{"id":4236114,"url":"https://alion.io/job/nexteraenergy-cybersecurity-architect","title":"Cybersecurity Architect","company":{"id":1754925,"name":"NextEra Energy","domain":"nexteraenergy.com","url":"https://alion.io/company/nexteraenergy","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Juno Beach, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":true,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"NERC CIP","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Tokenization","optional":false}],"status":"live","first_seen_at":"2026-11-06T00:00:00Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-15T03:44:29Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"Requisition ID: 97398\nFlorida Power & Light Company is the largest electric utility in the U.S., providing reliable energy to nearly 12 million Floridians. With one of the nation’s most fuel-efficient, cost-effective power generation fleets and industry-leading reliability, we’re redefining what’s possible in energy. Want to be part of something powerful? Join our outstanding team and help shape the future of energy.\nPosition Specific Description\nNextEra Energy / Florida Power & Light - America's largest electric utility - is seeking a Cybersecurity Architect to augment its Cybersecurity Architecture team and support the assessment of cybersecurity risk associated with new technology implementations across a large, complex Fortune 500 enterprise.\nThis is a highly technical architecture and risk assessment position. The architect will evaluate proposed technologies and solutions across cloud, SaaS, enterprise applications, infrastructure, networks, identity, APIs, AI/GenAI, OT/ICS, third-party solutions, and other emerging technologies. The role spans the full technology lifecycle - from early planning and solution design through formal architecture review, implementation support, and pre-production validation.\nThis role operates with a business-enablement mindset. The architect is not expected to approve or reject technology implementations. Instead, they identify and clearly communicate cybersecurity risk, define appropriate controls and mitigations, and work collaboratively with project teams and vendors to find practical solutions that allow business objectives to move forward securely. Where risk cannot or will not be mitigated, the architect clearly documents the residual risk so the appropriate Business Unit Director can make an informed risk-acceptance decision.\nKey Responsibilities\nIndependently lead cybersecurity architecture reviews for complex projects, platforms, applications, infrastructure, cloud services, SaaS platforms, vendor solutions, APIs, and enterprise integrations.\nAnalyze solution architectures, network and data flows, trust boundaries, authentication models, integrations, external connectivity, and security controls.\nPerform threat modeling to identify realistic threat scenarios, attack paths, trust-boundary concerns, and potential security weaknesses.\nIdentify cybersecurity risks and assign appropriate risk ratings using established enterprise risk methodologies combined with senior-level professional judgment.\nClearly articulate the technical and business implications of identified cybersecurity risks.\nDefine required and recommended security controls and practical mitigation strategies based on identified risk.\nProduce concise, defensible risk documentation identifying the exposure, potential impact, risk rating, mitigation requirements, and residual risk.\nDocument residual cybersecurity risks requiring Business Unit Director acceptance when appropriate mitigations will not be implemented.\nAssess internet-facing technologies and external attack surfaces, including web applications, APIs, exposed services, authentication mechanisms, WAFs, DDoS protections, DNS, certificates, ingress architectures, and external connectivity.\nAssess cloud architectures with consideration for identity and access management, networking, workload security, logging and monitoring, data protection, encryption, and shared-responsibility models.\nEvaluate application security architecture, including authentication and authorization, APIs, web application security, secrets management, encryption, secure architecture patterns, OWASP risks, and third-party integrations.\nEvaluate identity and access management architectures, including SSO, federation, MFA, RBAC, privileged access, service/workload identities, and least-privilege principles.\nEvaluate data security and privacy considerations, including data classification, collection, storage, processing, transmission, encryption, access controls, retention, and third-party handling of sensitive or regulated information.\nAssess cybersecurity resiliency, including single points of failure, backup and recovery dependencies, ransomware resilience, and the potential operational impact of cybersecurity controls.\nReview and critically evaluate vendor security architectures and supporting technical evidence - including security assessments, penetration-test results, vulnerability scans, and architecture documentation - rather than accepting vendor security assertions at face value.\nRecognize regulatory, privacy, and compliance implications associated with proposed solutions, including NERC CIP, and engage appropriate subject-matter experts when specialized expertise is required.\nDevelop reusable cybersecurity architecture patterns, reference architectures, standards, and implementation guidance when recurring risks or architecture patterns are identified.\nFacilitate architecture review sessions with application teams, project teams, technical stakeholders, and third-party vendors.\nGuide migration and modernization strategies and coordinate with domain specialists for novel or high-risk technical decisions.\nMentor other cybersecurity professionals, share technical knowledge, and help improve review methods, templates, and architecture quality.\nMonitor industry threats and technology trends and incorporate relevant improvements into architecture standards and patterns.\nIndependently manage a high volume of concurrent cybersecurity architecture assessments while maintaining quality and meeting established review timelines.\nRequired Qualifications\nThe ideal candidate will demonstrate senior-level cybersecurity architecture experience and the ability to independently assess complex enterprise technologies. Selection should emphasize demonstrated capability and experience rather than a rigid number of years in the profession.\nCandidates should possess:\nDemonstrated senior-level experience performing cybersecurity architecture, solution security, or technology risk assessments in large and complex enterprise environments.\nStrong understanding of cybersecurity architecture principles and the ability to apply them across diverse technology environments.