterprise environments spanning cloud security, identity and access management, Zero Trust, data protection, network security, threat modeling, and secure-by-design principles.\nDesigned cloud security architectures in Microsoft Azure and/or AWS, including multi-cloud and hybrid-cloud environments.\nDesigned or governed security controls for cloud identity and privileged access, CSPM/CWPP, network segmentation, containers and Kubernetes, serverless services, encryption, key and secrets management, cloud logging and monitoring, and infrastructure as code.\nConducted security architecture or risk assessments for AI/ML and generative AI solutions, including LLM applications, RAG, AI agents, model APIs, gateways, AI data flows, and third-party AI services.\nTranslated business, technology, risk, privacy, and compliance requirements into security architectures, standards, reference patterns, guardrails, and actionable technical requirements.\nLed or contributed to threat modeling and risk analysis and incorporated secure SDLC, DevSecOps, defense in depth, least privilege, and security architecture governance into solution designs.\nApplied security frameworks and controls to solution designs, including NIST CSF, NIST SP 800-53, NIST SP 800-160, NIST SP 800-207, NIST AI RMF, CSA CCM, CIS Controls and Benchmarks, ISO/IEC 27001, and OWASP guidance.\n5+ years of cybersecurity experience within a professional services, consulting, or managed services environment, supporting complex enterprise or client environments.\nLed security architecture reviews for complex enterprise solutions, identifying material risks, defining required security controls and mitigations, documenting residual risk, and presenting recommendations to technical and executive stakeholders.\nBonus Qualifications:\nExperience implementing cloud landing-zone security, policy-as-code, DevSecOps controls, and architecture review processes.\nExperience with Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Purview, Entra ID, Azure Policy, AWS Organizations, Security Hub, GuardDuty, Config, CloudTrail, or comparable capabilities.\nKnowledge of AI-specific threats and controls, including prompt injection, sensitive-data disclosure, excessive agency, insecure tool use, model and data poisoning, adversarial testing, model theft, output integrity, and AI supply chain risk.\nFamiliarity with ISO/IEC 42001, OWASP guidance for LLM and generative AI applications, and AI governance or model risk management practices.\nRelevant certifications such as CISSP, CCSP, SABSA, AWS Security Specialty, Microsoft Cybersecurity Architect Expert, Azure Security Engineer Associate, or comparable architecture and cloud security credentials.\nWhy Ensono?\nEnsono is a place to make better happen - for our clients and for your career. You can do great things through innovation or collaboration, by learning or volunteering, or to promote diversity and inclusion. You can do great things for your own health or for a healthier planet. Whatever it means to you to do great things we want Ensono to be the place you can do it. \nWe are a client-facing business, but we do encourage clients to allow us to work remotely most of the time so if you are not required to be on a client site, you can choose to work from home or in our Ensono offices.\nSome of our benefits include:\nUnlimited Paid Days Off\nThree health plan options\n401k with company match\nEligibility for dental, vision, short and long-term disability, life and AD&D coverage, and flexible spending accounts\nFamily Forming Benefit including fertility coverage and adoption/surrogacy reimbursement\nPaid childbearing and paternal leave\nEducation Reimbursement, Student Loan Assistance or 529 College Funding\nSabbatical leave\nWellness program\nFlexible work schedule\nAs of the date of this posting, a good faith estimate of the current pay scale for this role is $155,000 to $210,000 annually based on a full-time schedule. Please note that placement in the range may vary based on numerous factors including but not limited to skills, experience, internal equity, and business needs. In addition to base salary, other compensation programs, depending on eligibility, includean annual bonus plan based on company and individual performance and an equity grant under our Associate Equity Appreciation Program.\nEnsono is an Equal Opportunity/Affirmative Action em1ployer. We are committed to providing equal employment to our Associates and building a diverse and inclusive workforce. All qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or other legally protected basis, in accordance with applicable law.\nPay transparency nondiscrimination statement/posting OFCCP’s pay transparency policy can be found on OFCCP’s website.\nIf you need accommodation at any point during the application or interview process, please let your recruiter know or email .","description_format":"text","description_chars":10583,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Flexible schedule"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Technology","Cloud Security","Managed IT Services (MSP)","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-27T23:29:25Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 30 · green card filings: 2","filings_12m":30,"filings_prev_12m":21,"green_card_filings_12m":2,"median_offered_wage_usd":141563,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":8}],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.395,"p_room":0.28,"age_days":120,"expected_fill_days":41,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":210000,"is_top_pay":false},"html_url":"https://alion.io/job/ensono-senior-security-architect","json_url":"https://alion.io/job/ensono-senior-security-architect.json","meta":{"generated_at":"2026-10-30T06:31:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9091,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3084},"rest":"https://alion.io/mcp/rest/get_company?id=3084"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fensono-senior-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fensono-senior-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fensono-senior-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ensono-senior-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fensono-senior-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3366963}},{"tool":"search_jobs","arguments":{"company":"ensono.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3366963},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}