Home My Resume Saved Jobs Matches Feedback

2817 Cloud Architect jobs in Aurora,CO

New, Posted 19 hours ago

Apply Directly

Senior / Principal Security Architect (AI/OT)

Xcel Energy

Denver, CO 80219

$112,200-$183,200/yr

Hybrid~ 29 minEducation AssistanceHealth InsurancePaid Time OffRetirement Benefit

Minimum of 8 years' experience in IT including 5 years' direct experience in IT engineering and cyber security
5 years of experience in systems architecture or systems engineering
10 years of experience in Information Security
3 years of experience designing complex systems
3 years of experience with systems integration and engineering
Strong oral and written communication skills
Must be able to understand and respond to clients' business needs
Demonstrated experience collaborating with internal employees, third parties, and management to develop solutions and ensure stakeholder buy-in
Ability to influence without direct authority
Experience with technology implementation projects for enterprise-scale organizations
Hands-on experience with AI models and solutions (including generative AI/LLMs), such as model selection/integration, training or fine-tuning, retrieval-augmented generation (RAG), inference services, and model monitoring/operations in a production environment
Strong understanding of AI security threats and mitigations (e.g., prompt injection, insecure tool/function calling, data leakage, jailbreaks, model inversion/extraction, poisoning, and supply-chain risks)
Experience with enterprise IAM patterns and controls (e.g., SSO/federation, OAuth2/OIDC, RBAC/ABAC, conditional access, managed identities/service principals, and PAM), applied across enterprise applications and cloud platforms; experience applying these patterns to AI/ML platforms and data services is a plus
Experience with IAM architecture and/or operations, such as identity governance (IGA), access reviews and attestations, role engineering, conditional access, and privileged access management (PAM)
Knowledge of relevant regulations and compliance requirements such as NERC-CIP, TSA, and SOX, plus emerging AI/ privacy and IAM-related regulatory expectations as applicable
Experience partnering with product, data, platform, and MLOps /DevOps teams to deliver secure AI solutions and to implement IAM controls (e.g., least privilege access, service identity, and privileged access workflows)
Familiarity with AI governance and risk management practices (e.g., model inventory, documentation, human oversight, third-party model/vendor risk)
OT/ICS Security Architecture: Work with the business to define security patterns and reference architectures for industrial control environments (e.g., SCADA, DCS, PLC/HMI)
Network Segmentation & Remote Access: Define and govern segmentation (zones/conduits), secure remote access, and monitoring strategies for OT networks and vendor/contractor connectivity
Governance & Standards: Develop security control baselines, hardening standards, and exception processes for OT assets and supporting infrastructure; ensure compliance drift is managed
Operational Collaboration: Partner with controls engineering, field technicians, plant operations, and maintenance teams to implement security improvements that work in real-world operating environments
Incident Readiness: Improve detection and response for OT environments, including logging/telemetry requirements, playbooks, and tabletop exercises with operations
Documentation and Reusability: Create products such as use cases and implementation patterns
Regulation and Compliance: Ensure adherence to regulatory frameworks such as NERC CIP and TSA Security Directive 2, including applicability to OT facilities and supporting IT/cloud services where used
Preferred: Information Security experience in the electric utility industry
Preferred: Experience with technology implementation projects for enterprise-scale organizations
5+ years of experience in security architecture, cybersecurity engineering, or control systems engineering, including work that interfaces with industrial/OT environments
Hands-on experience with OT/ICS technologies and environments (e.g., SCADA, PLC/HMI, DCS) and the operational constraints of critical infrastructure
Knowledge of network segmentation concepts and secure remote access patterns for OT/vendor connectivity
Experience with OT security frameworks and guidance (e.g., IEC 62443, NIST SP 800-82) and applying them pragmatically in operating environments
Experience working with vendors/contractors supporting industrial equipment and control systems, including secure access and support models
Certifications such as GICSP, CISSP, CCSP, CCSK, or AWS Certified Security
Knowledge of relevant regulations and compliance requirements such as NERC CIP, TSA, and 10 CFR 810