Data Security Principal Architect

  • Allentown, PA
  • Posted 22 hours ago | Updated 22 hours ago

Overview

Hybrid
$190,000 - $200,000
Full Time
10% Travel

Skills

Bachelor Degree in Computer Science / Information Security / and or a related field or an equivalent level of experience on a year for year basis
10+ years in information security or data architecture roles

Job Details

PPL is seeking a highly skilled Data Security Principal Architect to join our Cybersecurity organization. The Data Security Principal Architect will serve as a strategic leader and technical expert, responsible for defining and implementing robust data protection frameworks across our digital estate. This hybrid role bridges traditional Microsoft Information Protection and compliance tools with modern AI-centric data security practices, including encryption for LLM pipelines, secure vector stores, and legacy data remediation. This individual will collaborate closely with Security Engineering, Data Governance, Cloud Ops, and AI/ML teams to secure data throughout its lifecycle.

Essential Functions:

  • Define and own the data protection strategy across structured, semi-structured, and unstructured data. Align with regulatory, legal, and business mandates (e.g., NERC, SOX, CCPA, GDPR).
  • Architect and deploy Azure Purview for data classification, and insider risk management policies.
  • Lead secure implementation of AI Data Pipelines (RAG, Vector DBs), TDE for SQL workloads, and explore applicability of Fully Homomorphic Encryption (FHE) and Differential Privacy (DP) for AI/LLM pipelines.
  • Develop strategies for legacy data de-duplication, archiving, and migration. Evaluate long-term retention risk and optimize lifecycle policies.
  • Implement and manage DLP rules across email, endpoints, cloud storage, and collaboration platforms (e.g., Microsoft 365, SharePoint).
  • Provide architectural guidance to product teams and AI/ML engineers. Author security patterns, threat models, and playbooks.
  • Evaluate and integrate third-party tools for data discovery, monitoring, and tokenization. Drive automation around classification and response.
  • Define DSPM Strategy and Architecture
  • Define Data Incident Protocol and Playbook
  • Performs other duties as assigned
  • Complies with all policies and standards
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.