Principal Solution Architect, IT Cybersecurity Business Engagement

In this Principal Solution Architect role focused on IT Cybersecurity Business Engagement, you will serve as a senior technical advisor across assigned business and technology portfolios, providing strategy, architecture guidance, and risk oversight to support secure innovation and transformation.

Role Overview

As a Technical Information Security Officer, you will lead cybersecurity engagement for enterprise initiatives by translating complex security concepts into practical business guidance. You will help reduce cyber risk while enabling modernization and business growth through consultative leadership, security reviews, and risk-informed recommendations.

Onsite Location

• Fort Worth, TX (onsite)

Key Responsibilities

• Act as the primary cybersecurity advisor for assigned business and technology areas by building trusted relationships, understanding strategic priorities, and integrating security into enterprise initiatives and decision-making.
• Partner with stakeholders to provide security oversight, architecture guidance, and risk-informed recommendations that support secure innovation and organizational transformation.
• Lead security reviews for applications, systems, cloud services, infrastructure, and technology initiatives to identify risks, recommend mitigations, and ensure alignment with cybersecurity requirements and standards.
• Engage early in project lifecycles to embed cybersecurity requirements into business and technology initiatives from planning through implementation.
• Collaborate with executives, business leaders, technology teams, architects, and cybersecurity partners to align business objectives with security requirements and promote shared accountability for risk management.
• Identify, assess, communicate, and track cybersecurity risks, vulnerabilities, control gaps, and remediation activities across assigned portfolios to ensure risks are understood and managed appropriately.
• Translate threats, vulnerabilities, regulatory requirements, and cybersecurity concepts into actionable business guidance to support informed decision-making and operational resilience.
• Monitor and communicate cybersecurity metrics, risk trends, assessment results, and remediation progress to stakeholders and leadership with actionable insights.
• Promote secure behaviors, cybersecurity best practices, and risk awareness across business and technology organizations to strengthen security culture.
• Identify opportunities to improve security processes, governance, architecture standards, risk management practices, and stakeholder engagement models to increase cybersecurity program maturity.

Minimum Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management, Compliance, Audit, or a related discipline, or equivalent experience/training.
• Experience conducting security assessments, architecture reviews, threat modeling, risk evaluations, vulnerability analysis, or security control reviews for technology solutions and business initiatives.
• 7+ years of experience in cybersecurity, security engineering, security architecture, technology risk management, application security, cloud security, infrastructure security, or related information security disciplines.
• Knowledge of secure software development, DevSecOps, cloud-native architectures, network security, Zero Trust principles, and security-by-design practices.
• Ability to conduct security architecture reviews, threat modeling exercises, technical risk assessments, and security control evaluations.
• Ability to assess cybersecurity implications of business and technology initiatives and provide practical, risk-informed security recommendations.
• Strong stakeholder management and influencing skills with the ability to build trusted relationships across executive leadership, technology teams, architects, engineers, and business partners.

Preferred Qualifications

• Additional education, coursework, or training in cybersecurity, information security, computer science, information systems, engineering, cloud computing, security architecture, or a related technical field.
• Experience conducting security architecture reviews, technology risk assessments, threat modeling, security design reviews, vulnerability management, or cybersecurity consulting activities.
• Experience partnering with business, engineering, architecture, infrastructure, cloud, and application development teams to integrate security requirements into enterprise technology initiatives.
• Experience with cloud platforms and cybersecurity technologies including security tools, vulnerability management solutions, SIEM technologies, identity and access management, endpoint security, network security, application security, or related capabilities.
• Experience applying industry cybersecurity frameworks and best practices including NIST Cybersecurity Framework (CSF), NIST 800-53, CIS Controls, Zero Trust, Secure-by-Design principles, OWASP, ISO 27001, or similar standards.
• Experience assessing and communicating cybersecurity risks for enterprise applications, cloud environments, infrastructure platforms, third-party solutions, and emerging technologies.
• Experience translating complex technical risks, vulnerabilities, and security requirements into actionable recommendations for technology and business stakeholders.
• Professional cybersecurity certifications preferred, such as CISSP, CISM, CCSP, GIAC, Security+, Azure Security Engineer, AWS Security Specialty, CRISC, or comparable certifications.

Security Frameworks, Standards, and Technologies

• NIST Cybersecurity Framework (CSF)
• NIST 800-53
• CIS Controls
• Zero Trust
• Secure-by-Design principles
• OWASP
• ISO 27001
• DevSecOps
• SIEM technologies
• Identity and access management
• Endpoint security
• Network security
• Application security
• Cloud-native architectures
• CISSP, CISM, CCSP, GIAC, Security+, Azure Security Engineer, AWS Security Specialty, CRISC

Travel and Other Job Information

This role includes additional essential functions that may not be listed. Management may modify the job or require other tasks be performed as appropriate, while observing legal obligations, including any collective bargaining obligations.

Benefits

• Travel Perks
• Health Benefits: health, dental, prescription and vision benefits; virtual doctor visits; flexible spending accounts
• Wellness Programs
• 401(k) Program
• Additional Benefits: Member Assistance Program, pet insurance, discounts on hotels, cars, cruises and more

Workplace and Culture

• Inclusion and diversity are part of the foundation of the workforce at American Airlines.
• 20+ Team Member Resource Groups connect team members to customers, suppliers, communities, and shareholders to support full potential and an inclusive environment.

Primary Purpose of the Role

Provide security strategy, architecture guidance, and risk management oversight across assigned business and technology portfolios to reduce cyber risk while supporting innovation, transformation, and business growth.