Cybersecurity Enterprise Architect

Work with a team of experts to architect, design, and lead the implementation of enterprise-scale cybersecurity solutions that protect critical infrastructure, data, and AI-enabled systems across complex, multi-cloud environments (AWS, Azure, GCP). This role serves as a key architect and evangelist for secure digital transformation, ensuring consistent and scalable protection strategies across traditional, cloud-native, and AI-driven platforms. Provides both deep technical leadership and strategic influence across the organization, mentoring teams and driving innovation in both security architecture and emerging technology adoption.

This position requires work in support of the Company’s contract with the United States Department of Education (“ED”). As such, the United States Government requires that any applicant for this position must complete United States Government security clearance. Effective June 1, 2018, ED has informed Nelnet that security clearance applications for foreign nationals are not being accepted or processed. In light of this direction from ED, Nelnet will be unable to hire applicants without United States citizenship for such positions.

This position offers a hybrid work option. Nelnet values flexibility and understands the importance of work-life integration. Our hybrid work environment allows associates within 30 miles of an office to work remotely for part of the week, while also fostering collaboration and team connection through in-office presence., * Architect and implement secure-by-design cybersecurity components in enterprise-wide systems, including those incorporating AI/ML technologies across cloud platforms (AWS, Azure, GCP), hybrid environments and on-prem infrastructure.

• Define and enforce architectural standards for secure cloud adoption, container security, identity and access management (IAM), network segmentation, and integration of AI models, services, and data pipelines into business processes and products.
• Design cybersecurity strategies that integrate AI/ML components securely, addressing risks such as model poisoning, adversarial inputs, and data exposure.
• Lead the secure integration of AI into cloud-native platforms and DevSecOps pipelines, including AI model deployment, governance, and monitoring.
• Address complex challenges in security, integration, interoperability, and multi-cloud or hybrid platforms, including secure AI lifecycle management.
• Act as a technical expert on security architecture for traditional systems and next-gen platforms using generative AI, large language models (LLMs), and machine learning.
• Serve as a technical expert in security architecture, including cloud workload protection, cloud security posture management (CSPM), and compliance alignment.
• Collaborate with IT, CloudOps, Security, Data Science, and business units to ensure secure system design aligned to enterprise goals.
• Lead security architecture reviews and cloud adoption efforts, including migrations, SaaS evaluations, and third-party integrations.
• Influence strategic direction by communicating the value and necessity of cybersecurity architecture-including emerging AI risk-across leadership, IT, and business lines., * Define reference architectures and security patterns for securing AI/ML pipelines on cloud platforms.
• Guide the application of Zero Trust principles to multi-cloud environments, identity management, and federated data systems.
• Contribute to the development and enforcement of enterprise cloud security policies, standards, and compliance controls (e.g., NIST, ISO, FedRAMP, SOC 2).
• Stay ahead of evolving cloud and AI security trends, regulatory requirements (e.g. NIST), and best practices.
• Coach and mentor both engineers and architects on secure development practices for cloud-native and AI-enabled applications.

• Bachelor’s degree in Information Security or related field and/or equivalent combination of education and experience., * At least 10 years of experience in an information technology or security engineering department, preferably as a Lead Engineer.
• 10+ years of experience in cybersecurity or information security roles, with at least 5 years in a leadership or architecture capacity.
• 5+ years of hands-on experience with cloud platforms (AWS, Azure, GCP), including native security tools and cloud infrastructure design.
• Experience securing large-scale, mission-critical enterprise environments, including hybrid and multi-cloud architectures.
• Demonstrated experience with AI security or machine learning governance is strongly preferred.
• Strong technical experience with the implementation of cybersecurity technologies in diverse, enterprise environments to include IDS, IPS, EDR, DLP.
• Ability to obtain and maintain security clearance is required.

COMPETENCIES - SKILLS/KNOWLEDGE/ABILITIES:

• Effectively manage objectives, priorities, tradeoffs and risks for the organization.
• Ability to foster an environment of experimentation and continual improvement.
• Provide both technical leadership and mentorship of people managers.
• Organize, plan, prioritize and follow through on work.
• Use good judgement, problem-solving and decision-making skills.
• Work in a fast-paced environment where deadlines are essential.
• Strong communication and interpersonal skills with technical & non-technical clients as well as executive staff.
• Build strong relationships between cybersecurity, IT and business users.
• A working knowledge of industry security best practices.

Compensation range for this position is - $125,000 - $150,000 annually, depending on experience.

Nelnet is a diversified and innovative company committed to enriching lives through the power of service as a student loan servicer, professional services company, consumer loan originator and servicer, payments processor, renewable energy solutions, and K-12 and higher education expert. For over 40 years, Nelnet has been serving its customers, associates, and communities.

The perks of working at Nelnet go beyond our benefits package. When you join the Nelnet team, you’re part of a community invested in the success of each individual. That support comes through in our work, as we are united by our mission of creating opportunities for people where they live, learn, and work.