Cybersecurity Architect Principal, AI Guardrail
About FIS
About the team
What you will be doing
As a Principal Architect within the Enterprise Security Architecture team, you'll focus on how FIS builds and uses AI agents safely.
You'll review the security compliance for agents built into our products and the corporate agents our colleagues use every day.
Working closely with security engineering, technology, product and risk teams, you'll make sure innovation moves quickly without putting our clients, data, or reputation at risk.
- Design secure architectures and reference patterns for enterprise infrastructure, products, and solutions which incorporate AI agents.
- Lead threat modeling and security design reviews for AI features, identifying risks and recommending practical fixes before launch.
- Review how agents authenticate, what data and tools they can access, and how their actions are approved, monitored, and logged.
- Create secure-by-design security standards and reusable controls that engineering teams can easily adopt.
- Stay ahead of emerging AI threats and industry frameworks, and mentor architects and engineers across the Cybersecurity organization.
What you bring
- Deep security architecture experience. You have 10+ years in cybersecurity, including several years as a senior or principal architect designing secure systems for large, complex organizations and hold Industry certifications such as CISSP, CCSP, SABSA, or a cloud security architecture certification.
- Hands-on expertise securing AI and LLM systems. You understand the risks that come with AI agents, such as prompt injection, data leakage, excessive permissions, and unsafe tool use, and you know how to design guardrails against them.
- Strong grasp of identity, access, and data protection for autonomous agents. You can design how enterprise product agents and personal agents authenticate, what they're allowed to access, how actions are authorized and logged, and how sensitive data stays protected.
- Working knowledge of agent frameworks and protocols. You're familiar with Model Context Protocol (MCP), LangChain, or similar orchestration tools, and understand how agents connect to data sources and tools securely.
- Ability to turn security principles into practical design patterns. You create reference architectures and secure-by-design standards that engineering and product teams can actually adopt, aligned with frameworks like NIST AI RMF, OWASP Top 10 for LLMs, and ISO/IEC 42001.
- Influence and clear communication. You can explain AI risk, guide engineers through technical trade-offs, and build consensus across security, product, and technology teams in a regulated financial services environment.
Bonus if you have
- Experience designing secure cloud infrastructure in AWS or Azure, including cloud authentication and identity federation, least-privilege access, network segmentation, secrets management, and data protection.
- Background in financial services or another highly regulated industry.
- Knowledge of emerging AI regulations and governance requirements, such as the EU AI Act, and experience helping teams translate them into practical design controls.
What we offer you
- A multifaceted job with a high degree of responsibility and a broad spectrum of opportunities.
- A modern, international work environment and a dedicated and motivated team.
- A competitive salary and benefits.
- A work environment built on collaboration, flexibility and respect.
Privacy Statement
FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice .
EEOC Statement
Sourcing Model
Not included in the source posting: what you'll do.
Skills
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.