> Markdown version of [/jobs/ext/4346885-senior-security-architect](https://www.wearedevelopers.com/jobs/ext/4346885-senior-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Architect

- **Company:** Cyera US Inc.
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $160,000.0 - $200,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing Security, Cyber Security, Data Security, Identity and Access Management, Internet Security, Sherwood Applied Business Security Architecture, Google Cloud, Large Language Models, Togaf, Containerization
- **Published:** October 22, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=018a4ae9942fee7e

## About the Role

10+ years in security or enterprise architecture, including design work in a SaaS or cloud-native environment.
Strength in IAM/IGA, cloud security (AWS, GCP, and Azure), SaaS and app-integration security, and data security (DSPM/DLP).
Hands-on experience architecting AI/agentic systems and securing LLM tooling.
Familiarity with ISO 27001/42001, SOC 2, NIST, and the vendor-risk and audit frameworks that follow from them.
Pragmatic, comfortable pushing back on engineering and IT, and able to use AI tools to prototype quickly.

Nice to have

TOGAF, SABSA, CISSP or CCSP; experience in a global enterprise.

## Description

Set the standards: Own security architecture standards, reference patterns and guardrails that security engineering and IT build against, so teams can move fast and stay secure.
Run architecture reviews: Stand up and chair an Architecture Review Board for new applications, vendors, acquisition integrations and AI adoption, making clear calls on what to approve, consolidate or decline.
Drive third-party governance: Support GRC by building an end-to-end third-party risk management lifecycle, establishing a single source of truth for all vendors and apps, and maintaining clear application catalog ownership.
Be the architecture voice externally: Serve as the technical voice for customer and auditor architecture questions, including security questionnaires and enterprise reviews, so answers are accurate and consistent.
Keep decisions documented: Maintain architecture decision records (ADRs) and diagrams so the reasoning behind our choices is clear, current and easy to reuse.