Partner company seeking an experienced Principal Enterprise Security Architect to lead enterprise-wide cybersecurity strategy and architecture across complex hybrid infrastructure environments.
Responsibilities
Develop and maintain the enterprise security architecture roadmap across network defense, cloud security, endpoint protection, transport security, and certificate lifecycle management.
Conduct comprehensive architectural reviews of hybrid infrastructure environments, identifying vulnerabilities and security gaps.
Design, evaluate, and optimize security solutions spanning IDS/IPS, NGFW, WAAP, WAF, secure web gateways, proxies, DNS protection, load balancing, and SDN.
Define and implement security architecture principles across AWS, Azure, and GCP, incorporating Zero Trust, SASE, SSE, CASB, and ZTNA.
Serve as principal security architecture advisor to CISO engineering leadership.
Lead architecture reviews, threat modeling, and remediation initiatives with cross-functional teams.
Establish and maintain security policies, standards, and governance aligned with NIST CSF, NIST SP 800-53, and CIS Controls.
Guide security engineering capabilities leveraging security intelligence, AI, and automation.
Oversee security workstreams involving PKI, certificate authority operations, NDR, EDR/XDR, SIEM, and transport security.
Contribute to incident response and continuously improve architectural controls.
Requirements
Bachelor's degree in engineering, IT, cybersecurity, or related discipline, or equivalent experience (plus four years without a relevant degree).
Extensive cybersecurity and infrastructure experience, including 10+ to 15+ years in key security architecture and infrastructure domains.
Required certifications: CCIE and CISSP.
Deep hands-on architectural experience with enterprise network defense, IDS/IPS, NGFW, WAF/WAAP, SD-WAN security, DNS protection, proxies, load balancers, IP routing, and data center architecture.
Proven experience securing large-scale environments across AWS, Azure, and GCP.
Strong knowledge of PKI, certificate lifecycle management, NDR, EDR/XDR, SIEM, cloud security, endpoint protection, and secure transport.
Practical experience with Zero Trust, SASE/SSE, CASB, secure web gateways, and ZTNA.
Ability to develop security policies, enforce standards, and align designs with NIST and CIS frameworks.
Familiarity with automation and emerging technologies.