Position Summary
Our client is looking for an experienced Principal Security Architect to join their Security Architecture team as a senior technical leader, providing architecture governance and advisory support across enterprise initiatives.
Serve as a core member of the Architecture Review Board (ARB), ensuring security requirements are integrated into technology decisions across projects and strategic initiatives.
Work across infrastructure, network, cloud, identity, data, application, and emerging technology domains, delivering risk-based guidance that supports business goals while protecting enterprise assets.
Bring 11-15+ years of information security and architecture experience, with strong expertise in enterprise networking, legacy infrastructure, and hybrid environments, acting as a trusted advisor to engineering and business stakeholders.
Key Responsibilities
Review solutions and designs for security risks, and provide practical guidance and control recommendations to project teams.
Evaluate architectural exceptions and document security decisions and risk acceptance requirements.
Participate in design reviews, planning sessions, and technical workshops to identify security requirements early in the process.
Promote secure-by-design principles while balancing business and operational needs.
Build strong relationships with stakeholders and translate complex security requirements into clear, business-friendly recommendations.
Serve as an escalation point for security concerns and recommend improvements to standards and processes.
Conduct security risk assessments, identify gaps, and recommend compensating controls.
Support risk exception reviews and assist with threat modeling and architectural risk analysis.
Ensure all security decisions are properly documented and traceable.
Required Qualifications
Experience
11-15+ years of information security, infrastructure, or architecture experience, including 5+ years in a Security Architecture role.
Experience with Architecture Review Boards or technical governance forums, and supporting large-scale enterprise environments.
Strong ability to balance security requirements with business objectives across diverse stakeholder groups.
Technical Expertise
Deep expertise in:
Enterprise networking, datacenter architecture, and network security controls
Firewalls, segmentation, routing, and switching
IDS/IPS, proxy/secure web gateway, and VPN/remote access technologies
Strong working knowledge of:
Azure and AWS
Identity and Access Management, Zero Trust architectures
Application security and threat modeling concepts
Security monitoring and enterprise architecture frameworks