Principal Enterprise Security Architect

Role: Principal Enterprise Security Architect

Job Location: Morrisville, NC; Falls Church, VA; or Eagan, MN (Remote)

Duration: 6+ Months

Contract Type: W2 Only

Position Overview:

• We are seeking a visionary Principal Enterprise Security Architect to serve as the strategic and technical bridge between our security operations and CISO leadership, and enterprise infrastructure.
• Operating within the Corporate Information Security Office (CISO), you will collaborate directly with internal and external stakeholders to align corporate initiatives with robust cyber defense strategies.
• The primary focus of this role is to ensure the preservation and continuous enhancement of our security posture throughout our continuing infrastructure evolution process and into the ultimate architectural end-state.
• You will identify structural security gaps across our hybrid environment, comprising multiple physical data centers and multi-cloud environments, engineering resilient solutions to mitigate them, while using SI and LLM .

Experience Years: 10+ years’ relevant experience

• Act as the primary security architecture advisor to Client CISO ENG, translating deep technical risks and structural vulnerabilities into clear business-risk metrics.
• Lead collaborative design, threat modeling, and remediation sessions across the CISO office, Network Engineering teams, Endpoint Management teams, and external vendor/partner organizations.
• Formulate and author Enterprise Security Architecture roadmap, ensuring the security solution/technology investments align with CISO goals and business needs, in the areas of edge/network defense, cloud security, transport security, endpoint protection, and certificate lifecycle management. Using skillset along with vendor products to continue moving the enterprise security towards SI automation.
• Establish and enforce governance and security policies in the infrastructure.
• Manage and/or advise on planning and operation of all CISO Engineering Security Edge workstreams.
• Conduct rigorous, proactive architectural reviews of the global hybrid footprint to identify structural weaknesses through continuous monitoring.

Required Skills:

• Strong experience with SASE/SSE Convergence – SDWAN, (CASB), Secure Web Gateways (SWG), and Zero Trust Network Access (ZTNA).
• 15+ years with strong experience with Edge and Perimeter Protection solutions and designs - IDS/IPS, WAF/WAAP, SDWAN remote security
• Strong experience with Network service security and infrastructure – DNS security, PKI and CAOps, Proxy
• Strong understanding of Zero Trust tenets and principles, and practical application of the principles.
• In-depth understanding of Security Framework Alignment: Map all infrastructure patterns to prevailing industry standards and best practices, specifically NIST CSF / SP 800-53 and the CIS Critical Security Controls.
• In-depth understanding of hybrid large scale enterprise: Strong history of assessing and securing complex enterprise environments spanning multiple physical data centers and comprehensive multi-cloud environments from various cloud service providers. (AWS, Google Cloud Platform, Azure)
• 10+ years of progressive experience in cybersecurity and infrastructure, with 5+ years in a dedicated architecture role directly influencing architectural decisions and priority.
• 15+ years with hands-on architectural experience across the entire technical scope: PKI, NDR, NGFW, WAAP, EDR/XDR, and SIEM), IDS/IPS, DNS Protection, Proxy, Webproxy, PAC, Loadbalancer, IP routing, Data Center designs
• Experience with development and application of governance policy and standards in application of security tools, and Security Governance process/workstream management, while working to leverage SI to automate processes
• Experience with security Incident response activities.
• Understanding AI application development methodology

Industry Certifications Required:

• CCIE and CISSP.

Desired Training:

• Microsoft Azure, Google Cloud Platform, AWS Fundamentals/Associate, Splunk, x-AI Fundamentals