\nStrong working knowledge of cloud security architecture, including IAM, networking, data protection, workload security, logging/monitoring, encryption, and shared-responsibility models (AWS, Azure, and/or GCP).\nStrong working knowledge of network and infrastructure security, including segmentation, firewalls, WAFs, proxies, DNS, load balancers, certificates, encryption, remote access, and secure connectivity.\nStrong working knowledge of application security, including authentication and authorization, APIs, web application security, secrets management, secure design patterns, OWASP risks, and third-party integrations.\nStrong working knowledge of identity and access management, including SSO, federation, MFA, RBAC, privileged access, service/workload identities, and least privilege.\nStrong knowledge of data security and privacy architecture, including protection of sensitive and regulated information throughout its lifecycle, with familiarity with data classification, encryption, key management, tokenization, and DLP.\nDemonstrated ability to perform threat modeling and identify attack surfaces, trust boundaries, realistic threat scenarios, and potential attack paths.\nAbility to interpret vulnerability assessments, penetration-test findings, and vendor-provided security assessment results and determine their relevance to architecture risk.\nExperience evaluating third-party/vendor technologies and challenging vendor security assertions when supporting evidence is incomplete or insufficient.\nWorking knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST SP 800-53, NERC CIP, and ISO/IEC 27001.\nBroad working knowledge of regulatory and compliance considerations, with the judgment to recognize when specialized legal, privacy, compliance, or regulatory expertise should be engaged.\nAbility to independently lead architecture review meetings and drive technical discussions toward a clear risk determination.\nAbility to manage multiple concurrent assessments in a high-volume, fast-paced environment.\nStrong analytical, critical-thinking, and problem-solving skills.\nStrong written communication skills, particularly the ability to develop concise and defensible cybersecurity risk statements.\nStrong interpersonal skills and demonstrated ability to establish productive relationships with application/project teams and third-party vendors.\nAbility to translate technical cybersecurity concerns into practical mitigation requirements.\nAbility to work independently with minimal supervision, identify missing information, ask appropriate technical questions, and drive assigned assessments through completion.\nPreferred Qualifications\nBachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline. Equivalent relevant professional experience will be considered.\nIndustry certifications such as CISSP, CCSP, or comparable cybersecurity/cloud/architecture certifications.\nExperience performing cybersecurity architecture assessments within a Fortune 500 or similarly large, complex enterprise.\nExperience with multiple cloud environments such as AWS, Microsoft Azure, and Google Cloud Platform.\nFamiliarity with OT/ICS cybersecurity environments and the unique security and operational considerations associated with critical infrastructure, including safety, availability, reliability, and regulatory constraints.\nGeneral awareness of emerging AI/GenAI security risks and considerations.\nExperience contributing to cybersecurity reference architectures, reusable security patterns, technical standards, or architecture guidance.\nExperience in a utility, critical infrastructure, or other highly regulated environment.\nOperating Philosophy\nThe Cybersecurity Architect should approach cybersecurity as a business enabler.\nThis role is not intended to function as a technology approval gate or a default to rejecting solutions because cybersecurity risk exists. The architect is expected to understand the business objective, thoroughly assess the proposed implementation, identify and clearly communicate cybersecurity risks, and determine appropriate mitigations. The architect actively works with project teams and vendors to identify practical solutions that reduce risk while allowing the business objective to move forward. Where risk remains, the architect clearly documents the residual risk so the appropriate Business Unit Director can make an informed decision regarding risk acceptance.\nA successful Cybersecurity Architect will:\nConsistently deliver high-quality cybersecurity assessments within established timelines.\nIdentify material cybersecurity risks that might otherwise be overlooked.\nAssign risk levels consistently and defensibly.\nRecommend practical and proportionate security mitigations.\nProduce clear risk documentation that enables informed business decisions.\nIndependently manage a significant volume of concurrent assessments without sacrificing quality.\nMaintain productive relationships with project teams, vendors, and business stakeholders.\nBe viewed by stakeholders as a knowledgeable cybersecurity partner who helps the organization implement technology securely - rather than as an obstacle to implementation.\nJob Overview\nThis job performs ongoing cybersecurity risk reviews for new and existing technologies and services and supports ongoing and new cybersecurity projects. Individuals develop requirements for and implement technical security projects and tools, as well as define the company’s cybersecurity policies and control framework. This position collaborates with the company’s IT department and business units to identify the need for, select, and deploy technical controls to meet specific security requirements. Employees in this role build processes and s...","description_format":"text","description_chars":15301,"description_truncated":true,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-13T11:45:08Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":9,"expected_fill_days":40,"reasons":["conf:4","win:early","comp:brand"],"computed_at":"2026-11-15T07:52:55Z"},"pay":null,"html_url":"https://alion.io/job/nexteraenergy-cybersecurity-architect","json_url":"https://alion.io/job/nexteraenergy-cybersecurity-architect.json","meta":{"generated_at":"2026-11-15T13:35:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4339,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1754925},"rest":"https://alion.io/mcp/rest/get_company?id=1754925"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnexteraenergy-cybersecurity-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnexteraenergy-cybersecurity-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnexteraenergy-cybersecurity-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nexteraenergy-cybersecurity-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnexteraenergy-cybersecurity-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4236114}},{"tool":"search_jobs","arguments":{"company":"nexteraenergy.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4236114},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}