Principal Enterprise Security Architect

This is a fully remote position, open to applicants in North Carolina, +2 more states.

📋 Description

• Act as the strategic and technical liaison between Security Operations, CISO leadership, and Enterprise Infrastructure teams.

• Collaborate with both internal and external stakeholders to ensure alignment of corporate initiatives with cybersecurity strategies.

• Maintain and improve the enterprise security posture during the modernization of infrastructure.

• Identify security vulnerabilities within hybrid physical data centers and multi-cloud environments, engineering resilient solutions through security intelligence and large language models.

• Provide guidance to CISO Engineering regarding security architecture, translating technical risks into quantifiable business-risk metrics.

• Lead architecture design, threat modeling, and remediation discussions with CISO, Network Engineering, Endpoint Management, vendors, and partners.

• Develop and sustain the Enterprise Security Architecture roadmap.

• Align security technology investments with CISO goals and business needs across edge and network defense, cloud security, transport security, endpoint protection, and certificate lifecycle management.

• Enhance security intelligence automation across the enterprise by leveraging technical expertise and vendor solutions.

• Establish, implement, and enforce frameworks, standards, and policies for infrastructure security governance.

• Oversee and provide guidance on the planning and operational execution of CISO Engineering Security Edge workstreams.

• Conduct proactive architectural assessments of global hybrid infrastructure, supported by ongoing monitoring and security evaluations.

⛳️ Requirements

• A BS degree from an accredited College/University in a relevant field is required, or 4 additional years of pertinent experience in place of a college degree.

• Over 15 years of experience with Edge and Perimeter Protection solutions and designs, including IDS/IPS, WAF/WAAP, and SDWAN remote security.

• More than 15 years of hands-on architectural experience with PKI, NDR, NGFW, WAAP, EDR/XDR, SIEM, IDS/IPS, DNS Protection, Proxy, Webproxy, PAC, Loadbalancer, IP routing, and Data Center designs.

• At least 10 years of progressive experience in cybersecurity and infrastructure, with 5+ years in a focused architecture role.

• Expert knowledge of SASE/SSE Convergence, SDWAN, CASB, Secure Web Gateways, and ZTNA.

• Strong experience in DNS security, PKI and CAOps, and Proxy.

• Comprehensive understanding and practical application of Zero Trust principles.

• In-depth knowledge of NIST CSF, NIST SP 800-53, and CIS Critical Security Controls.

• Experience in securing complex hybrid enterprise environments that encompass physical data centers and AWS, GCP, and Azure multi-cloud environments.

• Experience in developing and applying governance policies and standards for security tools, as well as managing Security Governance processes/workstreams.

• Required certifications: CCIE and CISSP.

• Experience with security incident response activities.

• Familiarity with AI application development methodologies.

• Excellent communication skills.

• Must be a US Citizen or Permanent US Resident (Green Card Holder).

• Must be eligible to obtain Public Trust Clearance.

• Must pass drug screening, criminal history, and credit checks.

• Must have resided in the United States for the past 5 years.

• Cannot have traveled outside the United States for more than 6 months in the last 5 years; military service excluded.

• An advanced degree in Computer Science, Cybersecurity, or a related engineering field is preferred.

• Desired training in Microsoft Azure, GCP, AWS Fundamentals/Associate, Splunk, and x-AI Fundamentals.

🏝️ Benefits

• Contract-to-hire position.

• Remote work arrangement.

• Opportunity to collaborate with a US Government client.