IT Security Architect-Sec Platforms & Cloud

Pay Range:

$100,000.00 - $165,000.00

Supervisory Organization:

Head of Info/Network Security

Country:

United States of America

Address:

1401 PACIFIC AVE

City:

DALLAS, TX 75202

FLSA:

Exempt

Professionals:

02 - Professional (EEO-4-United States of America), 2F - Professionals - System & Service Planners (EEO-SubCategory)

General Summary:

The IT Security Architect – Security Platforms & Cloud Security is responsible for the architecture, design, and governance of the Agency’s enterprise security platforms that enable threat prevention, detection, response, and secure access. This role serves as the technical authority and subject matter expert for the security response ecosystem, with a strong emphasis on Palo Alto Networks technologies, including XDR/XSIAM, Prisma Access, Prisma Access Browser, CASB, and Data Loss Prevention (DLP).

This position focuses on building and maintaining a cohesive, cloud-first security architecture that aligns endpoint, network, identity, and data protection controls to support Zero Trust principles. The Security Architect partners closely with Security Operations, Network Engineering, Endpoint, IAM, Compliance, and business stakeholders to ensure security platforms are well-integrated, policy-aligned, operationally effective, and resilient against evolving threats.

This position provides architectural leadership, risk-based decision-making, and hands-on technical guidance to improve the confidentiality, integrity, and availability of Agency information assets considered through the lens of security platforms and cloud security.

Essential Duties and Responsibilities:

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Serve as the enterprise architect and technical lead for the Agency’s security response and enforcement platforms, including Palo Alto XDR/XSIAM, endpoint agents, and associated telemetry sources.

• Architect and govern Prisma Access cloud-delivered security services, including secure remote access, cloud firewalls, and traffic inspection for users, devices, and locations.

• Design and maintain Prisma Access Browser security architecture to support secure access to SaaS and web-based resources.

• Lead architecture and policy design for CASB and DLP capabilities to protect sensitive data across SaaS, cloud, web, and endpoint environments.

• Ensure consistent user, device, and application policy enforcement across endpoint, network, cloud, and browser-based security controls.

• Design and optimize detection and response use cases within XDR/XSIAM, aligning telemetry, analytics, and automation to Agency threat models.

• Partner with Security Operations to define alerting standards, response workflows, playbooks, and automation opportunities.

• Ensure security platform integrations with SIEM, SOAR, vulnerability management, IAM/PAM, and threat intelligence sources.

• Provide architectural oversight for endpoint agent deployment, configuration, performance, and lifecycle management.

• Define cloud security architecture standards for secure connectivity, segmentation, inspection, and access control using cloud-native and vendor platforms.

• Collaborate with network teams to align Prisma Access architecture with enterprise networking, SD-WAN, and hybrid connectivity models.

• Ensure security controls support Zero Trust Network Access (ZTNA) and least-privilege access models.

• Develop and maintain security platform standards, reference architectures, and design patterns.

• Ensure security platform policies align with business requirements, acceptable use standards, and regulatory obligations (e.g., PCI-DSS, HIPAA, PII, SSI).

• Support internal and external audits by providing architectural documentation, control mappings, and evidence related to security platforms.

• Participate in Change Advisory Board (CAB) reviews to assess security platform impacts of proposed changes.

• Perform security architecture reviews and threat modeling for new systems, integrations, and access models.

• Identify security gaps, misconfigurations, and control weaknesses within security platforms and recommend remediation strategies.

• Evaluate vendor solutions, new features, and roadmap capabilities to inform architectural decisions.

• Act as the primary subject matter expert for enterprise security platforms and cloud-delivered security services.

• Pro