Citi

Cloud and Application Security Architect – Director

Citi

full-time

Posted on:

Location Type: Hybrid

Location: IrvingFloridaTexasUnited States

Visit company website

Explore more

AI Apply
Apply

Salary

💰 $170,000 - $300,000 per year

Job Level

About the role

  • Partner, coach and functionally lead IT, engineering, development and business teams through collaborative design discussions.
  • Educate internal and external clients on security risk and best practices.
  • Define and lead the security strategy across public cloud (GCP/AWS), private cloud, and on-prem environments with a focus on Zero Trust architecture and regulatory alignment.
  • Develop and maintain cloud security reference architectures, playbooks, and control frameworks, tailored to the bank’s technology stack and third-party oversight obligations.
  • Architect secure, scalable platforms for containerized banking workloads (e.g., GKE, EKS), VPC and network segmentation, secrets management, and secure compute/storage services.
  • Partner with cloud engineering, platform ops, application delivery organization, and enterprise architecture to embed infrastructure security throughout service lifecycles — from ideation through production.
  • Integrate security controls into CI/CD pipelines and infrastructure-as-code deployments (Terraform, Helm, CloudFormation), driving secure-by-design principles.
  • Ensure compliance with banking regulations including GLBA, SOX, FFIEC, PCI-DSS, NYDFS, and OCC cybersecurity guidelines, integrating security architecture into audit and regulatory programs.

Requirements

  • 15+ years of experience in cybersecurity, with 5+ years in cloud and enterprise security architecture.
  • Demonstrated success leading security architecture for financial services, banks, or regulated industries.
  • Technical expertise in securing GCP, AWS, Kubernetes (GKE/EKS), Azure, cloud networking, and Application Security.
  • Strong command of cloud-native technologies and DevSecOps practices.
  • Experience with regulatory audits and control frameworks (e.g., NIST 800-53, ISO 27001, PCI DSS, FFIEC CAT).
  • Proven leadership in cross-functional teams, architecture review boards, and strategic planning sessions.
  • Excellent communication and presentation skills, with the ability to engage both technical and executive audiences.
  • Preferred certifications: Google Cloud Security Engineer, AWS Security Specialty, CISSP, CCSP, CKA/CKS, GCSA.
  • Consistently demonstrates clear and concise written and verbal communication
  • Management and prioritization skills
  • Ability to develop working relationships
  • Ability to manage multiple activities and changing priorities, work under pressure to meet tight deadlines
  • Self-starter with ability to take the initiative and master new tasks quickly
  • Methodical, attention to detail.
Benefits
  • medical, dental & vision coverage
  • 401(k)
  • life, accident, and disability insurance
  • wellness programs
  • paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
cybersecuritycloud security architectureGCPAWSKubernetescloud networkingApplication SecurityDevSecOpsinfrastructure-as-codeTerraform
Soft Skills
leadershipcommunicationpresentation skillsmanagement skillsprioritization skillsrelationship buildingability to manage multiple activitieswork under pressureself-starterattention to detail
Certifications
Google Cloud Security EngineerAWS Security SpecialtyCISSPCCSPCKACKSGCSA