Cybersecurity Enterprise Architect

Nelnet is a diversified and innovative company committed to enriching lives through the power of service as a student loan servicer professional services company consumer loan originator and servicer payments processor renewable energy solutions and K-12 and higher education expert. For over 40 years Nelnet has been serving its customers associates and communities.

The perks of working at Nelnet go beyond our benefits package. When you join the Nelnet team youre part of a community invested in the success of each individual. That support comes through in our work as we are united by our mission of creating opportunities for people where they live learn and work.

Work with a team of experts to architect design and lead the implementation of enterprise-scale cybersecurity solutions that protect critical infrastructure data and AI-enabled systems across complex multi-cloud environments (AWS Azure GCP). This role serves as a key architect and evangelist for secure digital transformation ensuring consistent and scalable protection strategies across traditional cloud-native and AI-driven platforms. Provides both deep technical leadership and strategic influence across the organization mentoring teams and driving innovation in both security architecture and emerging technology adoption.

This position requires work in support of the Companys contract with the United States Department of Education (ED). As such the United States Government requires that any applicant for this position must complete United States Government security clearance. Effective June 1 2018 ED has informed Nelnet that security clearance applications for foreign nationals are not being accepted or light of this direction from ED Nelnet will be unable to hire applicants without United States citizenship for such positions.

JOB RESPONSIBILITIES:

• Architect and implementsecure-by-design cybersecurity components in enterprise-wide systems including those incorporating AI/ML technologies across cloud platforms (AWS Azure GCP) hybrid environments and on-prem infrastructure.

• Define and enforce architectural standards for secure cloud adoption container security identity and access management (IAM) network segmentation and integration of AI models services and data pipelines into business processes and products.

• Design cybersecurity strategies that integrate AI/ML components securely addressing risks such as model poisoning adversarial inputs and data exposure.

• Lead the secure integration of AI into cloud-native platforms and DevSecOps pipelines including AI model deployment governance and monitoring.

• Address complex challenges in security integration interoperability and multi-cloud or hybrid platforms including secure AI lifecycle management.

• Act as a technical expert on security architecture for traditional systems and next-gen platforms using generative AI large language models (LLMs) and machine learning.

• Serve as a technical expert in security architecture including cloud workload protection cloud security posture management (CSPM) and compliance alignment.

• Collaborate with IT CloudOps Security Data Science and business units to ensure secure system design aligned to enterprise goals.

• Lead security architecture reviews and cloud adoption efforts including migrations SaaS evaluations and third-party integrations.

• Influence strategic direction by communicating the value and necessity of cybersecurity architectureincluding emerging AI riskacross leadership IT and business lines.

ADDITIONAL RESPONSIBILITIES:

• Define reference architectures and security patterns for securing AI/ML pipelines on cloud platforms.

• Guide the application of Zero Trust principles to multi-cloud environments identity management and federated data systems.

• Contribute to the development and enforcement of enterprise cloud security policies standards and compliance controls (e.g. NIST ISO FedRAMP SOC 2).

• Stay ahead of evolving cloud and AI security trends regulatory requirements (e.g. NIST) and best practices.

• Coach and mentor both engineers and architects on secure development practices for cloud-native and AI-enabled applications.

EDUCATION:

• Bachelors degree in Information Security or related field and/or equivalent combination of education and experience.

EXPERIENCE:

• At least 10 years of experience in an information technology or security engineering department preferably as a Lead Engineer.

• 10 years of experience in cybersecurity or information security roles with at least 5 years in a leadership or architecture capacity.

• 5 years of hands-on experience with cloud platforms (AWS Azure GCP) including native security tools and cloud infrastructure design.

• Experience securing large-scale mission-critical enterprise environments including hybrid and multi-cloud architectures.

• Demonstrated experience with AI security or machine learning governance is strongly preferred.

• Strong technical experience with the implementation of cybersecurity technologies in diverse enterprise environments to include IDS IPS EDR DLP.

• Ability to obtain and maintain security clearance is required.

COMPETENCIES SKILLS/KNOWLEDGE/ABILITIES:

• Effectively manage objectives priorities tradeoffs and risks for the organization.

• Ability to foster an environment of experimentation and continual improvement.

• Provide both technical leadership and mentorship of people managers.

• Organize plan prioritize and follow through on work.

• Use good judgement problem-solving and decision-making skills.

• Work in a fast-paced environment where deadlines are essential.

• Strong communication and interpersonal skills with technical & non-technical clients as well as executive staff.

• Build strong relationships between cybersecurity IT and business users.

• A working knowledge of industry security best practices.

Compensation range for this position is - $125000 - $150000 annually depending on experience.

#LI-Hybrid

#LI-CW1

Our benefits package includes medical dental vision HSA and FSA generous earned time off 401K/student loan repayment life insurance & AD&D insurance employee assistance program employee stock purchase program tuition reimbursement performance-based incentive pay short- and long-term disability and a robust wellness program. Click here to learn more about our benefits: Benefits & Perks - Nelnet Inc.

Nelnet is committed to providing a welcoming and respectful workplace where all associates have the opportunity to succeed. As an Equal Opportunity Employer we ensure that all qualified applicants are considered for employment. Employment decisions are made without regard to race color religion/creed national origin gender sex marital status age disability use of a guide dog or service animal sexual orientation military/veteran status or any other status protected by federal state or local law. We value the unique contributions of every team member and believe that a positive work environment benefits everyone.

Qualified individuals with disabilities who require reasonable accommodations in order to apply or compete for positions at Nelnet may request such accommodations by contacting Talent Acquisition at

Nelnet is a Drug Free and Tobacco Free Workplace.

Use of Artificial Intelligence in Hiring

We may use automated or artificial intelligence enabled tools to assist with the initial review of applications such as identifying relevant skills or experience. These tools are used to support human review and do not make hiring decisions. A recruiter reviews applications and determines which candidates move forward in the hiring process. For more information see our Privacy Policy and Pre-Use Notice: Automated Tools in Hiring