Cybersecurity Architects

Employers

Cybersecurity architects are employed by any company (but most often mid-size and large corporations), organization, or government agency that needs to design, build, and maintain the digital infrastructure that protects its IT systems and data from cyberattacks and other misuses. In the federal government, cybersecurity architects work for the U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency, which is responsible for strengthening cybersecurity and infrastructure protection. They also work for the U.S. Departments of Defense, Commerce, and State, as well as many other departments and bureaus.

An experienced cybersecurity architect could launch his or her own consulting firm. Working as a consultant offers the opportunity to have more control over one’s work schedule and the types of clients he or she works with. Consulting can be very lucrative, but it’s important to remember that consultants work long hours to establish and maintain their businesses, manage staff, and handle tasks such as marketing, accounting, invoices, and office upkeep. Plus, there is no promise that even a skilled consultant will be able to attract enough clients to pay the bills.

Starting Out

Cybersecurity architects typically have at least three years of experience in past positions as cybersecurity specialists, cybersecurity analysts, IT auditors, penetration and vulnerability testers, or cybercrime analysts.

ISC2 surveyed its members regarding career entry methods and other issues and found that pathways to cybersecurity occupations are changing. Entering the field with an IT background is still the most common route taken, but nontraditional methods are growing in popularity. ISC2 reported more than half of cybersecurity professionals got their start outside of the information technology industry. Seventeen percent entered the career from an unrelated occupation, 15 percent became qualified after working in another field but completing cybersecurity education, and 15 percent prepared for the field by investigating cybersecurity concepts on their own.

Aspiring and current cybersecurity architects can obtain job leads by working with a tech recruiter, joining IT security–focused networking groups (and checking out MeetUp.com to identify groups in their area), attending career fairs and other networking events, contacting potential employers directly about job opportunities, using the resources of their college’s career services office, creating a profile on LinkedIn, and joining professional associations (which offer mentoring programs, networking events, and job listings).