Senior IT Security Architect
Phoenix, AZ · On-site
Design and govern Azure landing zones, managed identity patterns, Key Vault and private-endpoint baselines, CSPM policy, and Terraform/Bicep security guardrails. Lead security architecture for ...
Phoenix, AZ · On-site
Design and govern Azure landing zones, managed identity patterns, Key Vault and private-endpoint baselines, CSPM policy, and Terraform/Bicep security guardrails. Lead security architecture for ...
Phoenix, AZ · On-site
Design and govern Azure landing zones, managed identity patterns, Key Vault and private-endpoint baselines, CSPM policy, and Terraform/Bicep security guardrails. Lead security architecture for ...
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Glendale, AZ · On-site
$18.25/hr
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
New
Glendale, AZ · On-site
$18.25/hr
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
New
Preferred Qualifications • Cloud HSM experience (AWS CloudHSM, Azure Key Vault Managed HSM, GCP Cloud HSM). • Certification such as CISSP, CISM, CCSP, or vendor-specific HSM certification. • ...
Preferred Qualifications • Cloud HSM experience (AWS CloudHSM, Azure Key Vault Managed HSM, GCP Cloud HSM). • Certification such as CISSP, CISM, CCSP, or vendor-specific HSM certification. • ...
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Chandler, AZ · On-site
$50 - $75/hr
Preferred Qualifications Cloud HSM experience (AWS CloudHSM, Azure Key Vault Managed HSM, GCP Cloud HSM). Certification such as CISSP, CISM, CCSP, or vendor-specific HSM certification. Experience ...
Chandler, AZ · On-site
$50 - $75/hr
Preferred Qualifications Cloud HSM experience (AWS CloudHSM, Azure Key Vault Managed HSM, GCP Cloud HSM). Certification such as CISSP, CISM, CCSP, or vendor-specific HSM certification. Experience ...
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. * Valid driver's license, auto insurance, and personal ...
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. * Valid driver's license, auto insurance, and personal ...
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. * Valid driver's license, auto insurance, and personal ...
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. * Valid driver's license, auto insurance, and personal ...
Phoenix, AZ · On-site
$18.25/hr
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Phoenix, AZ · On-site
$18.25/hr
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Phoenix, AZ · On-site
$18.25/hr
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
Phoenix, AZ · On-site
$18.25/hr
Prior cash handling, cash drawer/vault management experience. * Bilingual (English/Spanish) is a plus and may be required for certain locations. What You'll Do - Essential Duties and Responsibilities
$21.4K - $28.2K
4% of jobs
$28.2K - $34.9K
10% of jobs
$40.3K is the 25th percentile. Wages below this are outliers.
$34.9K - $41.6K
14% of jobs
$41.6K - $48.4K
16% of jobs
The median wage is $54.1K / yr.
$48.4K - $55.1K
7% of jobs
$55.1K - $61.8K
10% of jobs
$65.2K is the 75th percentile. Wages above this are outliers.
$61.8K - $68.6K
29% of jobs
$68.6K - $75.3K
4% of jobs
$75.3K - $82K
3% of jobs
$82K - $88.8K
1% of jobs
$88.8K - $95.5K
2% of jobs
$21.4K
$57.2K
$95.5K
| Aspect | Vault Manager | Security Supervisor |
|---|---|---|
| Certifications | Security certifications, sometimes specialized in vault or safe management | Security management certifications, such as SIA or ASIS certifications |
| Work Environment | Primarily in banks, financial institutions, or secure facilities managing vault operations | In various settings including corporate, retail, or industrial sites overseeing security teams |
| Employer & Industry | Financial institutions, vault service providers | Security firms, corporations, retail chains |
Vault Managers focus on managing vault operations, security, and access control within financial or secure facilities. Security Supervisors oversee overall security teams, policies, and procedures across diverse environments. While both roles require security knowledge, Vault Managers specialize in vault-specific security, whereas Security Supervisors have broader security responsibilities.

Full-time
Re-posted 4 days ago
6.8
Based on 819 frontline employees who took The Breakroom Quiz
27th of 122 rated grocery stores
Please note this position is based in our Phoenix, AZ Support Office. The Sr. IT Security Architect is the lead technical architect for Sprouts' IT Security program, designing and driving security architecture across the enterprise.
The Sr. IT Security Architect mentors security engineers and analysts, leads through influence across infrastructure, network, cloud, and application teams, and carries architectural decisions to the Architecture Review Board (ARB) with a recommended path. The role translates business, compliance, and regulatory requirements into concrete, implementable designs and standards that survive implementation and audit.
