Security architect with 13 years in security engineering and architecture across financial services and SaaS. Designed the zero trust architecture that retired a legacy VPN for 6,500 employees. Brings enterprise reference architectures, risk-based decision making and the ability to align engineering, audit and executives on security direction.
Experience
Principal Security Architect, Meridian Trust Financial (New York, NY)
Mar 2021 – Present
Designed zero trust access with Zscaler and Okta device posture, retiring the legacy VPN for 6,500 employees
Authored 14 security reference architectures for cloud, APIs and data, adopted as mandatory design review standards
Chaired the architecture review board, assessing 90 initiatives a year against NYDFS Part 500 and PCI DSS 4.0
Defined a multi-account AWS landing zone with guardrails that cut misconfiguration findings 64%
Senior Security Engineer, Hollister Cloud Software (Jersey City, NJ)
Aug 2016 – Feb 2021
Designed tenant isolation and encryption key hierarchy for a multi-tenant SaaS platform with 2,000 customers
Led the security workstream of a data center exit to Azure, migrating 300 workloads with no critical findings
A strong Security Architect resume shows the systems you built, the scale they run at, and the measurable effect on speed, reliability or cost. Lead with scope and impact: the size of the systems, budgets or teams you influenced, and the decisions you owned.
Sections, in order
Summary
Experience
Projects
Skills
Education
Length: One page is ideal; two pages are fine with 10+ years of relevant experience.
Summary: Open with your specialty and years of experience, then one or two signature results.
Skills to feature
Programming languages
System design
Cloud platforms (AWS, GCP, Azure)
CI/CD
Testing and code review
Databases and SQL
Observability
Security fundamentals
APIs and integrations
Technical documentation
Example bullet points
Rebuilt the checkout service in Go, cutting p95 latency from 900 ms to 180 ms for 2M monthly users
Introduced contract tests and staged rollouts, reducing production incidents by 45% in two quarters
Migrated 30 services to Kubernetes with Terraform, lowering cloud spend by $250k a year
Tips from recruiters
Group skills by category (for example "Languages: Go, TypeScript") so recruiters and ATS parsers find them quickly.
Link to a repository, demo or write-up for at least one project you can talk about in depth.
Name the stack inside each bullet; keyword matching happens at the bullet level, not only in the skills list.
Recommended templates
Classic (ATS-friendly): Jake's-style LaTeX classic: small caps and hairline rules
Tech (ATS-friendly): Developer style: mono headings and tags, sans body
Modern (ATS-friendly): Clean single column with accent headings and rules
Security Architect resume FAQ
What should a Security Architect resume include?
A Security Architect resume should show the systems you built, the scale they run at, and the measurable effect on speed, reliability or cost. Use these sections in this order: Summary, Experience, Projects, Skills and Education. Lead with scope and impact: the size of the systems, budgets or teams you influenced, and the decisions you owned.
What is the best resume template for a Security Architect?
Classic, Tech and Modern work well for Security Architect roles. They are single-column with standard headings, so applicant tracking systems (ATS) parse them reliably.
How long should a Security Architect resume be?
One page is ideal; two pages are fine with 10+ years of relevant experience.
Which skills should a Security Architect put on a resume?
Prioritize the skills named in the job posting. Common ones for Security Architect roles are Programming languages, System design, Cloud platforms (AWS, GCP, Azure), CI/CD, Testing and code review and Databases and SQL.
How do I write strong Security Architect resume bullet points?
Start with an action verb, say what you did, and end with a measurable result such as latency, uptime and deploy frequency. For example: "Rebuilt the checkout service in Go, cutting p95 latency from 900 ms to 180 ms for 2M monthly users."