Skip to content
Domain

Security Architecture

Security Architecture is about building security into systems from the ground up. You'll design secure networks, applications, and cloud infrastructure. This domain requires deep technical knowledge and the ability to see the big picture.

SA19 certifications

Why SA matters

Security bolted on after the fact never works well. Architects build security into the foundation, making systems secure by design. With cloud adoption and digital transformation, organizations need architects who can design secure, scalable systems.

Key areas

  • Secure system design and implementation
  • Zero-trust architecture
  • Cloud security architecture (AWS, Azure, GCP)
  • Identity and access management (IAM)
  • Network segmentation and microsegmentation
  • Security by design principles

Career path in SA

  1. Entry level
    Start as Security Engineer, implementing security controls
  2. Mid level
    Progress to Security Architect, designing solutions
  3. Senior level
    Advance to Principal Architect or Chief Architect

Essential skills

System designCloud platformsNetwork architectureCryptographyThreat modeling

Typical roles

Pay and outlook for these roles

US figures from the Bureau of Labor Statistics for the closest BLS occupation to each role. BLS doesn't report pay by specialty and counts most of these roles only within a wider occupation, so each card covers every job in it.

Certifications for SA

Entry3

ISC2

Entry

ISC2 Certified in Cybersecurity

Proves you understand core security concepts with no work experience required, on an adaptive exam rewritten in September 2026 with AI topics

Exam
$199
Study
2-3 months

CompTIA

Entry

CompTIA Network+

Vendor-neutral proof that you can address, configure, secure and troubleshoot business networks, tested with performance-based tasks on a 90-minute exam

Exam
$399
Study
3-4 months

Intermediate7

ISC2

Intermediate

Systems Security Certified Practitioner

Proves a year of hands-on security administration, from access control to cryptography, on a two-hour adaptive exam across seven evenly weighted domains

Exam
$249
Study
3-6 months

ISC2

Intermediate

Associate of ISC2 (CISSP Pathway)

The designation ISC2 grants for passing the CISSP exam before you have five years of experience, with six years to qualify

Exam
$749
Study
4-8 months

CompTIA

Intermediate

CompTIA Cybersecurity Analyst+

Tests a security analyst's ability to detect threats, prioritize vulnerabilities and handle incidents using real tool output, now on the CS0-004 exam

Exam
$439
Study
3-6 months

GIAC

Intermediate

GIAC Security Essentials

Proves hands-on defensive skill across Windows, Linux, networks and cloud in a four-hour open-book exam that includes CyberLive virtual machine tasks

Exam
$999
Study
4-6 months

EC-Council

Intermediate

Certified Application Security Engineer - Java

Tests secure Java development across the whole lifecycle, from abuse cases and threat modeling to Spring Security, error handling and Tomcat hardening

Exam
$450
Study
3-5 months

Advanced7

ISC2

Advanced

Certified Cloud Security Professional

Vendor-neutral proof that you can secure cloud architecture, data and operations, and handle the legal and contract side of cloud services

Exam
$599
Study
4-8 months

CompTIA

Advanced

CompTIA SecurityX

CompTIA's senior engineering and architecture exam, formerly CASP+, scored pass/fail and built almost entirely on scenario and requirements-based objectives

Exam
$544
Study
6-12 months

Amazon Web Services

Advanced

AWS Certified Security - Specialty

Proves you can secure a multi-account AWS organization, from detection and incident response to KMS keys, now tested on the SCS-C03 exam

Exam
$300
Study
4-6 months

Expert2

OffSec

Expert

OffSec Web Expert

Proves you can find chained web vulnerabilities by reading source code, then automate the full attack in one unattended script within 48 hours

Exam
$1,749
Study
4-8 months