CS Architect, Sr

The Sr. Security Architect utilizes their knowledge of IT and information security engineering to lead and/or participate in the development of assigned projects or solutions. The Sr. Security Architect focuses on implementing security requirements for assigned projects and solutions while maintaining compliance with internal and externals policies and regulations.

This Sr. Security Architect role focuses on the design, review of AI Security architecture and as well as the deployment and management of AI Solutions at Entergy. It includes (but not limited to) the secure deployment of AI products/services, administration and governance of AI models, deployment and management of AI agents and infrastructure supporting AI use cases. This role will also provide governance and oversight into the consumption of AI, providing input into aspects such as the creation of usage policies, forecasting and optimizing token consumption, model selection while maintaining stringent security controls.

Key Responsibilities

• Architect and secure AI solutions in multi-cloud environment to enable secure deployment of enterprise AI solutions.

• Establish security requirements for cloud-based solutions by evaluating business strategies and ongoing governance requirements, researching cloud infrastructure security standards such as NIST CSF and NERC CIP

• Architect, build, and enforce security guard rails for AI agents, establishing robust governance frameworks to monitor and control agentic behaviors.

• Participate in review of new applications with AI features.

• Lead the product selection or review for new cloud and AI security technologies, conducting Proof of concepts (POC), and technical evaluations.

• Establish and maintain effective relationships with process owners/business units to proactively assess business risks and develop risk mitigation.

• Design and participate in the continued management and maintenance of AI security policies, standards, guardrails, and roadmaps.

• Design and implement security controls for SaaS and PaaS AI integrations to ensure continuous data protection, DLP, and regulatory compliance.

• Participate in security and non-security projects to ensure that security requirements are defined and implemented

• Perform assessments and threat modeling of existing and emerging technologies to ensure they meet Entergy security and compliance requirements

• Evangelize and advocate for information security with stakeholders

• Monitor emerging trends in Information Security and technology and make or suggest changes to Entergy’s security posture as necessary

• Experience needed

• Knowledge and experience in ML pipeline architecture. Concepts of data ingestion, Authentication & Data security, Model Concept Protocol (MCP), and hosting infrastructure including knowledge of how Models are trained.

• Expertise in administering, configuring and monitoring enterprise level AI models.

• Experience building governance frameworks for AI agents, managing agentic permission, tool execution and runtime security controls.

• Must have strong knowledge of Identity and Access Management, API connectivity, MCP, and API security.

• Familiarity with security concepts such as: evasion attacks, data poisoning & training-time attacks, Model extraction/inversion, prompt injection, inference attacks, supply-chain risks for pre-trained models.

• Organizational and time management skills

• Experience in working in partnership with colleagues throughout the enterprise

• Minimum Knowledge, Skills, and Abilities needed

• Familiarity with technologies commonly utilized within an enterprise IT and OT environment

• Strong knowledge of multiple information security domains with an emphasis in Cloud services (AWS, Azure, O365, etc.)

• Operating systems (nix, Windows, IOS, etc.)

• Networking and network security

• APIs

• Secure coding/application security

• Vulnerability Management

• SIEM

• Identity and Access Management

• Penetration testing

• Scripting (Python, PowerShell, Perl, etc.)

• Security process and control development

• Endpoint protection technology

• OT systems and protocols

• Smart Grid technology

• Some knowledge of IT Security regulations and guidance such as NIST, FISMA & ISO27001

• Familiarity with The Open Group Architecture Framework (TOGAF), Open Web Application Security Project (OWASP), Open Security Architecture, National Institute of Standards and Technology (NIST) Cloud Computing Reference Architecture, or other architecture frameworks

• Able to be hands-on with technical engineering and process management skills and the ability to advocate positive transformation within the broader information technology organization

• Able to design & develop reference architectures

• Able to design and develop an API based services layer for consistent integration with the security systems

• Knowledge of security ramifications of energy related regulations (SOX, HIPAA, NERC CIP, FERC, and NRC Nuclear Cyber (10 CFR 73.54)

• Knowledge of security, risk, and control frameworks and standards such as ISO 27001 and 27002, SANS-CAG, NIST, FISMA, COBIT, COSO and ITIL

• Strong writing and analytic ability

• Strong ability to communicate across the enterprise concisely and effectively

• Available to travel

• Self-motivated, with the ability to manage and follow up on multiple tasks simultaneously

• Capable of meeting deadlines

• Education needed

• Bachelor’s degree in computer science, cyber security, information systems, engineering or a related discipline or equivalent work experience. Master’s degree is a plus.

• Certifications

• ISACA or ISC2 certification, such as CISSP, CISM, CISA is a plus

• OSCP is a plus

• Relevant vendor credentials offered by companies such as Amazon AWS, Microsoft Azure, etc. are a plus

• LI-DG1 LI-HYBRID

Location

Texas-Woodlands Texas : The Woodlands || Arkansas : Little Rock || Louisiana : New Orleans || Mississippi : Jackson Job Function: Corporate FLSA Status: Professional Relocation Option: Union description/code: NON BARGAINING UNIT Number of Openings: 1 Req ID: 125199 PS Job Title: CS Architect, Sr Travel Percentage: Up to 25%

An Equal Opportunity Employer, Minority/Female/Disability/Vets. Please click here to view the EEO page, or see statements below.

EEO Statement: The Entergy System of Companies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws. The Entergy System of Companies complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment including, but not limited to, recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

The Entergy System of Companies expressly prohibits any form of unlawful employee harassment based on race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of the Entergy System of Company employees to perform their expected job duties is absolutely not tolerated.

Accessibility: Entergy provides reasonable accommodations for online applicants. Requests for a reasonable accommodation may be made orally or in writing by an applicant, employee, or third party on his or her behalf. If you are an individual with a disability and you are in need of an accommodation for the recruiting process please click here and provide your name, contact number, the accommodation requested and the requisition number that you are requesting the accommodation for. Employee Services will contact you regarding your request.

Responsibilities

• As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.

• Know Your Rights: Workplace Discrimin