Principal Security Architect

Position Summary

Our client is looking for an experienced Principal Security Architect to join their Security Architecture team as a senior technical leader, providing architecture governance and advisory support across enterprise initiatives.

• Serve as a core member of the Architecture Review Board (ARB), ensuring security requirements are integrated into technology decisions across projects and strategic initiatives.
• Work across infrastructure, network, cloud, identity, data, application, and emerging technology domains, delivering risk-based guidance that supports business goals while protecting enterprise assets.
• Bring 11-15+ years of information security and architecture experience, with strong expertise in enterprise networking, legacy infrastructure, and hybrid environments, acting as a trusted advisor to engineering and business stakeholders.

Key Responsibilities

• Review solutions and designs for security risks, and provide practical guidance and control recommendations to project teams.
• Evaluate architectural exceptions and document security decisions and risk acceptance requirements.
• Participate in design reviews, planning sessions, and technical workshops to identify security requirements early in the process.
• Promote secure-by-design principles while balancing business and operational needs.
• Build strong relationships with stakeholders and translate complex security requirements into clear, business-friendly recommendations.
• Serve as an escalation point for security concerns and recommend improvements to standards and processes.
• Conduct security risk assessments, identify gaps, and recommend compensating controls.
• Support risk exception reviews and assist with threat modeling and architectural risk analysis.
• Ensure all security decisions are properly documented and traceable.

Required Qualifications

Experience

• 11-15+ years of information security, infrastructure, or architecture experience, including 5+ years in a Security Architecture role.
• Experience with Architecture Review Boards or technical governance forums, and supporting large-scale enterprise environments.
• Strong ability to balance security requirements with business objectives across diverse stakeholder groups.

Technical Expertise

Deep expertise in:

• Enterprise networking, datacenter architecture, and network security controls
• Firewalls, segmentation, routing, and switching
• IDS/IPS, proxy/secure web gateway, and VPN/remote access technologies

Strong working knowledge of:

• Azure and AWS
• Identity and Access Management, Zero Trust architectures
• Application security and threat modeling concepts
• Security monitoring and enterprise architecture frameworks