Senior Staff Security Architect

Reports To:

Director, AI & Information Security

Role Summary:

We are seeking a highly skilled and strategic Senior Staff Cyber Security Architect to design, implement, and govern security architecture across enterprise networks, endpoints, cloud platforms, SaaS applications, and AI ecosystems. This role is critical to establishing security standards, driving secure-by-design initiatives, and ensuring our technology landscape remains resilient against evolving cyber threats. You will serve as a trusted technical leader, bridging business and technology to enable innovation through secure, scalable architecture.

What You Will Be Doing:

As a Senior Staff Architect, you will define and maintain the enterprise-wide security architecture, standards, and reference designs. You will lead security reviews for infrastructure, cloud, SaaS, and emerging AI initiatives while enforcing Secure-by-Design and Zero Trust principles. Success in your first 6–12 months includes developing a cohesive security roadmap, establishing robust AI and cloud security guardrails, and partnering cross-functionally across Engineering, IT, and Product teams to reduce critical risks while elevating our overall security maturity.

What You Will Bring to ChargePoint:

• Define and maintain enterprise-wide security architecture, standards, and reference designs across network, endpoint, cloud, SaaS, and AI domains.
• Architect and govern secure cloud landing zones, security guardrails, and DevSecOps shift-left practices across AWS, Azure, or GCP environments.
• Establish and enforce Secure-by-Design and Zero Trust Architecture principles, ensuring secure connectivity, micro-segmentation, and least-privilege access.
• Lead the development of our enterprise AI security strategy, establishing controls for Generative AI, Large Language Models (LLMs), model poisoning detection, and responsible AI governance.
• Design enterprise network and endpoint security architecture, overseeing standards for NGFW, ZTNA, EDR, MDM, and secure SD-WAN.
• Oversee SaaS Security Posture Management (SSPM) and establish comprehensive controls for enterprise platforms (e.g., M365, Salesforce, Workday).
• Develop robust Identity & Access Management (IAM) strategies, including SSO, MFA, Privileged Access Management (PAM), and passwordless authentication.
• Conduct comprehensive architecture reviews, threat modeling, and security assessments to identify risks and recommend strategic remediation to executive leadership.
• Partner cross-functionally with Engineering, Product, IT, and Legal teams to integrate security throughout the development lifecycle and align with regulatory frameworks (ISO 27001, SOC 2, GDPR).
• Provide architectural guidance during major cyber incidents, partnering with SOC and Incident Response teams to evaluate events and strengthen future security controls.

Requirements:

• 10+ years of comprehensive cybersecurity experience, with at least 5+ years in a Security Architect or Lead Security Engineering role supporting enterprise-scale global environments.
• Deep technical expertise across network, endpoint, SaaS, cloud, and emerging AI security domains.
• Proven track record of designing and implementing Zero Trust Architectures and managing enterprise risk.
• Experience developing secure cloud architectures (AWS, Azure, or GCP) and implementing DevSecOps practices.
• Strong executive communication and stakeholder management skills, with the courage and ability to influence cross-functional leadership on security best practices.
• Education Requirements: B.Tech/B.E. in Cyber Security, Computer Science, Information Technology, or equivalent practical experience.

Preferred Qualifications:

• Advanced industry certifications such as CISSP, CCSP, CISM, SABSA, TOGAF, or GIAC.
• Cloud-specific security certifications (e.g., AWS Security Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer).
• Experience or certifications related to AI/LLM Security (e.g., CAISP) and data privacy (CIPP).
• Master's degree in a relevant technical or engineering field.