Lead Cybersecurity Architect

As a Lead Architect (VP), you will provide independent oversight while partnering closely with engineering, product, and control stakeholders to embed resiliency-by-design into AI systems and delivery processes. You’ll help ensure that AI-enabled solutions—including modern GenAI/LLM workloads and MCP-based service integrations—meet enterprise security, resiliency, and regulatory expectations without slowing innovation. 

Job Responsibilities: 

• Lead resiliency-by-design for AI platforms: Define, standardize, and drive patterns for high availability, disaster recovery, backup/restore, capacity planning, and operational readiness for AI/ML and GenAI services. 

• Partner across the firm: Collaborate with Lines of Business and platform/service teams to influence architecture, controls, and operating models that support AI value realization and enablement at scale. 

• Enable responsible scaling of GenAI: Support teams in productionizing LLM-powered capabilities (e.g., retrieval-augmented generation, agentic workflows, evaluation/monitoring, safety guardrails) with reliability, traceability, and appropriate controls. 

• Establish and assess standards: Ensure AI solutions align to enterprise security, resiliency, and external regulatory expectations; identify gaps, define actionable remediation, and drive closure through accountable owners and timelines. 

• Operationalize oversight: Review solution designs, validate runbooks and SLOs/SLAs, and guide teams through readiness checkpoints (testing, failover exercises, incident learnings, and continuous improvement). 

• Drive pragmatic outcomes: Balance governance and speed by creating reusable guardrails, reference architectures, and enablement guidance that engineering teams can adopt consistently across environments. 

 

Required qualifications, capabilities, and skills: 

• Significant experience designing, delivering, and operating enterprise-scale platforms across on-prem and cloud environments. 

• Strong grounding in AI/ML engineering and the realities of production AI (model lifecycle, data dependencies, reliability, performance, monitoring, drift, and change management). 

• Hands-on understanding of GenAI/LLM systems and modern patterns (e.g., RAG, agents, prompt/model evaluation, safety controls) and how these workloads behave in production. 

• Demonstrated strength in resiliency, availability, recovery, and data protection controls—especially for distributed systems and cloud-native services. 

• Experience leveraging cloud AI and platform services (e.g., AWS, Microsoft Azure, Google Cloud) and integrating managed services into governed enterprise environments. 

• Ability to operate as a strategic partner and influencer, driving alignment across engineering, product, risk, and control stakeholders. 

• Excellent communication skills, with the ability to translate between architecture, risk/control requirements, and engineering execution—producing clear decisions, trade-offs, and documentation. 

 

Preferred Qualifications: 

• Experience translating business objectives and governance/risk requirements into pragmatic engineering standards, reference architectures, and “paved road” enablement patterns. 

• Experience with Amazon Bedrock or equivalent enterprise model access platforms (e.g., Azure OpenAI, Vertex AI), including identity, access control, and governance considerations. 

• Experience with GenAI mediation patterns (e.g., MCP or comparable governed tool/service routing), including auditability, policy enforcement, and controlled connectivity to internal/external services. 

• Experience with Temporal or comparable workflow orchestration platforms for durable automation, long-running AI operations, and agent/workflow reliability. 

• Experience with sandboxed execution, coding agents, secure agent runtimes, or developer workspaces for controlled code execution and experimentation. 

• Experience with token/cost telemetry, usage attribution, chargeback/showback, or FinOps data pipelines for AI platform economics and capacity management. 

• Experience supporting regulated, sensitive, or client-confidential workloads, including strong practices around data handling, privacy, and operational risk.