Sprouts runs an Azure-first cloud stack-including Databricks, Synapse/Fabric, and Azure Virtual Desktop-alongside store systems, point-of-sale, and payment infrastructure under PCI-DSS. The role requires fluency across both. Architectural decisions align with NIST CSF, ISO 27001, CIS Controls, SOX, PCI-DSS, and applicable privacy regulations.
Periodic after-hours or weekend work may be required to support security escalations or major incidents.
Essential FunctionsEssential job functions
Author reference architecture and design documents across all security domains. Designs must be implementable, testable, and resistant to drift.
Lead security architecture positions at the Architecture Review Board (ARB). Define and enforce architectural gates for development-to-production progression. Present options, trade-offs, and a recommended path for each decision.
Lead complex, cross-functional security architecture initiatives of strategic importance to the organization. Advise senior leadership on security matters of significant impact, and provide input to department goals, planning, and budget priorities.
Design and govern Azure landing zones, managed identity patterns, Key Vault and private-endpoint baselines, CSPM policy, and Terraform/Bicep security guardrails. Lead security architecture for Databricks, Synapse, and Fabric data platforms, including data-lake segmentation and access control.
Design integration patterns for Microsoft Entra ID and Okta, conditional access, MFA strategy, B2C customer identity, Azure Virtual Desktop access, and BYOD access. Architect CrowdStrike Identity Protection integration with the identity estate.
Partner with network architecture on segmentation for headquarters and store environments, SASE/CASB/NPA architecture (Netskope), edge protection (Cloudflare), and vendor/BYOD network zones. Drive zero-trust maturity across corporate, retail, and cloud perimeters.
Set architectural direction for EDR/EPP/IDP (CrowdStrike), endpoint management (Tanium), CASB (Netskope), and email security (Proofpoint). Guide the decommissioning of legacy platforms and the onboarding of replacements.
Design DLP, data classification (BigID), consent management, and data retention patterns. Govern the security and privacy architecture of AI platforms, vendors, and internal AI tooling, including model-training and data-handling terms.
Support vendor risk assessments, review SOC 2 Type 2 reports, evaluate vendor SSO/SCIM/RBAC/audit-logging, and author SDLC security standards (secrets management, logging baselines, secure deployment patterns).
Design security architecture for store systems, point-of-sale, handheld devices, and third-party store integrations. Ensure PCI-DSS alignment across applicable environments.
Draft and maintain architectural standards and patterns: naming conventions, IaC security patterns, API gateway baselines, cloud tagging, and logging/compliance defaults.
Map architectural initiatives to NIST CSF (Govern, Identify, Protect, Detect, Respond, Recover), CIS Controls, SOX, and PCI-DSS, borrowing from ISO 27001 and other best practices where applicable. Contribute to security policies and standards.
Provide guidance, coaching, and training in security architecture across the Company within area of expertise - to security engineers and analysts as well as partners in infrastructure, network, cloud, and application teams.
Participate in root cause analysis and architectural remediation for incidents, breaches, and HR/Legal investigations. Translate lessons learned into architectural changes.
Comply with and contribute to change control, development lifecycle, and release management policies. Ensure architectural changes are represented at CAB and documented appropriately.
Knowledge, Skills, Abilities and Physical RequirementsKnowledge Skills & Abilities
Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent experience in a related discipline.
10+ years of enterprise security architecture experience spanning cloud, identity, network, endpoint, application, and data security.
3+ years of hands-on Azure security architecture: landing zones, Key Vault, managed identity, private endpoints, Microsoft Sentinel, and Azure-native data platforms (Databricks, Synapse, Fabric).
Deep identity architecture experience with core protocols (OAuth/OIDC, SAML, SCIM, federation), conditional access, MFA strategy, and B2C customer identity. Hands-on experience with Microsoft Entra ID and Okta preferred.
Expert-level experience with EDR/EPP and Identity Protection platforms (CrowdStrike preferred).
Expert-level experience with enterprise DLP, data classification (e.g., BigID), and CASB/SASE architecture (Netskope preferred).
Expert-level experience with enterprise email security (Proofpoint preferred) and edge protection (Cloudflare preferred).
Working experience with Infrastructure-as-Code security: Terraform and/or Bicep, policy-as-code, and CSPM platforms.
Fluency with security and compliance frameworks: NIST CSF, CIS Controls, PCI-DSS, SOX, and applicable privacy regulations (CCPA).
Retail, PCI, and store-systems experience strongly preferred (POS, payment, store network, third-party retail integrations).
CISSP, CCSP, or equivalent security certification required.
Demonstrated track record of authoring architecture documentation that survives review, implementation, and audit.
Proficiency with monitoring, logging, change management, and CMDB tooling (ServiceNow experience a plus).
Employment Type: FULL_TIMEGet the full story on Breakroom
Sourced by ZipRecruiter
Retail
10,000+ Employees
Phoenix, AZ, US
2002