Principal Enterprise Security Architect

This is a fully remote position, open to applicants in North Carolina, +2 more states.

📋 Description

• Act as the strategic and technical link between Security Operations, CISO leadership, and Enterprise Infrastructure teams.

• Work collaboratively within the Corporate Information Security Office alongside internal and external stakeholders to align corporate initiatives with cybersecurity strategies.

• Sustain and improve the enterprise security posture throughout infrastructure modernization and the transition toward the target architectural state.

• Identify security vulnerabilities across hybrid environments that encompass physical data centers and multi-cloud platforms, engineering robust risk-mitigation solutions utilizing security intelligence and large language models.

• Serve as the primary security architecture advisor to CISO Engineering, translating technical risks into quantifiable business-risk metrics.

• Facilitate architecture design, threat modeling, and remediation sessions with the CISO office, Network Engineering, Endpoint Management, vendors, and partners.

• Create and uphold the Enterprise Security Architecture roadmap covering edge and network defense, cloud security, transport security, endpoint protection, and certificate lifecycle management.

• Utilize technical expertise and vendor solutions to enhance enterprise security intelligence automation.

• Establish, implement, and enforce governance frameworks, standards, and policies for infrastructure security.

• Oversee and provide guidance on the planning and operational execution of CISO Engineering Security Edge workstreams.

• Conduct proactive architectural reviews of global hybrid infrastructure, supported by ongoing monitoring and security assessments.

⛳️ Requirements

• No corp-to-corp candidates will be considered.

• A Bachelor's degree from an accredited college/university in the relevant field is required, or 4 additional years of pertinent experience in lieu of a college degree.

• 15+ years of experience with Edge and Perimeter Protection solutions and designs, including IDS/IPS, WAF/WAAP, and SDWAN remote security.

• 15+ years of practical architectural experience across PKI, NDR, NGFW, WAAP, EDR/XDR, SIEM, IDS/IPS, DNS Protection, Proxy, Webproxy, PAC, Loadbalancer, IP routing, and Data Center designs.

• 10+ years of progressive experience in cybersecurity and infrastructure, including 5+ years in a dedicated architecture role.

• Expert knowledge of SASE/SSE convergence, encompassing SDWAN, CASB, SWG, and ZTNA.

• Strong experience with DNS security, PKI and CAOps, and Proxy.

• Comprehensive understanding and practical application of Zero Trust principles.

• Thorough understanding of NIST CSF, NIST SP 800-53, and CIS Critical Security Controls.

• Experience securing complex hybrid enterprise environments that include physical data centers and cloud platforms such as AWS, GCP, and Azure.

• Proven experience in developing and implementing governance policies and standards for security tools and managing security governance processes/workstreams.

• CCIE and CISSP certifications are mandatory.

• Experience with security incident response activities is required.

• Familiarity with AI application development methodologies is desired.

• Excellent communication skills are essential.

• Candidate must be a US Citizen or Permanent US Resident (Green Card Holder).

• Ability to obtain Public Trust Clearance is required.

• Must pass drug screening, criminal history checks, and credit checks.

• Must have resided in the United States for the past 5 years.

• Cannot have traveled outside the United States for more than 6 months in the last 5 years; military service is excluded.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health, dental, and vision insurance.

• Generous paid time off and holiday schedule.

• Retirement savings plans with company matching.

• Professional development opportunities and training.